Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
File: aAONTKy9QZGZUus3CcFlM4OJAOM.mft (raw, json)
Hash identifier: 5FH662oSx9MW8nf7ovXHgAmj7yYLYqLbLfJRl3lEf/E=
Subject key identifier: 57:6A:DF:F1:EE:B5:80:54:FE:C1:14:B1:34:03:C8:06:D6:AF:EF:82
Authority key identifier: 68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
Certificate issuer: /CN=68038d4cacbd41919952eb3709c16533838900e3
Certificate serial: 01A0DC169D1E74A421B4B4AF6A271D663C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 05:01:04 +0000
Manifest this update: Sat 26 Sep 2026 05:01:04 +0000
Manifest next update: Sun 27 Sep 2026 05:01:04 +0000
Files and hashes: 1: VUWyLZ0rJ2KWNFwxw_bl1XOWT5Y.roa (hash: h6fu2o5gEs54ynuGXWVxljJh43rB4bmU8/bT0YsjVoE=)
2: aAONTKy9QZGZUus3CcFlM4OJAOM.crl (hash: ZDDOefcQEdN7CHrE+nnqz7VJahCWrzvnjByfxpu6/4Y=)
3: tp0SOw0ReetfWj-1nSTTgqHkwxM.roa (hash: XzLhvr/WPwVDdpz3jGaEEAicJMQsJQFmkLSa5mS4sUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:9d:1e:74:a4:21:b4:b4:af:6a:27:1d:66:3c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68038d4cacbd41919952eb3709c16533838900e3
Validity
Not Before: Sep 26 05:01:04 2026 GMT
Not After : Sep 27 05:01:04 2026 GMT
Subject: CN=576adff1eeb58054fec114b13403c806d6afef82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:f5:7f:e8:c1:c0:92:0a:66:12:78:9c:67:
d2:90:c1:d1:fb:13:d7:b2:b5:75:3a:ec:3e:c1:c6:
99:63:99:59:0c:86:9b:6b:d7:e3:8c:4c:25:3e:1a:
ca:e0:20:88:01:58:3d:87:b4:42:ce:e9:2c:a7:0a:
53:79:01:2e:ac:9c:5f:bd:9a:d7:a6:48:06:42:12:
50:ab:32:0e:ea:b1:8c:dc:89:e0:23:7a:c8:fa:6b:
f2:75:a3:5c:db:73:8a:e6:52:61:01:1d:d4:5e:a8:
e5:04:f6:ee:22:bf:a3:39:a0:5a:51:04:04:17:67:
93:67:b2:00:a6:ce:af:2f:1b:d2:da:c8:98:3e:19:
c6:34:f9:e4:8e:8a:da:39:bf:cb:cb:3a:25:f4:f4:
d6:7e:e7:58:cf:c2:3f:01:f0:fd:2a:cf:6c:73:df:
55:3f:16:1d:d4:d2:ff:f6:91:c5:ee:44:80:e8:c8:
ac:3c:73:4d:4a:77:39:16:0d:45:05:55:3c:27:3c:
81:75:f0:cd:45:8c:de:dd:28:ea:3e:9e:c6:12:3f:
6d:54:6c:70:58:62:b9:14:96:1e:e8:72:32:cb:ea:
e7:11:bc:b5:06:97:d4:fe:93:f6:09:59:4d:48:96:
a6:4e:74:7a:bc:b7:75:f3:50:ef:4f:e3:e3:14:a5:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6A:DF:F1:EE:B5:80:54:FE:C1:14:B1:34:03:C8:06:D6:AF:EF:82
X509v3 Authority Key Identifier:
keyid:68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:78:f4:d7:f0:a8:46:21:8e:c6:5c:f1:12:e1:55:62:4b:4d:
10:33:fb:ac:04:a2:b5:02:85:bc:3f:4e:bd:a4:09:39:e3:c8:
