Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File: aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier: eWmCyJauFe6qUgeJO02Y85/fEihwvDUMi6QUPbb+eDw=
Subject key identifier: 9E:06:67:5C:75:50:29:F1:3B:B5:B6:E7:71:EF:59:43:FE:CB:A8:B9
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 019F9391F3D5AFD2AF323A36A4A8DEB82208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number: 0B08
Signing time: Fri 24 Jul 2026 10:00:43 +0000
Manifest this update: Fri 24 Jul 2026 10:00:43 +0000
Manifest next update: Sat 25 Jul 2026 10:00:43 +0000
Files and hashes: 1: CLI88VHiEhgKE-1aGQUntQikJ5Q.roa (hash: ZVHFqHEU1nz5pNZPpYsPfnWS/ZMoHolHN6V8GvVDEFc=)
2: Jl_sYXdLZY6LvwTOjI4Ivkon2zc.roa (hash: UfbfdfYRRXhEErXk2SVvIxQQ/2IYnFtsKwlFklKvl10=)
3: XRNvoKreqEdZEhJbOno-5BqPGEE.roa (hash: z4A5c3Ug9WBluQD4ssGRXcELVIDjB7HhErsV07uP9GQ=)
4: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: zBeRWRF/ZXFIQaZAnWzgMvI+wKkemr7bGuK/N7la7pA=)
5: cMhJe9vMQdQscfbNYoY-RkxcY2s.roa (hash: 93wi+LrRWDjLqjvMhMNKSnr4mEg4br0bsv0cTgfuNiY=)
6: i_fytzvyxwG53KWVE9QAYKkho0Y.roa (hash: 5GkZyytH7JdVjBbsZ02ixFMBkgHMmde3+fzDOBq+r/s=)
7: p6WJDUmkrZTi2ydBqJW-U5fF3Ms.roa (hash: tChmnA2OZ6ar9x3H+45dejO4Gb9P462WbOfjtPU/W8w=)
8: r_ZJyy1H5Ytar0NlqRrjDEm17lM.roa (hash: +sYf7FlHcDL4+/H52w762XwNy7Z8plqNAAGvu5Wp3Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:f3:d5:af:d2:af:32:3a:36:a4:a8:de:b8:22:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Jul 24 10:00:43 2026 GMT
Not After : Jul 25 10:00:43 2026 GMT
Subject: CN=9e06675c755029f13bb5b6e771ef5943fecba8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:90:61:f2:b4:24:4b:a1:48:b0:c9:e1:e4:
a5:42:15:f2:31:b1:7e:da:9a:3f:05:02:f9:af:1e:
fa:c0:ea:ac:0f:38:62:62:fc:c5:e6:65:cf:f9:5d:
39:92:30:fb:7a:d6:e7:82:6b:83:84:0c:1b:e3:f7:
16:bf:d8:46:56:f2:73:15:7d:35:16:33:62:99:46:
a2:cc:7b:8b:1f:b1:11:67:14:86:67:8e:c7:c6:14:
f4:c8:0a:b7:da:68:3e:af:a2:b3:94:89:09:40:3d:
9f:07:9e:20:ac:7a:5b:af:b7:10:1a:08:1f:18:92:
2d:64:0f:5e:ef:48:05:66:fb:7d:98:02:c3:c3:18:
0e:34:d7:a5:1a:ed:23:87:44:15:ae:b3:11:66:dc:
d5:10:ee:da:91:3b:ee:12:2d:20:53:7b:6b:aa:98:
d7:1a:e5:9d:f8:1f:1f:01:ca:1e:56:a8:b5:e1:2c:
38:73:ac:68:ad:a5:83:18:10:74:39:6f:4a:63:0f:
63:04:00:10:18:f5:e2:e9:83:9e:04:73:29:94:0e:
1c:33:45:c4:11:a0:a2:4a:f5:d2:3c:a2:53:c6:29:
99:72:4f:e4:f1:ea:f4:be:c6:82:c8:15:9c:de:02:
