Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
File: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft (raw, json)
Hash identifier: P5twUe8qFmF8HrhTghTDY/nVmVPTHJQ2jaW9DSUsi20=
Subject key identifier: ED:65:D8:AD:69:12:AD:BC:86:5D:23:C8:8F:8D:04:2E:01:A3:7D:2B
Authority key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
Certificate issuer: /CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Certificate serial: 019F93925D275E5B5B32B603B0173267E478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
Manifest number: 0262
Signing time: Fri 24 Jul 2026 10:01:10 +0000
Manifest this update: Fri 24 Jul 2026 10:01:10 +0000
Manifest next update: Sat 25 Jul 2026 10:01:10 +0000
Files and hashes: 1: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl (hash: z6qBsaLkq00FTcVtxGCkxiQJNdmRtM7tOv4GM5byqlU=)
2: NGyMHcBWRIkoIoJ_ncGJDqHCOTQ.roa (hash: 7EeVGxOBQ9n5FgZRMYhe7gBwkfF77z2pQwSgFDZNEOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:5d:27:5e:5b:5b:32:b6:03:b0:17:32:67:e4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Validity
Not Before: Jul 24 10:01:10 2026 GMT
Not After : Jul 25 10:01:10 2026 GMT
Subject: CN=ed65d8ad6912adbc865d23c88f8d042e01a37d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:44:45:31:aa:b5:6c:ad:8f:1b:51:f0:ba:
6f:eb:72:d6:30:f9:20:09:ec:1a:85:32:c7:13:fa:
15:fb:62:f6:da:50:3b:f1:c5:84:15:0d:fd:d0:3a:
84:4e:60:07:5c:99:8d:e9:b3:62:ed:ad:09:0a:76:
67:90:65:25:46:ce:91:9d:34:a3:d5:b8:2d:03:be:
ee:ed:0b:63:4e:ce:c0:e2:0f:9a:53:44:9e:48:d8:
50:59:c5:6f:66:19:04:7f:8e:53:28:ab:ec:98:10:
6b:3d:5f:94:00:4a:ce:9f:db:cb:80:d7:02:84:df:
a4:af:3b:df:93:22:7c:e2:83:1a:e1:57:62:d8:19:
f7:4a:66:a8:35:81:5d:59:c2:44:62:84:2b:6e:83:
78:db:ec:10:d8:18:fe:0f:aa:88:28:d5:2e:b1:05:
b6:b0:9f:5b:92:44:2f:51:26:73:1d:7a:27:7e:0e:
46:2b:d3:e9:99:10:23:3b:45:a4:62:9f:21:63:bf:
73:2c:ee:b8:3a:e4:56:35:a3:07:36:52:71:6b:72:
a6:b2:bd:43:ec:89:20:8f:be:15:c2:9e:d7:2f:29:
46:56:75:b3:b5:06:d4:06:9e:ee:89:3c:e6:b3:04:
3f:8b:f6:8a:e5:5b:e8:ed:1e:26:90:ca:e8:87:71:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:65:D8:AD:69:12:AD:BC:86:5D:23:C8:8F:8D:04:2E:01:A3:7D:2B
X509v3 Authority Key Identifier:
keyid:02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:dd:30:fe:91:de:c0:2d:10:ea:3a:ce:b8:50:66:dd:28:67:
82:e2:42:9d:a5:70:ac:84:6d:1b:b1:50:c6:e9:21:49:a3:82:
e5:8c:84:d4:fb:79:22:65:be:f5:e9:53:e4:3b:4b:a0:46:8d:
fb:1a:c4:1d:d7:76:e0:cf:f9:9f:c7:41:ac:81:2c:55:2a:12:
c6:2e:17:00:7a:98:7d:70:4c:63:97:10:b2:3e:e5:9e:b7:af:
0d:b7:0e:1b:05:ce:3e:a2:2e:a7:6d:2c:26:dd:22:7b:b2:14:
1b:4a:af:62:d8:25:ef:86:68:4c:52:ef:69:02:ad:13:bb:78:
98:9e:05:99:1a:a6:fa:dc:07:46:eb:1b:74:25:7f:98:ce:f2:
56:d8:8a:d7:e6:e9:ae:48:ac:6e:2a:ce:9f:b8:3d:0f:3a:f2:
97:a3:84:28:bc:ec:7d:ad:af:d8:12:b0:ca:ae:a3:32:e3:53:
78:ad:f9:1c:e1:a7:37:4b:18:d0:89:a2:03:99:d2:c2:7d:96:
48:9d:71:d2:74:e2:81:88:cf:16:51:1a:2c:12:09:f3:43:eb:
4b:17:cc:83:30:1f:7d:70:fc:64:38:01:99:4f:d5:fd:e7:40:
3e:d3:bd:92:65:49:09:b0:f5:8b:16:c2:bd:b6:af:61:8a:8c:
be:cb:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:02:23 2026 by rpki-client