Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/bdfd51-7536-44e4-87c6-47955851c404/1/AqJiyF60Ef9vdPLS902bAm25EEQ.mft
File: AqJiyF60Ef9vdPLS902bAm25EEQ.mft (raw, json)
Hash identifier: mjf74aZ3axWsgg/xvi5PdiEHSc0d/Wp24C/v/+sjJ5w=
Subject key identifier: 17:9E:56:6C:0F:64:53:8F:F6:5E:49:65:1C:07:52:33:03:04:06:26
Authority key identifier: 02:A2:62:C8:5E:B4:11:FF:6F:74:F2:D2:F7:4D:9B:02:6D:B9:10:44
Certificate issuer: /CN=02a262c85eb411ff6f74f2d2f74d9b026db91044
Certificate serial: 01A0D0B6F18ABA37791339B12EB6BCDEC10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqJiyF60Ef9vdPLS902bAm25EEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/bdfd51-7536-44e4-87c6-47955851c404/1/AqJiyF60Ef9vdPLS902bAm25EEQ.mft
Manifest number: 9A
Signing time: Thu 24 Sep 2026 00:00:45 +0000
Manifest this update: Thu 24 Sep 2026 00:00:45 +0000
Manifest next update: Fri 25 Sep 2026 00:00:45 +0000
Files and hashes: 1: AqJiyF60Ef9vdPLS902bAm25EEQ.crl (hash: PVv0Dg1dCu425ijWFv9u3EDqbFSnlGYQzie0WduFjYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/bdfd51-7536-44e4-87c6-47955851c404/1/AqJiyF60Ef9vdPLS902bAm25EEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/bdfd51-7536-44e4-87c6-47955851c404/1/AqJiyF60Ef9vdPLS902bAm25EEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqJiyF60Ef9vdPLS902bAm25EEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:f1:8a:ba:37:79:13:39:b1:2e:b6:bc:de:c1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a262c85eb411ff6f74f2d2f74d9b026db91044
Validity
Not Before: Sep 24 00:00:45 2026 GMT
Not After : Sep 25 00:00:45 2026 GMT
Subject: CN=179e566c0f64538ff65e49651c07523303040626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:df:a3:af:23:61:d0:14:fd:6a:2b:60:48:
a4:36:68:db:57:16:1b:78:62:f0:ca:a7:5b:6f:2a:
01:7f:05:9a:33:8e:44:f2:77:09:95:c0:f1:d6:25:
a2:22:f0:69:61:f7:41:a9:fa:d2:80:66:15:c0:f5:
09:b0:d6:3b:77:c9:86:7b:53:00:88:ba:6a:88:eb:
a8:28:0b:d7:2d:d5:19:2c:49:7d:05:8e:f4:54:39:
29:5b:3c:30:59:1f:69:3d:96:be:60:ad:63:21:e4:
91:77:ca:46:52:20:e3:b2:b7:6a:61:94:4b:cf:7a:
e3:28:38:06:fb:2b:78:2b:1f:a3:50:e4:1a:92:34:
bd:a7:5d:45:41:05:1d:ce:2b:45:fb:e9:c2:0a:19:
52:f6:55:8b:1c:ce:23:89:70:06:05:bf:0a:45:96:
81:89:c8:fa:90:6c:2d:2f:28:84:ed:49:4f:7d:f9:
25:e7:1b:78:d6:1f:ea:f3:e2:b4:03:72:d8:45:1b:
2a:69:e0:92:0d:6f:7f:07:e6:e0:38:94:86:6f:ff:
c9:55:32:97:d5:dd:2d:8f:14:11:a3:8f:d7:51:bc:
55:a0:c9:e1:f4:5c:8a:0f:39:ac:54:62:75:6a:e6:
9d:4d:ef:db:fa:03:9e:03:00:55:80:69:31:8b:24:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9E:56:6C:0F:64:53:8F:F6:5E:49:65:1C:07:52:33:03:04:06:26
X509v3 Authority Key Identifier:
