Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.mft
File: aWpeznnL3C_r_HF6MnDeyDCAhdM.mft (raw, json)
Hash identifier: FiMWWEB7sOsw4Rsbc5PkxB91EH3PX6z6YD1jo1QBc9o=
Subject key identifier: 24:24:41:2D:CE:0D:FB:B2:88:35:9B:38:87:7A:EB:28:05:57:C4:69
Authority key identifier: 69:6A:5E:CE:79:CB:DC:2F:EB:FC:71:7A:32:70:DE:C8:30:80:85:D3
Certificate issuer: /CN=696a5ece79cbdc2febfc717a3270dec8308085d3
Certificate serial: 01A0CCDA343FE5F2671DDB23356DF96A7191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWpeznnL3C_r_HF6MnDeyDCAhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.mft
Manifest number: 2C
Signing time: Wed 23 Sep 2026 06:00:47 +0000
Manifest this update: Wed 23 Sep 2026 06:00:47 +0000
Manifest next update: Thu 24 Sep 2026 06:00:47 +0000
Files and hashes: 1: Sn5dXPePTxw_-scztJAILPyJvn4.roa (hash: 2qiqIThOytILqksly7edBKOLfun0GmMPmkxmZW0F0hM=)
2: aWpeznnL3C_r_HF6MnDeyDCAhdM.crl (hash: p/SFOvGGFT65/Z4wJlWuz2ihDOxfhOAgXo2F+LAnd6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWpeznnL3C_r_HF6MnDeyDCAhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:34:3f:e5:f2:67:1d:db:23:35:6d:f9:6a:71:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a5ece79cbdc2febfc717a3270dec8308085d3
Validity
Not Before: Sep 23 06:00:47 2026 GMT
Not After : Sep 24 06:00:47 2026 GMT
Subject: CN=2424412dce0dfbb288359b38877aeb280557c469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:74:9f:39:b1:0c:13:4c:fb:9f:ce:1c:8a:
c9:61:1e:e5:bc:70:72:86:35:e9:f3:9d:50:7c:e7:
cb:c8:9a:22:3d:7b:0a:f2:f6:aa:79:84:35:81:a4:
a8:21:23:6c:ee:a2:24:20:4f:74:2d:6c:3d:24:78:
84:14:74:54:03:fd:32:46:c1:73:f0:4d:c4:24:85:
df:b1:a5:d9:63:cb:55:55:ec:d3:0c:35:2c:9b:6b:
c6:73:5b:ea:46:b3:d6:ab:64:9f:84:68:21:a3:2d:
ff:f4:5a:96:e4:8f:ef:6a:73:e9:ef:31:6a:87:5d:
67:df:8b:66:3d:21:23:51:8e:be:1c:b6:0a:d2:6f:
f9:f7:ec:cd:50:67:bf:b3:ea:fd:63:c7:17:6d:bd:
11:86:d9:76:90:1a:fa:37:b0:1f:0f:b8:63:c9:65:
3b:d8:da:58:bb:7a:30:5d:54:1c:60:5e:dc:44:98:
1e:12:3b:b2:7e:59:59:a6:ec:2c:d8:79:0a:44:07:
42:f0:fd:39:72:dd:56:b3:aa:a7:43:32:43:86:60:
dd:bc:a9:84:cb:d7:f7:b9:e3:9d:fd:38:31:c9:d7:
3d:27:5a:d9:fb:d5:2b:54:52:a5:36:06:b6:48:be:
9d:c7:ea:d6:e2:20:5c:5d:63:41:1a:a4:5b:a8:b7:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:24:41:2D:CE:0D:FB:B2:88:35:9B:38:87:7A:EB:28:05:57:C4:69
X509v3 Authority Key Identifier:
keyid:69:6A:5E:CE:79:CB:DC:2F:EB:FC:71:7A:32:70:DE:C8:30:80:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWpeznnL3C_r_HF6MnDeyDCAhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/485a7a-d05f-43ed-8675-726e3e346b66/1/aWpeznnL3C_r_HF6MnDeyDCAhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8e:95:e7:fb:10:8b:19:ca:85:c1:ba:a2:e0:62:9f:20:3f:
