Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
File: AAtPqsebsZaQw69aB4xssUqRrUI.mft (raw, json)
Hash identifier: 5YdV2LH3eDSzPSDQ9ZFXmw4DvqWdlyquOlqSuKPS+Zc=
Subject key identifier: 24:01:EE:1A:3C:9E:D8:3E:8D:11:60:A2:A8:CC:27:26:49:2F:46:38
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Certificate issuer: /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial: 01A0CCDA0D0EA520A895B61913D015B133AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
Manifest number: 14E5
Signing time: Wed 23 Sep 2026 06:00:37 +0000
Manifest this update: Wed 23 Sep 2026 06:00:37 +0000
Manifest next update: Thu 24 Sep 2026 06:00:37 +0000
Files and hashes: 1: AAtPqsebsZaQw69aB4xssUqRrUI.crl (hash: V7OtmQWPUQZPaYiWbE9pdVejLxlVzkTgsMCUzAaPHbA=)
2: qkYI2TpaHCn0Rl7Zcn2B5GIJgQM.roa (hash: fcQ2Ei/HI72zlpQU19GPaQ5DdqwsBsYj6lbFhVkHW2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:0d:0e:a5:20:a8:95:b6:19:13:d0:15:b1:33:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Validity
Not Before: Sep 23 06:00:37 2026 GMT
Not After : Sep 24 06:00:37 2026 GMT
Subject: CN=2401ee1a3c9ed83e8d1160a2a8cc2726492f4638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:31:85:4b:06:2f:ea:fc:eb:33:20:e6:a2:
72:bd:51:13:dc:88:8c:c5:f5:75:b7:75:6b:f1:87:
1d:27:d3:75:b0:c4:12:84:8a:d1:46:4a:cf:a5:60:
cb:76:09:3e:30:be:55:6b:fd:4b:55:38:eb:f7:89:
c0:34:7c:da:e5:6f:e9:a7:67:00:13:c9:7f:ed:71:
8e:f3:ad:62:7d:7c:c2:b5:7b:67:4e:e7:5e:b2:04:
f7:b1:b4:91:85:08:48:09:8d:36:3a:5d:29:ac:54:
ad:16:b0:18:9a:50:04:57:c1:81:43:60:c4:c0:f6:
f8:79:9f:75:bf:8e:c7:be:07:76:0b:3a:23:20:5a:
c7:71:e4:1b:ec:cf:37:c1:a9:75:44:f2:c3:00:81:
09:9e:a2:b0:55:21:4f:f5:ab:48:f3:5d:0b:a9:9f:
79:73:8a:1c:55:be:ab:33:16:bf:7f:b9:78:fa:95:
c9:01:70:b0:fb:af:26:8b:62:a1:73:07:cb:8e:b0:
ce:40:75:a0:d7:c4:59:86:31:dc:0d:b1:57:71:73:
23:be:62:f9:1c:55:4b:79:82:87:41:3c:a0:ca:cd:
28:fb:6f:fa:39:7d:fc:af:bd:ee:c0:e7:d7:84:db:
cf:16:bc:bc:52:f2:7a:ba:30:cf:59:a7:53:50:54:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:01:EE:1A:3C:9E:D8:3E:8D:11:60:A2:A8:CC:27:26:49:2F:46:38
X509v3 Authority Key Identifier:
keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e5:47:13:1d:7f:c0:81:f6:40:fb:78:b4:1d:99:e2:b2:c2:
59:6c:28:84:7b:38:30:41:33:ed:92:a6:3b:f5:e0:a4:10:75:
77:91:ff:4b:cb:18:b0:95:f5:48:ea:f0:67:0d:8d:5f:f3:e4:
