Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: MARhMxvxy+fFUfocnkhbUgWb1wyK9NDrduNnUP/7Wv8=
Subject key identifier: B7:18:46:03:88:76:71:73:CD:EF:71:CD:F6:F4:B1:86:A2:B0:1B:E3
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 01A0F6449F2525671D1FD97CF9BA02D2AB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 1A81
Signing time: Thu 01 Oct 2026 07:01:27 +0000
Manifest this update: Thu 01 Oct 2026 07:01:27 +0000
Manifest next update: Fri 02 Oct 2026 07:01:27 +0000
Files and hashes: 1: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: HHAjbLaK105T5QFssfVj06tMUa1qX9nK5euvDzA4Uxo=)
2: vog51KGgHd0dKzK6jl8SFvGeQr0.roa (hash: NjFEPRuXVC6oTMw2/sjvsPbGX/HK2xYJiVPG08AEZw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:44:9f:25:25:67:1d:1f:d9:7c:f9:ba:02:d2:ab:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Oct 1 07:01:27 2026 GMT
Not After : Oct 2 07:01:27 2026 GMT
Subject: CN=b718460388767173cdef71cdf6f4b186a2b01be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:77:67:37:58:c7:90:54:d9:6c:5d:44:58:
dc:27:35:44:0f:4c:67:1f:2e:5b:a8:47:c8:2a:4e:
82:df:b4:00:b5:6c:40:1e:49:25:5b:35:9c:eb:f8:
b4:23:05:a2:43:b6:7e:2f:c1:1d:c3:c7:30:51:59:
9f:96:7b:46:a4:86:80:79:91:5c:54:3b:44:83:44:
4f:c6:35:90:6d:0f:ce:20:aa:cd:04:de:f4:88:a3:
27:14:41:4b:09:3c:d0:28:19:5b:71:c5:5e:e5:c0:
fb:f5:56:98:a3:d0:b6:f5:63:65:f8:95:3f:34:03:
15:b1:aa:6d:f9:99:4a:58:77:60:b0:db:ae:53:df:
49:f6:73:37:38:f3:9d:4d:46:e7:bd:28:88:8e:4f:
c8:00:ea:b8:2b:9f:ea:b1:41:10:1e:87:45:ee:4b:
d0:79:ce:a4:33:cb:ed:dd:2a:0c:ab:5a:f7:6f:e6:
24:db:56:b9:e3:19:24:5f:70:2c:a9:c3:ae:10:b7:
97:f8:99:b1:1e:64:21:da:ec:39:31:da:99:15:fe:
b6:74:34:06:46:41:6c:88:32:1d:cd:af:a8:07:f6:
75:5e:ec:0f:17:78:b0:11:c7:77:b3:e2:a8:96:7c:
27:ff:df:76:fc:e4:d4:d3:97:5d:b6:62:c0:93:ae:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:18:46:03:88:76:71:73:CD:EF:71:CD:F6:F4:B1:86:A2:B0:1B:E3
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c4:19:d8:9a:d2:9b:68:79:57:ea:85:93:6c:d9:92:91:d5:
85:4e:f4:af:f0:66:e9:a1:07:65:c6:81:1e:0f:8a:f9:87:19:
8b:ca:60:1d:b7:b1:bb:bf:fe:c7:30:45:b8:1d:29:6f:ee:3e:
b2:f0:39:4a:67:9b:e8:c5:36:d9:74:57:13:d2:0a:db:5a:f6:
45:da:b4:7e:d2:55:ef:0a:48:25:7a:ec:ce:8f:3c:de:6a:40:
7d:7a:07:f9:20:b0:e2:00:a9:9f:40:8b:cb:02:98:20:95:25:
01:ab:d4:da:b6:b8:00:21:b4:24:0b:31:d6:30:bd:43:ba:7f:
be:bd:fd:7d:cd:37:7c:81:a5:76:5c:a3:15:88:c3:9c:0a:03:
7f:49:ea:3a:6d:e0:ac:7b:83:3b:af:a8:d0:4f:12:44:50:c3:
10:04:9a:70:88:fa:a5:56:da:45:fe:ac:08:a0:be:47:99:10:
c3:a6:d7:b7:f1:9e:45:ba:8e:10:78:75:24:11:7f:0f:a9:3c:
da:1a:0e:1f:30:00:d2:cc:f3:d6:81:eb:d5:14:82:c6:23:d1:
dc:b0:82:a0:0c:fd:e4:91:15:56:fd:22:26:ec:11:e0:7c:80:
46:af:08:6e:33:06:e6:6a:0f:64:5b:89:00:9b:5a:01:2a:8e:
96:97:4f:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD2RJ8lJWcdH9l8+boC0qsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzIxNTYwYjEyMjE5Y2Y4ZWFiNTVmNzRkOThmMmU5YWVk
NTE3NDYwHhcNMjYxMDAxMDcwMTI3WhcNMjYxMDAyMDcwMTI3WjAzMTEwLwYDVQQD
EyhiNzE4NDYwMzg4NzY3MTczY2RlZjcxY2RmNmY0YjE4NmEyYjAxYmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X13ZzdYx5BU2WxdRFjcJzVED0xn
Hy5bqEfIKk6C37QAtWxAHkklWzWc6/i0IwWiQ7Z+L8Edw8cwUVmflntGpIaAeZFc
VDtEg0RPxjWQbQ/OIKrNBN70iKMnFEFLCTzQKBlbccVe5cD79VaYo9C29WNl+JU/
NAMVsapt+ZlKWHdgsNuuU99J9nM3OPOdTUbnvSiIjk/IAOq4K5/qsUEQHodF7kvQ
ec6kM8vt3SoMq1r3b+Yk21a54xkkX3AsqcOuELeX+JmxHmQh2uw5MdqZFf62dDQG
RkFsiDIdza+oB/Z1XuwPF3iwEcd3s+Kolnwn/992/OTU05ddtmLAk65q1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcYRgOIdnFzze9xzfb0sYaisBvjMB8GA1UdIwQY
MBaAFGjCFWCxIhnPjqtV902Y8umu1RdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0Yjkt
YWMxZWRiYjQ3N2MwLzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0YjktYWMxZWRiYjQ3N2Mw
LzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsQZ2JrS
m2h5V+qFk2zZkpHVhU70r/Bm6aEHZcaBHg+K+YcZi8pgHbexu7/+xzBFuB0pb+4+
svA5Smeb6MU22XRXE9IK21r2Rdq0ftJV7wpIJXrszo883mpAfXoH+SCw4gCpn0CL
ywKYIJUlAavU2ra4ACG0JAsx1jC9Q7p/vr39fc03fIGldlyjFYjDnAoDf0nqOm3g
rHuDO6+o0E8SRFDDEASacIj6pVbaRf6sCKC+R5kQw6bXt/GeRbqOEHh1JBF/D6k8
2hoOHzAA0szz1oHr1RSCxiPR3LCCoAz95JEVVv0iJuwR4HyARq8IbjMG5moPZFuJ
AJtaASqOlpdPsw==
-----END CERTIFICATE-----
Generated at Thu Oct 1 14:59:17 2026 by rpki-client