a8:93:b3:86:48:e6:e8:b0:7c:18:f8:45:0a:f4:13:6c:f3:3d:
cb:3d:37:af:24:3e:39:52:44:d4:1c:89:9b:e8:b2:05:a9:36:
34:c8:12:59:1a:dd:93:cc:95:28:fa:95:61:22:95:00:7a:cd:
bc:d2:8a:28:35:91:f3:8e:17:e8:a2:d9:13:07:d3:ec:5d:26:
cb:9a:af:c3:76:41:e3:de:cf:60:b6:96:6c:3c:0d:99:5b:7e:
d8:fa:7d:c1:2b:2a:7f:f2:82:0a:a5:da:45:05:99:79:76:04:
48:a6:fd:df:43:00:42:d6:d0:3e:5e:de:1a:f8:d0:62:cb:04:
aa:73:80:74:db:23:35:42:a7:39:47:c4:2c:e4:ff:39:70:89:
b5:cb:17:7b:51:6e:4f:2f:ac:1c:40:26:20:c5:0c:f9:9e:15:
b7:d4:02:3b:a2:a4:4c:dc:3e:2d:fd:14:01:32:f9:7f:d3:dd:
ad:63:b8:9b:53:be:3c:06:60:b6:a9:9e:79:42:0a:92:d4:2c:
ae:8f:19:62:e1:2e:4f:c6:fe:5f:34:5c:e9:7a:cb:d3:6c:52:
f5:93:8c:ce:21:b7:0c:53:01:c4:9b:01:68:a2:bb:ec:5e:e5:
85:57:47:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDM2jQ/5fJnHdsjNW35anGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmE1ZWNlNzljYmRjMmZlYmZjNzE3YTMyNzBkZWM4MzA4
MDg1ZDMwHhcNMjYwOTIzMDYwMDQ3WhcNMjYwOTI0MDYwMDQ3WjAzMTEwLwYDVQQD
EygyNDI0NDEyZGNlMGRmYmIyODgzNTliMzg4NzdhZWIyODA1NTdjNDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0390nzmxDBNM+5/OHIrJYR7lvHBy
hjXp851QfOfLyJoiPXsK8vaqeYQ1gaSoISNs7qIkIE90LWw9JHiEFHRUA/0yRsFz
8E3EJIXfsaXZY8tVVezTDDUsm2vGc1vqRrPWq2SfhGghoy3/9FqW5I/vanPp7zFq
h11n34tmPSEjUY6+HLYK0m/59+zNUGe/s+r9Y8cXbb0Rhtl2kBr6N7AfD7hjyWU7
2NpYu3owXVQcYF7cRJgeEjuyfllZpuws2HkKRAdC8P05ct1Ws6qnQzJDhmDdvKmE
y9f3ueOd/Tgxydc9J1rZ+9UrVFKlNga2SL6dx+rW4iBcXWNBGqRbqLe3LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQkQS3ODfuyiDWbOId66ygFV8RpMB8GA1UdIwQY
MBaAFGlqXs55y9wv6/xxejJw3sgwgIXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdwZXpubkwzQ19yX0hGNk1uRGV5RENBaGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80ODVhN2EtZDA1Zi00M2VkLTg2NzUt
NzI2ZTNlMzQ2YjY2LzEvYVdwZXpubkwzQ19yX0hGNk1uRGV5RENBaGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80ODVhN2EtZDA1Zi00M2VkLTg2NzUtNzI2ZTNlMzQ2YjY2
LzEvYVdwZXpubkwzQ19yX0hGNk1uRGV5RENBaGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlY6V5/sQ
ixnKhcG6ouBinyA/qJOzhkjm6LB8GPhFCvQTbPM9yz03ryQ+OVJE1ByJm+iyBak2
NMgSWRrdk8yVKPqVYSKVAHrNvNKKKDWR844X6KLZEwfT7F0my5qvw3ZB497PYLaW
bDwNmVt+2Pp9wSsqf/KCCqXaRQWZeXYESKb930MAQtbQPl7eGvjQYssEqnOAdNsj
NUKnOUfELOT/OXCJtcsXe1FuTy+sHEAmIMUM+Z4Vt9QCO6KkTNw+Lf0UATL5f9Pd
rWO4m1O+PAZgtqmeeUIKktQsro8ZYuEuT8b+XzRc6XrL02xS9ZOMziG3DFMBxJsB
aKK77F7lhVdHyQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 14:59:38 2026 by rpki-client