Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier: lhAsECygHuvi1YwrXwnAJpiKAGlBMN6uTXa1A56tz3k=
Subject key identifier: 54:A7:CA:45:00:5C:03:87:6C:1A:C7:37:01:87:14:1C:DE:D0:9A:53
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial: 01A0CE239F072E2615E6CA98AE101BB6DB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number: 0996
Signing time: Wed 23 Sep 2026 12:00:35 +0000
Manifest this update: Wed 23 Sep 2026 12:00:35 +0000
Manifest next update: Thu 24 Sep 2026 12:00:35 +0000
Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: 70JxS/pL4CL7lT1Lv9c+UU+Db4NIrav63RdKvgLcl2M=)
2: 2QaZAgQ2BxUVFfg1aWYDEr7yowE.roa (hash: mrwPNewhrXBRjZ3xbz9XepEm0Cy1szvH8RFKVrkr1LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:9f:07:2e:26:15:e6:ca:98:ae:10:1b:b6:db:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Validity
Not Before: Sep 23 12:00:35 2026 GMT
Not After : Sep 24 12:00:35 2026 GMT
Subject: CN=54a7ca45005c03876c1ac7370187141cded09a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:20:e2:58:ef:56:c9:c2:88:c4:e2:21:cb:
6b:9a:53:9f:47:c6:b2:5f:d6:06:24:cc:b4:6a:71:
93:fb:da:cc:ec:57:39:50:93:2b:fb:31:67:27:39:
a0:15:1d:02:5a:d1:29:71:2d:dd:8f:25:9e:ec:3a:
d4:28:46:7b:27:f5:64:78:21:3f:04:71:42:71:d8:
2f:b2:d3:cc:25:b4:df:d3:12:d6:1b:5d:be:84:5f:
65:33:db:8f:f5:de:a8:11:fe:cd:bb:16:72:0a:99:
aa:95:15:30:0e:52:ed:16:77:0e:89:f5:2a:c5:c0:
93:f7:38:5b:9a:b2:e1:ab:a7:6e:de:42:bc:96:58:
21:f4:80:9b:40:d0:f2:f5:33:60:91:99:e1:ad:74:
00:db:a4:1e:b4:bd:ad:6e:eb:a3:83:1a:37:a1:6d:
6e:29:0d:d7:2e:b8:d8:ce:ee:af:3e:d4:77:37:cf:
6a:1c:8f:a6:c8:e9:ca:3b:f9:4f:7e:10:15:76:10:
d4:61:30:5b:bf:1c:49:7a:b9:61:a4:96:61:8f:4b:
8c:10:c5:f1:97:52:31:09:e6:6f:66:df:a1:50:67:
fd:8d:fa:f3:ca:6a:e9:82:5e:18:bb:cb:e4:6b:c9:
1c:20:3b:89:3d:4e:b5:54:73:b6:4a:44:90:03:10:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A7:CA:45:00:5C:03:87:6C:1A:C7:37:01:87:14:1C:DE:D0:9A:53
X509v3 Authority Key Identifier:
keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2a:63:ab:66:3f:38:14:65:56:55:54:4a:f6:ae:c9:a8:da:
cc:be:ab:3f:ce:c2:43:2a:22:c7:c5:c0:81:45:6b:b1:d3:42:
d4:ba:28:06:d8:85:d9:31:59:a6:72:b0:c2:bc:63:32:39:70:
94:61:0e:ee:6f:24:4d:a2:ce:c9:42:fc:f5:3f:7e:fc:ab:31:
c2:84:6c:d3:a1:6d:44:35:be:d2:fa:f2:90:4b:82:fa:25:7d:
0c:5b:a4:2d:64:ee:a6:e3:3c:3d:50:ee:49:b8:86:89:00:73:
db:3e:69:e7:49:e4:ec:dc:c8:d9:e7:3c:94:95:94:db:0d:92:
d3:89:66:94:73:dc:22:7b:9d:8e:0a:35:3b:d9:66:d1:16:87:
a7:3f:fd:bb:d3:68:c2:3a:93:ee:de:36:48:58:0d:e7:5d:5d:
86:34:3e:d8:89:e1:f0:96:a3:6f:18:e3:1c:df:ff:74:55:56:
50:40:e0:f6:37:a3:2b:7f:62:64:64:d8:d1:0c:80:9f:c7:ab:
3e:23:c9:36:0f:8a:42:d8:cf:60:47:4e:60:69:04:9d:80:8f:
6b:03:1e:7e:f6:81:6c:4b:b9:36:fc:89:fd:81:4a:4c:ae:5e:
3a:a9:80:e6:d6:f5:e6:ac:9e:62:52:26:ca:f7:72:6d:7f:93:
f7:1a:a0:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI58HLiYV5sqYrhAbtts1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YWE5YzExNjU3ZDhhMmE1NGNlNjcyODE0YjZiZGI5Nzk2
MTg4MzAwHhcNMjYwOTIzMTIwMDM1WhcNMjYwOTI0MTIwMDM1WjAzMTEwLwYDVQQD
Eyg1NGE3Y2E0NTAwNWMwMzg3NmMxYWM3MzcwMTg3MTQxY2RlZDA5YTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPAg4ljvVsnCiMTiIctrmlOfR8ay
X9YGJMy0anGT+9rM7Fc5UJMr+zFnJzmgFR0CWtEpcS3djyWe7DrUKEZ7J/VkeCE/
BHFCcdgvstPMJbTf0xLWG12+hF9lM9uP9d6oEf7NuxZyCpmqlRUwDlLtFncOifUq
xcCT9zhbmrLhq6du3kK8llgh9ICbQNDy9TNgkZnhrXQA26QetL2tbuujgxo3oW1u
KQ3XLrjYzu6vPtR3N89qHI+myOnKO/lPfhAVdhDUYTBbvxxJerlhpJZhj0uMEMXx
l1IxCeZvZt+hUGf9jfrzymrpgl4Yu8vka8kcIDuJPU61VHO2SkSQAxDrnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSnykUAXAOHbBrHNwGHFBze0JpTMB8GA1UdIwQY
MBaAFNWqnBFlfYoqVM5nKBS2vbl5YYgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYt
Y2Y5OWQ1ZTI1N2U5LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zMDRhNGYtMmNjMC00NTFhLWIxNWYtY2Y5OWQ1ZTI1N2U5
LzEvMWFxY0VXVjlpaXBVem1jb0ZMYTl1WGxoaURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABipjq2Y/
OBRlVlVUSvauyajazL6rP87CQyoix8XAgUVrsdNC1LooBtiF2TFZpnKwwrxjMjlw
lGEO7m8kTaLOyUL89T9+/KsxwoRs06FtRDW+0vrykEuC+iV9DFukLWTupuM8PVDu
SbiGiQBz2z5p50nk7NzI2ec8lJWU2w2S04lmlHPcInudjgo1O9lm0RaHpz/9u9No
wjqT7t42SFgN511dhjQ+2Inh8JajbxjjHN//dFVWUEDg9jejK39iZGTY0QyAn8er
PiPJNg+KQtjPYEdOYGkEnYCPawMefvaBbEu5NvyJ/YFKTK5eOqmA5tb15qyeYlIm
yvdybX+T9xqg0Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:16:10 2026 by rpki-client