Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: lisRIEA772yEVeopILS3LUFgH0UZlWkM42+oQhtE+YI=
Subject key identifier: 66:57:74:28:D6:AB:32:24:21:7C:29:42:9B:0D:30:B4:CA:70:E9:5B
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 01A0C8C6A6C0BC0EB85EE89CEE83EF94DDF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 0D59
Signing time: Tue 22 Sep 2026 11:00:57 +0000
Manifest this update: Tue 22 Sep 2026 11:00:57 +0000
Manifest next update: Wed 23 Sep 2026 11:00:57 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: Yhtwr/bGmNidhHQtE6IZoBz19kvHUqIcJP9h2HWSOZk=)
2: vngLZNmfLJj1az9Fmgtss3szy7c.roa (hash: ssOKv+ps89YXTCCYgONYAdpYtqCOvvIBxQPvm7fOwUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:a6:c0:bc:0e:b8:5e:e8:9c:ee:83:ef:94:dd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Sep 22 11:00:57 2026 GMT
Not After : Sep 23 11:00:57 2026 GMT
Subject: CN=66577428d6ab3224217c29429b0d30b4ca70e95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:9d:f1:fe:cf:3b:e0:63:51:48:c2:d7:8f:
6f:e5:f1:62:e4:08:af:28:5c:3b:b6:ef:e4:41:3e:
58:32:47:38:e4:41:95:33:96:b3:f9:b0:5d:e7:80:
37:5a:c8:9c:52:e8:01:cf:2e:d1:92:dc:c8:80:dd:
5c:de:be:a5:de:4f:05:8a:2d:7e:5d:b9:62:76:9f:
aa:39:52:aa:b0:7d:32:7f:b8:52:c5:a1:5c:1d:8d:
37:89:06:fa:7a:47:9d:0c:f0:d7:37:c2:1b:e8:da:
e1:92:c1:e0:67:58:e7:30:dc:c5:d7:48:34:a5:ed:
65:b2:5d:af:e8:da:67:48:f6:9e:64:b7:f1:26:44:
db:94:bb:28:0d:96:66:69:30:bb:0a:67:e9:b6:34:
b2:53:b3:bd:48:11:c2:44:bc:07:d7:0a:ee:e8:46:
5e:43:5b:da:85:b5:27:4f:26:84:a9:0f:9e:bc:cd:
63:0e:db:03:9b:7f:34:4d:61:ee:77:d9:45:e2:42:
76:5a:fe:97:6c:53:0d:d6:ae:4b:1c:83:9f:3d:bd:
81:ef:56:5a:fb:2c:e8:df:30:86:18:d6:26:0a:18:
55:6f:95:44:79:54:74:fe:e5:b1:5e:db:c8:50:14:
5f:13:e1:a8:c7:21:08:99:4a:c5:18:03:b0:01:0f:
b6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:57:74:28:D6:AB:32:24:21:7C:29:42:9B:0D:30:B4:CA:70:E9:5B
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3e:d3:3e:57:55:ef:e5:73:c6:2c:4c:33:38:59:f9:ed:f9:
9b:97:17:09:0a:2f:e4:ce:ed:28:e5:c2:36:b8:55:8f:4f:cc:
22:6f:8e:0e:c8:d7:bc:ba:c1:f1:e5:26:16:38:f4:2c:0c:79:
22:33:0f:68:59:33:e4:0f:cd:4d:29:07:f6:5c:d0:dd:d6:a9:
5e:ab:85:32:f6:a6:b3:c7:3a:d6:4c:aa:5a:e2:91:2a:45:7d:
e2:88:64:41:70:af:c4:95:09:95:4a:5f:98:b8:45:2c:d8:8a:
0b:4f:fb:8f:35:8d:1f:7e:7b:10:1c:3f:bd:1f:71:af:be:dd:
89:08:ed:31:78:01:23:f2:8c:54:16:8e:bd:20:7b:2c:cf:85:
dc:06:db:cd:75:7a:01:46:58:0a:8f:70:e1:a7:74:95:7a:13:
1c:d5:79:8e:00:00:98:7f:2c:4b:b6:e8:5a:50:14:cc:7e:3c:
ab:27:82:75:6c:a4:90:85:4c:56:ca:1f:34:12:e3:36:24:ca:
e0:ca:0c:8e:0d:de:d4:d1:1a:ea:1a:79:10:95:a0:10:71:c6:
25:15:c0:97:bb:53:8b:9b:37:c9:67:7d:9a:9f:50:14:d9:2a:
6c:67:82:9b:67:4b:94:17:ba:78:14:75:18:de:4b:8c:7e:0c:
d6:a6:b7:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxqbAvA64Xuic7oPvlN3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGM5ZDU1NDJhNWFhOGNkNWUwMTk4YWI4M2ZjZTBmOTQ3
MmE0NjEwHhcNMjYwOTIyMTEwMDU3WhcNMjYwOTIzMTEwMDU3WjAzMTEwLwYDVQQD
Eyg2NjU3NzQyOGQ2YWIzMjI0MjE3YzI5NDI5YjBkMzBiNGNhNzBlOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfyd8f7PO+BjUUjC149v5fFi5Aiv
KFw7tu/kQT5YMkc45EGVM5az+bBd54A3WsicUugBzy7RktzIgN1c3r6l3k8Fii1+
Xblidp+qOVKqsH0yf7hSxaFcHY03iQb6ekedDPDXN8Ib6NrhksHgZ1jnMNzF10g0
pe1lsl2v6NpnSPaeZLfxJkTblLsoDZZmaTC7CmfptjSyU7O9SBHCRLwH1wru6EZe
Q1vahbUnTyaEqQ+evM1jDtsDm380TWHud9lF4kJ2Wv6XbFMN1q5LHIOfPb2B71Za
+yzo3zCGGNYmChhVb5VEeVR0/uWxXtvIUBRfE+GoxyEImUrFGAOwAQ+2HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZXdCjWqzIkIXwpQpsNMLTKcOlbMB8GA1UdIwQY
MBaAFAAMnVVCpaqM1eAZirg/zg+UcqRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xOWQ4NjctZmQzOS00MDllLWIyMGEt
ZGRjYzI1ODgxMTI4LzEvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xOWQ4NjctZmQzOS00MDllLWIyMGEtZGRjYzI1ODgxMTI4
LzEvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEART7TPldV
7+VzxixMMzhZ+e35m5cXCQov5M7tKOXCNrhVj0/MIm+ODsjXvLrB8eUmFjj0LAx5
IjMPaFkz5A/NTSkH9lzQ3dapXquFMvams8c61kyqWuKRKkV94ohkQXCvxJUJlUpf
mLhFLNiKC0/7jzWNH357EBw/vR9xr77diQjtMXgBI/KMVBaOvSB7LM+F3AbbzXV6
AUZYCo9w4ad0lXoTHNV5jgAAmH8sS7boWlAUzH48qyeCdWykkIVMVsofNBLjNiTK
4MoMjg3e1NEa6hp5EJWgEHHGJRXAl7tTi5s3yWd9mp9QFNkqbGeCm2dLlBe6eBR1
GN5LjH4M1qa3RQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:21:34 2026 by rpki-client