83:98:d2:57:51:b7:ec:29:a6:67:b4:31:fa:50:77:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:06:67:5C:75:50:29:F1:3B:B5:B6:E7:71:EF:59:43:FE:CB:A8:B9
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:92:a2:f1:cb:ad:87:9a:5d:d4:90:1e:c0:a1:8b:7f:a8:66:
f2:f7:2c:55:bf:9e:7c:1a:3f:f8:ea:83:6a:33:7d:7e:65:d7:
0b:ab:52:13:01:c9:5e:ac:35:59:66:6b:1c:f5:7c:81:c7:5f:
00:43:4d:7d:62:b3:57:55:84:33:7b:6b:4d:ef:b4:5c:95:b6:
d5:f8:54:07:9c:55:ae:40:d1:6b:de:db:7c:10:ab:86:3d:95:
77:9e:93:9c:91:cb:ce:83:47:2e:b7:85:aa:45:3d:85:0c:cd:
42:63:bf:4d:08:11:4e:9b:02:21:3b:7e:4d:b8:4b:58:26:6c:
74:d0:0f:c2:36:1c:b1:53:99:82:d4:6d:13:3e:f9:e2:db:1b:
ac:cb:c1:c0:c6:2f:82:d7:0d:ea:ac:7b:f2:50:73:9b:96:63:
fb:03:27:e0:f7:b6:6f:5f:f7:df:17:ee:4a:7f:1e:43:a1:23:
9a:9e:5b:77:bd:61:1e:11:39:14:ad:e0:08:53:65:49:4f:aa:
04:ba:d4:da:50:fc:e4:14:6b:51:2e:e8:9c:63:33:c0:3c:fe:
d0:a7:bd:7b:44:7c:b7:72:3b:fd:cb:ce:14:01:c7:fc:00:91:
f7:7e:4a:ce:d4:57:82:3d:44:98:d8:0d:c3:da:fa:62:3f:9c:
b6:95:1e:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkfPVr9KvMjo2pKjeuCIIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYThmYTc1YzUwMjBjZDYyMThjZjdmMTA5ZGU0MjAyNjUy
MDRiYWMwHhcNMjYwNzI0MTAwMDQzWhcNMjYwNzI1MTAwMDQzWjAzMTEwLwYDVQQD
Eyg5ZTA2Njc1Yzc1NTAyOWYxM2JiNWI2ZTc3MWVmNTk0M2ZlY2JhOGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytGQYfK0JEuhSLDJ4eSlQhXyMbF+
2po/BQL5rx76wOqsDzhiYvzF5mXP+V05kjD7etbngmuDhAwb4/cWv9hGVvJzFX01
FjNimUaizHuLH7ERZxSGZ47HxhT0yAq32mg+r6KzlIkJQD2fB54grHpbr7cQGggf
GJItZA9e70gFZvt9mALDwxgONNelGu0jh0QVrrMRZtzVEO7akTvuEi0gU3trqpjX
GuWd+B8fAcoeVqi14Sw4c6xoraWDGBB0OW9KYw9jBAAQGPXi6YOeBHMplA4cM0XE
EaCiSvXSPKJTximZck/k8er0vsaCyBWc3gKDmNJXUbfsKaZntDH6UHelNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4GZ1x1UCnxO7W253HvWUP+y6i5MB8GA1UdIwQY
MBaAFGqo+nXFAgzWIYz38QneQgJlIEusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAt
MzVjNjNmYTc2NWEyLzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAtMzVjNjNmYTc2NWEy
LzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJKi8cut
h5pd1JAewKGLf6hm8vcsVb+efBo/+OqDajN9fmXXC6tSEwHJXqw1WWZrHPV8gcdf
AENNfWKzV1WEM3trTe+0XJW21fhUB5xVrkDRa97bfBCrhj2Vd56TnJHLzoNHLreF
qkU9hQzNQmO/TQgRTpsCITt+TbhLWCZsdNAPwjYcsVOZgtRtEz754tsbrMvBwMYv
gtcN6qx78lBzm5Zj+wMn4Pe2b1/33xfuSn8eQ6Ejmp5bd71hHhE5FK3gCFNlSU+q
BLrU2lD85BRrUS7onGMzwDz+0Ke9e0R8t3I7/cvOFAHH/ACR935KztRXgj1EmNgN
w9r6Yj+ctpUeAQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:24 2026 by rpki-client