cd:39:e5:17:15:19:fe:b8:0a:05:2a:cf:68:39:13:e7:a8:a0:
f0:52:db:61:e0:fa:be:5b:b2:91:89:42:d9:c7:fa:56:fa:a3:
09:87:0f:53:b3:2f:e8:77:43:e8:48:66:4e:cd:e9:ff:b3:7c:
11:ef:f4:f9:a2:de:97:d1:8f:cc:dc:ff:6e:b2:6e:26:00:59:
0b:6f:42:4c:d4:e9:30:2e:4c:5f:77:82:f8:bf:2f:48:ea:25:
43:2f:bb:dc:83:f5:00:a4:3d:68:2c:94:eb:ee:ab:d0:9a:8a:
85:d0:87:84:c3:18:1d:06:5a:6d:92:8b:6b:04:a2:ff:36:ca:
99:3c:67:ec:fd:b7:fd:91:eb:51:29:e1:3e:05:cf:ee:4d:5c:
cb:15:8e:5d:18:0d:29:a9:75:bd:49:5a:41:33:97:2f:d4:f5:
93:b9:2c:b8:85:7b:f9:5a:6d:12:7b:ca:2e:92:86:3e:3d:53:
d6:f6:b4:d8:38:1d:df:44:a9:00:b5:bc:e9:77:6c:08:21:8c:
85:26:9c:84:69:f5:7f:31:6c:bc:2f:bf:6d:1f:8c:b8:04:64:
51:d6:45:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcFp0edKQhtLSvaicdZjySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MDM4ZDRjYWNiZDQxOTE5OTUyZWIzNzA5YzE2NTMzODM4
OTAwZTMwHhcNMjYwOTI2MDUwMTA0WhcNMjYwOTI3MDUwMTA0WjAzMTEwLwYDVQQD
Eyg1NzZhZGZmMWVlYjU4MDU0ZmVjMTE0YjEzNDAzYzgwNmQ2YWZlZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovL1f+jBwJIKZhJ4nGfSkMHR+xPX
srV1Ouw+wcaZY5lZDIaba9fjjEwlPhrK4CCIAVg9h7RCzukspwpTeQEurJxfvZrX
pkgGQhJQqzIO6rGM3IngI3rI+mvydaNc23OK5lJhAR3UXqjlBPbuIr+jOaBaUQQE
F2eTZ7IAps6vLxvS2siYPhnGNPnkjoraOb/Lyzol9PTWfudYz8I/AfD9Ks9sc99V
PxYd1NL/9pHF7kSA6MisPHNNSnc5Fg1FBVU8JzyBdfDNRYze3SjqPp7GEj9tVGxw
WGK5FJYe6HIyy+rnEby1BpfU/pP2CVlNSJamTnR6vLd181DvT+PjFKX35wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdq3/HutYBU/sEUsTQDyAbWr++CMB8GA1UdIwQY
MBaAFGgDjUysvUGRmVLrNwnBZTODiQDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUFPTlRLeTlRWkdaVXVzM0NjRmxNNE9KQU9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMDcxNjctZDU1MS00MWJhLTg2YTgt
MmY1MGVhMjcyMTNjLzEvYUFPTlRLeTlRWkdaVXVzM0NjRmxNNE9KQU9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMDcxNjctZDU1MS00MWJhLTg2YTgtMmY1MGVhMjcyMTNj
LzEvYUFPTlRLeTlRWkdaVXVzM0NjRmxNNE9KQU9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3j01/Co
RiGOxlzxEuFVYktNEDP7rASitQKFvD9OvaQJOePIzTnlFxUZ/rgKBSrPaDkT56ig
8FLbYeD6vluykYlC2cf6VvqjCYcPU7Mv6HdD6EhmTs3p/7N8Ee/0+aLel9GPzNz/
brJuJgBZC29CTNTpMC5MX3eC+L8vSOolQy+73IP1AKQ9aCyU6+6r0JqKhdCHhMMY
HQZabZKLawSi/zbKmTxn7P23/ZHrUSnhPgXP7k1cyxWOXRgNKal1vUlaQTOXL9T1
k7ksuIV7+VptEnvKLpKGPj1T1va02Dgd30SpALW86XdsCCGMhSachGn1fzFsvC+/
bR+MuARkUdZFFw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:06:42 2026 by rpki-client