Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
File: AEUKhqpPfvd-WnXdluyzwqaPrRw.mft (raw, json)
Hash identifier: jn7NDcrramajMYeLgZPlYxvofzbbx3x7Q8dKqxoBs+s=
Subject key identifier: 9A:87:2F:27:92:35:86:2B:0B:CA:E1:38:F1:25:A6:51:89:E1:17:85
Authority key identifier: 00:45:0A:86:AA:4F:7E:F7:7E:5A:75:DD:96:EC:B3:C2:A6:8F:AD:1C
Certificate issuer: /CN=00450a86aa4f7ef77e5a75dd96ecb3c2a68fad1c
Certificate serial: 01A0CF6D6153456B893501048353684662B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
Manifest number: 0351
Signing time: Wed 23 Sep 2026 18:00:47 +0000
Manifest this update: Wed 23 Sep 2026 18:00:47 +0000
Manifest next update: Thu 24 Sep 2026 18:00:47 +0000
Files and hashes: 1: AEUKhqpPfvd-WnXdluyzwqaPrRw.crl (hash: 9OtmQiZGEc7mmHoIyVnRoZQqJgGF6kHHbfEKXsyxp+A=)
2: Kiy0Jf4_Jme7VpJWikdnGteyZBw.roa (hash: fEVRmquaw1jZNFkmMKxarAcgeViD3yJxH62xy+zCJ+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:61:53:45:6b:89:35:01:04:83:53:68:46:62:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00450a86aa4f7ef77e5a75dd96ecb3c2a68fad1c
Validity
Not Before: Sep 23 18:00:47 2026 GMT
Not After : Sep 24 18:00:47 2026 GMT
Subject: CN=9a872f279235862b0bcae138f125a65189e11785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:e9:21:a8:ac:da:0f:7b:b4:6a:81:fc:2c:
44:61:f6:c0:8a:e4:20:fe:30:ff:76:fd:77:05:c1:
88:1b:f7:73:4e:96:29:ab:d7:a7:8a:d1:e3:d7:a7:
ab:04:5a:73:00:b9:da:02:60:6f:d6:01:6a:5f:0d:
04:84:02:c4:54:b6:91:7e:2a:31:cd:cd:50:4f:12:
d4:24:a4:0e:5a:38:d1:0b:a9:0f:83:39:22:22:c0:
08:1d:7a:d2:70:98:a6:73:3f:21:38:69:4e:1d:a7:
01:9a:f1:43:ab:4e:b2:82:ac:b6:d0:0b:1b:ad:8e:
38:17:30:cf:df:48:a9:8e:59:3a:9b:e4:bc:7f:db:
35:d7:72:db:a8:9a:57:29:ec:e4:e0:06:69:e3:e5:
44:82:e4:6f:f6:a6:44:18:ec:c4:11:3b:09:2b:d0:
32:ea:d5:9f:b2:50:48:11:ef:84:9c:45:ce:59:f2:
ba:b2:b6:6a:65:60:f8:fd:44:8f:97:09:4f:f7:0a:
98:ce:e0:89:bb:5f:9d:44:1b:c5:fb:40:4f:19:ea:
f8:9e:67:42:e3:9b:c5:bc:38:4c:c0:72:fa:69:75:
43:b8:e7:4b:3a:1a:f5:ca:13:82:10:05:32:46:c5:
8c:3e:63:ff:98:5e:ef:9d:f8:b3:51:a2:d9:72:04:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:87:2F:27:92:35:86:2B:0B:CA:E1:38:F1:25:A6:51:89:E1:17:85
X509v3 Authority Key Identifier:
keyid:00:45:0A:86:AA:4F:7E:F7:7E:5A:75:DD:96:EC:B3:C2:A6:8F:AD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEUKhqpPfvd-WnXdluyzwqaPrRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c8bfec-70a9-4f5d-974f-b11ab83fc363/1/AEUKhqpPfvd-WnXdluyzwqaPrRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a9:d3:e2:6d:fe:7c:dd:3a:7e:e2:35:c0:8f:05:33:77:be:
d8:d9:00:26:31:9b:2a:0f:2b:a2:2e:c5:b6:28:a1:6d:9c:bc:
a9:ea:6c:65:8a:30:31:83:c4:13:27:3c:62:f9:2e:c4:42:05:
9b:a3:4e:ef:49:74:fa:a7:34:f0:56:c8:ee:23:5d:26:4a:87:
41:7d:ca:bf:b5:7a:54:d9:79:33:52:a9:27:68:6a:8a:d0:04:
7d:e6:5f:eb:e3:fb:c0:46:73:90:bd:bf:ff:bf:20:f7:90:46:
b2:85:2c:b1:90:42:e6:5d:31:fe:8a:57:7d:0a:9d:28:f7:3d:
7d:e1:3f:cb:d3:7a:e4:8e:18:3d:31:07:16:ce:c2:8e:df:06:
b0:ac:8f:39:2a:15:9b:3f:43:c4:ab:ff:12:ac:ef:42:8f:ed:
37:61:df:ed:f5:3f:13:8f:37:87:8d:d2:92:93:20:df:1f:8b:
41:31:52:86:97:53:91:08:4a:32:59:ad:8d:09:8e:49:d2:b8:
72:69:71:31:fe:ca:f1:92:61:09:fd:db:04:fe:7d:70:a2:43:
c6:72:b2:d9:4b:7a:2d:b2:16:1c:7a:da:1d:0d:b9:6c:6b:7e:
d1:94:2b:82:72:e6:3d:ef:3e:85:48:42:9e:f0:b8:98:43:e2:
7c:15:d2:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbWFTRWuJNQEEg1NoRmK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNDUwYTg2YWE0ZjdlZjc3ZTVhNzVkZDk2ZWNiM2MyYTY4
ZmFkMWMwHhcNMjYwOTIzMTgwMDQ3WhcNMjYwOTI0MTgwMDQ3WjAzMTEwLwYDVQQD
Eyg5YTg3MmYyNzkyMzU4NjJiMGJjYWUxMzhmMTI1YTY1MTg5ZTExNzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mnpIais2g97tGqB/CxEYfbAiuQg
/jD/dv13BcGIG/dzTpYpq9enitHj16erBFpzALnaAmBv1gFqXw0EhALEVLaRfiox
zc1QTxLUJKQOWjjRC6kPgzkiIsAIHXrScJimcz8hOGlOHacBmvFDq06ygqy20Asb
rY44FzDP30ipjlk6m+S8f9s113LbqJpXKezk4AZp4+VEguRv9qZEGOzEETsJK9Ay
6tWfslBIEe+EnEXOWfK6srZqZWD4/USPlwlP9wqYzuCJu1+dRBvF+0BPGer4nmdC
45vFvDhMwHL6aXVDuOdLOhr1yhOCEAUyRsWMPmP/mF7vnfizUaLZcgTZNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqHLyeSNYYrC8rhOPElplGJ4ReFMB8GA1UdIwQY
MBaAFABFCoaqT373flp13Zbss8Kmj60cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUVVS2hxcFBmdmQtV25YZGx1eXp3cWFQclJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jOGJmZWMtNzBhOS00ZjVkLTk3NGYt
YjExYWI4M2ZjMzYzLzEvQUVVS2hxcFBmdmQtV25YZGx1eXp3cWFQclJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jOGJmZWMtNzBhOS00ZjVkLTk3NGYtYjExYWI4M2ZjMzYz
LzEvQUVVS2hxcFBmdmQtV25YZGx1eXp3cWFQclJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANanT4m3+
fN06fuI1wI8FM3e+2NkAJjGbKg8roi7FtiihbZy8qepsZYowMYPEEyc8YvkuxEIF
m6NO70l0+qc08FbI7iNdJkqHQX3Kv7V6VNl5M1KpJ2hqitAEfeZf6+P7wEZzkL2/
/78g95BGsoUssZBC5l0x/opXfQqdKPc9feE/y9N65I4YPTEHFs7Cjt8GsKyPOSoV
mz9DxKv/EqzvQo/tN2Hf7fU/E483h43SkpMg3x+LQTFShpdTkQhKMlmtjQmOSdK4
cmlxMf7K8ZJhCf3bBP59cKJDxnKy2Ut6LbIWHHraHQ25bGt+0ZQrgnLmPe8+hUhC
nvC4mEPifBXSXw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:42:10 2026 by rpki-client