keyid:02:A2:62:C8:5E:B4:11:FF:6F:74:F2:D2:F7:4D:9B:02:6D:B9:10:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqJiyF60Ef9vdPLS902bAm25EEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/bdfd51-7536-44e4-87c6-47955851c404/1/AqJiyF60Ef9vdPLS902bAm25EEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/bdfd51-7536-44e4-87c6-47955851c404/1/AqJiyF60Ef9vdPLS902bAm25EEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fb:30:21:22:d4:0a:6f:f2:79:ff:ca:76:ab:bb:dd:df:3b:
06:03:e2:ea:1c:41:e5:f2:b0:57:a0:85:eb:7f:cf:a2:e6:91:
88:04:1f:a7:aa:02:97:48:45:29:4a:23:22:98:db:ef:3b:5b:
7d:6d:dd:7e:aa:ae:08:5c:a2:45:4b:6d:9a:6d:e9:d4:19:50:
6b:ab:f5:f2:d4:50:61:fe:d8:5e:45:70:05:4e:68:78:ae:f1:
6e:fc:ad:c5:ee:5e:a5:f9:0f:02:3e:86:ab:56:7e:28:4e:8e:
50:c8:a6:ae:49:e6:86:d5:d8:73:94:8c:58:8e:67:a5:62:a7:
52:3d:c4:42:71:c7:f1:42:db:75:76:1e:5f:b0:eb:c4:6a:e1:
37:82:d0:34:ab:18:8e:02:90:e9:21:8d:12:f4:1d:d8:59:99:
20:47:13:4e:99:74:77:43:2b:df:66:14:de:1b:ac:78:69:6c:
7f:5d:83:ee:89:38:4e:47:18:7a:42:42:2b:fb:e2:1b:fb:13:
40:61:d0:60:c5:12:a3:5a:7c:15:3d:52:fb:a6:16:38:38:63:
cf:bd:99:7a:fc:79:66:f8:ef:8b:18:fc:81:4a:ed:4f:0d:24:
7e:13:a0:2e:42:6d:9f:7f:67:d0:d4:b5:53:9a:95:52:f9:8c:
57:a2:0c:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQtvGKujd5EzmxLra83sEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYTI2MmM4NWViNDExZmY2Zjc0ZjJkMmY3NGQ5YjAyNmRi
OTEwNDQwHhcNMjYwOTI0MDAwMDQ1WhcNMjYwOTI1MDAwMDQ1WjAzMTEwLwYDVQQD
EygxNzllNTY2YzBmNjQ1MzhmZjY1ZTQ5NjUxYzA3NTIzMzAzMDQwNjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQTfo68jYdAU/WorYEikNmjbVxYb
eGLwyqdbbyoBfwWaM45E8ncJlcDx1iWiIvBpYfdBqfrSgGYVwPUJsNY7d8mGe1MA
iLpqiOuoKAvXLdUZLEl9BY70VDkpWzwwWR9pPZa+YK1jIeSRd8pGUiDjsrdqYZRL
z3rjKDgG+yt4Kx+jUOQakjS9p11FQQUdzitF++nCChlS9lWLHM4jiXAGBb8KRZaB
icj6kGwtLyiE7UlPffkl5xt41h/q8+K0A3LYRRsqaeCSDW9/B+bgOJSGb//JVTKX
1d0tjxQRo4/XUbxVoMnh9FyKDzmsVGJ1auadTe/b+gOeAwBVgGkxiyQwRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeeVmwPZFOP9l5JZRwHUjMDBAYmMB8GA1UdIwQY
MBaAFAKiYshetBH/b3Ty0vdNmwJtuRBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFKaXlGNjBFZjl2ZFBMUzkwMmJBbTI1RUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iZGZkNTEtNzUzNi00NGU0LTg3YzYt
NDc5NTU4NTFjNDA0LzEvQXFKaXlGNjBFZjl2ZFBMUzkwMmJBbTI1RUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9iZGZkNTEtNzUzNi00NGU0LTg3YzYtNDc5NTU4NTFjNDA0
LzEvQXFKaXlGNjBFZjl2ZFBMUzkwMmJBbTI1RUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/swISLU
Cm/yef/Kdqu73d87BgPi6hxB5fKwV6CF63/PouaRiAQfp6oCl0hFKUojIpjb7ztb
fW3dfqquCFyiRUttmm3p1BlQa6v18tRQYf7YXkVwBU5oeK7xbvytxe5epfkPAj6G
q1Z+KE6OUMimrknmhtXYc5SMWI5npWKnUj3EQnHH8ULbdXYeX7DrxGrhN4LQNKsY
jgKQ6SGNEvQd2FmZIEcTTpl0d0Mr32YU3huseGlsf12D7ok4TkcYekJCK/viG/sT
QGHQYMUSo1p8FT1S+6YWODhjz72Zevx5Zvjvixj8gUrtTw0kfhOgLkJtn39n0NS1
U5qVUvmMV6IMhg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:49:48 2026 by rpki-client