Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
File: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft (raw, json)
Hash identifier: lUTAmZsLgiiL/iTONjzB8uD66eMknCj0/sNunuo5Ra4=
Subject key identifier: 2F:1C:62:DF:0F:4E:00:68:45:B3:4E:63:A8:DD:AE:8A:E9:AA:CB:25
Authority key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
Certificate issuer: /CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Certificate serial: 01A1291EEBBB29530D228C90936DA43CB720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
Manifest number: 0334
Signing time: Sun 11 Oct 2026 04:00:54 +0000
Manifest this update: Sun 11 Oct 2026 04:00:54 +0000
Manifest next update: Mon 12 Oct 2026 04:00:54 +0000
Files and hashes: 1: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl (hash: zv4b3jX31gbGxWapVyV30EHB0LUNjN4wb/ze67C9s6U=)
2: NGyMHcBWRIkoIoJ_ncGJDqHCOTQ.roa (hash: 7EeVGxOBQ9n5FgZRMYhe7gBwkfF77z2pQwSgFDZNEOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1e:eb:bb:29:53:0d:22:8c:90:93:6d:a4:3c:b7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Validity
Not Before: Oct 11 04:00:54 2026 GMT
Not After : Oct 12 04:00:54 2026 GMT
Subject: CN=2f1c62df0f4e006845b34e63a8ddae8ae9aacb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:4a:15:38:79:fb:74:c0:56:2e:99:63:12:
f2:97:a1:22:20:16:8f:fc:3b:92:3e:eb:57:10:35:
fc:56:1f:1b:67:01:78:56:b8:03:48:82:bb:5f:bb:
18:92:db:dd:2f:ea:d0:5e:e7:74:42:47:d2:6d:6f:
15:e0:91:3d:b9:f3:5c:02:9a:57:62:2e:a0:2c:3c:
be:48:d2:a4:5e:66:11:a2:0f:6e:21:33:ae:f4:54:
68:fc:fb:c8:aa:b5:19:33:d0:49:9e:91:5e:a2:22:
85:a6:6e:72:69:80:7f:cd:4d:4f:7a:0c:26:9e:96:
05:9e:ee:a0:f4:df:61:ec:41:85:8b:40:7b:5a:60:
6e:53:fe:c1:0d:24:db:53:9c:ad:7c:6d:c7:b5:ae:
85:a7:33:1f:33:69:39:8d:f9:6e:ed:20:ac:75:81:
fe:6a:2a:bb:09:b0:ca:d0:82:1c:6a:f7:5f:87:0d:
a0:ea:15:08:72:84:59:c5:fe:50:b4:79:ca:5b:23:
27:35:89:71:0c:7d:61:a8:7b:38:11:e7:6d:2a:48:
46:83:bc:02:83:fa:61:40:d5:2e:36:cf:8a:99:4c:
e8:50:f0:18:44:e0:8c:db:44:94:e7:ef:5a:96:cf:
50:d0:73:0d:a1:c0:6e:05:85:85:1f:a9:07:12:41:
1c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1C:62:DF:0F:4E:00:68:45:B3:4E:63:A8:DD:AE:8A:E9:AA:CB:25
X509v3 Authority Key Identifier:
keyid:02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:04:46:83:70:4a:56:4e:7f:ff:9a:16:0c:64:90:d3:7a:a1:
9a:05:97:0e:93:20:71:ee:c1:29:42:d3:60:0f:56:78:29:15:
b6:01:0f:f7:cf:c2:24:50:59:2a:28:d7:bd:97:46:e2:81:e2:
31:b4:12:9a:3d:47:51:07:aa:4f:e5:97:22:00:b0:1b:7d:98:
08:b5:92:7d:d9:be:b6:7e:f2:3d:3a:30:8a:8a:38:7b:63:3f:
18:a4:32:82:96:6e:28:54:56:69:08:94:ce:fe:e3:72:1d:d6:
6f:d3:f7:92:0e:e0:ed:1a:61:50:4f:57:3c:18:b8:7a:5a:c3:
90:65:a0:f5:e8:ed:2e:86:0a:00:e7:5d:e6:78:52:73:f3:46:
df:6d:02:41:21:2d:6b:83:df:c7:61:a1:a6:1e:fd:a1:79:fc:
0c:e4:a9:a1:d0:8a:e8:b4:d1:c5:14:8d:37:b0:4d:75:b2:17:
d9:ab:c4:40:ba:8b:98:79:b5:08:42:7d:d9:b3:cd:7e:e9:8b:
dd:1f:c6:a3:9a:51:97:62:13:03:ef:72:b4:54:28:68:ba:c0:
e2:30:47:83:9c:99:83:6d:59:d0:f9:dd:79:38:ec:00:77:92:
3d:d7:3d:4a:42:2e:d4:7a:83:8a:db:37:51:63:46:18:17:06:
c3:6f:99:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:52:46 2026 by rpki-client