Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json)
Hash identifier: vxejGvW2kANAO3px25evJgtFlCSOWj7WWP6Amjo/AbY=
Subject key identifier: 60:44:A7:84:F1:87:17:25:0D:47:5C:5A:05:B4:DB:33:5E:DB:D1:A3
Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d
Certificate serial: 01A0E2F4ACBBB7F170E3D685BDD4550B37F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
Manifest number: 0C4E
Signing time: Sun 27 Sep 2026 13:01:20 +0000
Manifest this update: Sun 27 Sep 2026 13:01:20 +0000
Manifest next update: Mon 28 Sep 2026 13:01:20 +0000
Files and hashes: 1: Exw1Qk2SWzacP5BYuop4G0zGR9w.roa (hash: LJscICsI9uW5FgqiZjcGqJLPX1UQnMp+ey99OzItE9c=)
2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: zB08TtR9MqkbLhhtBPwbttQsBWtnw8ynAqDj9J+SkTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f4:ac:bb:b7:f1:70:e3:d6:85:bd:d4:55:0b:37:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d
Validity
Not Before: Sep 27 13:01:20 2026 GMT
Not After : Sep 28 13:01:20 2026 GMT
Subject: CN=6044a784f18717250d475c5a05b4db335edbd1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:39:8b:2e:1d:03:13:81:75:a6:3f:a1:41:
b7:2a:0f:6a:e1:f1:4a:6e:fd:66:3a:ac:12:95:5e:
7f:93:93:88:d5:e6:4c:3b:5c:60:c2:5f:ce:92:3f:
1b:e5:2b:c0:0c:15:d1:73:cb:02:97:00:1a:ef:7e:
d8:52:32:71:71:11:34:36:8a:27:61:e6:70:49:79:
b1:69:19:ab:35:3b:50:0d:fc:10:b1:12:7e:03:1d:
df:c8:18:57:66:e2:42:61:d0:ed:69:63:7b:aa:87:
93:3b:ed:b8:e7:13:e3:eb:01:59:81:60:4d:96:24:
10:47:ec:f7:02:70:b6:08:81:c2:40:8f:97:df:5e:
b7:7e:22:f5:84:2e:57:8b:01:96:9a:be:3f:14:a4:
95:94:3c:74:c9:2b:12:83:34:24:ba:f6:9d:60:63:
a6:10:cf:e3:69:ec:58:52:b0:0e:40:bd:88:fa:ba:
ca:46:a1:af:bf:a0:80:35:5f:be:b3:00:a5:5b:21:
37:e1:90:d4:19:ad:85:f3:66:c3:a2:b1:09:de:60:
8b:ff:2b:00:63:59:b6:28:57:b7:42:7e:bb:8b:b0:
d5:32:da:8f:c0:9f:7e:fa:c5:12:c6:26:08:81:81:
93:2a:ff:51:64:78:d2:63:65:5b:18:d2:61:82:d0:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:44:A7:84:F1:87:17:25:0D:47:5C:5A:05:B4:DB:33:5E:DB:D1:A3
X509v3 Authority Key Identifier:
keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:09:87:07:da:ad:46:e6:d7:c6:02:3b:82:07:e5:9b:58:4b:
51:21:40:37:0a:20:4a:e6:29:71:39:3e:ca:b5:ce:a7:b2:84:
fb:da:73:32:02:24:0b:1f:a4:fe:28:c9:6d:a5:db:73:83:7c:
24:d6:d9:42:aa:6c:05:60:eb:a5:dc:96:73:3e:47:f6:49:83:
66:f3:65:5c:99:c6:20:ce:6b:7d:3b:af:6e:2e:4e:bf:90:d2:
ee:94:fd:5c:9a:96:13:ce:a6:b4:7f:54:cf:fa:b9:3d:35:60:
03:01:68:5f:79:63:bb:5a:ae:55:f6:cb:9d:2c:82:4f:11:95:
db:16:57:4a:64:df:ea:b3:00:e4:50:23:f2:63:0a:57:5f:5f:
9a:2b:37:a0:a9:d3:5c:2c:e9:89:e0:42:aa:f6:23:e2:5e:9e:
48:b9:44:5e:c9:2c:56:e1:02:67:44:61:e3:6a:c2:45:a6:5f:
02:0b:2d:2f:64:48:86:a2:00:10:6a:a4:cc:11:c8:0b:6a:93:
a4:64:21:47:95:bd:74:5c:8c:6c:f6:21:da:16:c5:45:dc:f0:
c0:5e:55:cd:5c:b6:6d:4a:9a:09:8a:03:0a:26:3f:a3:bd:cc:
43:0e:e2:d2:70:6d:23:25:5d:7a:b8:6a:ba:06:7d:da:af:f4:
a1:25:e4:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDi9Ky7t/Fw49aFvdRVCzf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTI1YTM2MmU4NzcwNWExZWMwMjJkMTY1NjBmMjc2ZDU5
Y2VlMWQwHhcNMjYwOTI3MTMwMTIwWhcNMjYwOTI4MTMwMTIwWjAzMTEwLwYDVQQD
Eyg2MDQ0YTc4NGYxODcxNzI1MGQ0NzVjNWEwNWI0ZGIzMzVlZGJkMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWM5iy4dAxOBdaY/oUG3Kg9q4fFK
bv1mOqwSlV5/k5OI1eZMO1xgwl/Okj8b5SvADBXRc8sClwAa737YUjJxcRE0Noon
YeZwSXmxaRmrNTtQDfwQsRJ+Ax3fyBhXZuJCYdDtaWN7qoeTO+245xPj6wFZgWBN
liQQR+z3AnC2CIHCQI+X3163fiL1hC5XiwGWmr4/FKSVlDx0ySsSgzQkuvadYGOm
EM/jaexYUrAOQL2I+rrKRqGvv6CANV++swClWyE34ZDUGa2F82bDorEJ3mCL/ysA
Y1m2KFe3Qn67i7DVMtqPwJ9++sUSxiYIgYGTKv9RZHjSY2VbGNJhgtBlhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBEp4TxhxclDUdcWgW02zNe29GjMB8GA1UdIwQY
MBaAFGlSWjYuh3BaHsAi0WVg8nbVnO4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzkt
NjVkNmNhM2Y0OWQ4LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8zMGNkODctZjM3NS00YjkzLThkMzktNjVkNmNhM2Y0OWQ4
LzEvYVZKYU5pNkhjRm9ld0NMUlpXRHlkdFdjN2gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAmHB9qt
RubXxgI7ggflm1hLUSFANwogSuYpcTk+yrXOp7KE+9pzMgIkCx+k/ijJbaXbc4N8
JNbZQqpsBWDrpdyWcz5H9kmDZvNlXJnGIM5rfTuvbi5Ov5DS7pT9XJqWE86mtH9U
z/q5PTVgAwFoX3lju1quVfbLnSyCTxGV2xZXSmTf6rMA5FAj8mMKV19fmis3oKnT
XCzpieBCqvYj4l6eSLlEXsksVuECZ0Rh42rCRaZfAgstL2RIhqIAEGqkzBHIC2qT
pGQhR5W9dFyMbPYh2hbFRdzwwF5VzVy2bUqaCYoDCiY/o73MQw7i0nBtIyVderhq
ugZ92q/0oSXk3g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 18:59:19 2026 by rpki-client