35:47:65:b1:d3:25:5d:3f:99:d3:d2:d7:7d:89:42:3e:a4:e9:
c1:97:ab:bd:b6:0b:07:a3:b7:3f:e3:84:83:49:78:65:2e:51:
11:af:b2:b7:97:84:6b:8a:97:56:fc:1f:4d:a2:c0:fb:51:2e:
dc:2e:3d:81:2d:13:e0:b7:bd:73:3e:f1:ab:ee:43:e1:0a:ac:
15:ad:80:80:ec:39:50:59:c4:61:73:e8:0d:a5:dd:6f:38:65:
f7:e6:af:44:1c:85:3a:68:a3:d0:c4:26:6a:ce:40:96:83:88:
9c:dd:f3:21:1a:25:20:5a:ce:6a:33:68:88:38:f0:0b:c5:00:
72:f3:48:1d:59:e5:07:29:36:f8:14:06:26:17:a0:f2:f0:e4:
78:e8:44:d2:cf:da:3e:26:ab:fa:2b:5e:e1:bc:62:91:2d:08:
4a:3a:00:80:36:d9:6b:8d:47:6c:60:78:30:2f:36:d4:fd:0b:
21:da:ad:52:ea:8a:f6:0e:c9:86:0b:87:c1:f5:72:3b:0a:ed:
0e:b3:46:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDM2g0OpSColbYZE9AVsTOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGI0ZmFhYzc5YmIxOTY5MGMzYWY1YTA3OGM2Y2IxNGE5
MWFkNDIwHhcNMjYwOTIzMDYwMDM3WhcNMjYwOTI0MDYwMDM3WjAzMTEwLwYDVQQD
EygyNDAxZWUxYTNjOWVkODNlOGQxMTYwYTJhOGNjMjcyNjQ5MmY0NjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH8xhUsGL+r86zMg5qJyvVET3IiM
xfV1t3Vr8YcdJ9N1sMQShIrRRkrPpWDLdgk+ML5Va/1LVTjr94nANHza5W/pp2cA
E8l/7XGO861ifXzCtXtnTudesgT3sbSRhQhICY02Ol0prFStFrAYmlAEV8GBQ2DE
wPb4eZ91v47Hvgd2CzojIFrHceQb7M83wal1RPLDAIEJnqKwVSFP9atI810LqZ95
c4ocVb6rMxa/f7l4+pXJAXCw+68mi2KhcwfLjrDOQHWg18RZhjHcDbFXcXMjvmL5
HFVLeYKHQTygys0o+2/6OX38r73uwOfXhNvPFry8UvJ6ujDPWadTUFRsCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQB7ho8ntg+jRFgoqjMJyZJL0Y4MB8GA1UdIwQY
MBaAFAALT6rHm7GWkMOvWgeMbLFKka1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUF0UHFzZWJzWmFRdzY5YUI0eHNzVXFSclVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85OTBiYjUtZmU0Mi00OTg1LTljYWYt
YTA5NmVlY2RhNzkzLzEvQUF0UHFzZWJzWmFRdzY5YUI0eHNzVXFSclVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS85OTBiYjUtZmU0Mi00OTg1LTljYWYtYTA5NmVlY2RhNzkz
LzEvQUF0UHFzZWJzWmFRdzY5YUI0eHNzVXFSclVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeVHEx1/
wIH2QPt4tB2Z4rLCWWwohHs4MEEz7ZKmO/XgpBB1d5H/S8sYsJX1SOrwZw2NX/Pk
NUdlsdMlXT+Z09LXfYlCPqTpwZervbYLB6O3P+OEg0l4ZS5REa+yt5eEa4qXVvwf
TaLA+1Eu3C49gS0T4Le9cz7xq+5D4QqsFa2AgOw5UFnEYXPoDaXdbzhl9+avRByF
Omij0MQmas5AloOInN3zIRolIFrOajNoiDjwC8UAcvNIHVnlByk2+BQGJheg8vDk
eOhE0s/aPiar+ite4bxikS0ISjoAgDbZa41HbGB4MC821P0LIdqtUuqK9g7JhguH
wfVyOwrtDrNGGQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:28:27 2026 by rpki-client