Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: iP+S6BHctpr31H32gWbmYf8oenTrRxRCWrvh0a220nA=
Subject key identifier: 9F:D2:10:C0:9B:DF:80:22:E4:8C:C9:10:A4:A2:31:38:F7:87:C7:AB
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 019D27A93E2BEAEE38DEC1E4B083AD2C7D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 1150
Signing time: Thu 26 Mar 2026 01:01:36 +0000
Manifest this update: Thu 26 Mar 2026 01:01:36 +0000
Manifest next update: Fri 27 Mar 2026 01:01:36 +0000
Files and hashes: 1: D4GHE_c53IHvHkUBh4LIawNFIyQ.roa (hash: NUBjNGx9Rik5s+zS4waPKPJW6nist/TqjrBXjlH3lto=)
2: Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa (hash: lMQFG5A2ZEM00HvhF0MbgWXroNtVKP+zZ/D7DoKQ2cs=)
3: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: z+OFB1NagNvb27BkdihZMOv2HJE454sivwqR08NPSgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:3e:2b:ea:ee:38:de:c1:e4:b0:83:ad:2c:7d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Mar 26 01:01:36 2026 GMT
Not After : Mar 27 01:01:36 2026 GMT
Subject: CN=9fd210c09bdf8022e48cc910a4a23138f787c7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:05:94:42:6d:8b:7f:f5:77:ec:56:17:d5:
cf:1f:04:c4:a6:57:d1:6f:ea:cf:ff:0d:40:cc:d9:
d4:dc:52:b9:5f:30:ab:6d:3c:26:76:20:5f:63:ae:
4b:90:b7:c1:27:09:07:48:fb:af:de:1c:61:9a:c0:
18:ba:bf:5a:55:56:c6:d4:3b:1a:3f:21:05:ba:f1:
19:ce:f3:6f:ed:b9:45:12:99:77:31:15:d8:98:b1:
d7:82:a2:8a:80:ad:49:13:18:92:f1:8a:ed:0e:97:
6e:e9:d8:d2:12:0e:2a:21:2c:75:7c:1c:2f:9b:c4:
32:9d:30:79:fe:61:5d:57:9a:ad:9b:61:89:b9:dc:
6a:db:c6:54:ff:84:d1:0f:89:63:2a:ed:1a:0a:54:
3e:23:7b:f4:86:82:d4:78:1b:ad:20:fe:f4:62:25:
92:fe:8e:07:3e:8b:b0:fb:6e:e1:b6:21:7a:73:78:
0c:4d:5e:b1:bb:3b:93:e3:d7:fc:be:f3:19:a3:cf:
3b:18:da:27:c7:fd:87:01:67:c6:68:d9:b8:c9:ad:
c6:64:d0:a4:c0:e3:88:c1:e5:d4:09:2e:d1:73:ae:
87:47:de:ff:09:2c:56:3a:21:46:62:cf:ea:b1:33:
d1:6b:9b:12:5d:f1:7e:8e:ef:40:bc:aa:4d:6e:49:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D2:10:C0:9B:DF:80:22:E4:8C:C9:10:A4:A2:31:38:F7:87:C7:AB
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ef:59:3b:e0:59:31:d2:56:43:2c:c8:56:46:9c:0c:09:96:
22:c4:ee:cd:50:15:48:cc:b2:3a:fd:f5:96:e4:67:0f:cf:d9:
c3:cc:be:a0:bc:a0:80:98:16:f8:7c:42:0d:c7:32:15:dd:04:
2b:bc:4f:f8:e7:d8:57:3d:54:7d:0b:8d:20:30:73:2e:96:9d:
5a:44:27:ed:c2:43:b0:03:fd:e2:d0:f3:da:fd:fa:ea:c7:ce:
19:b6:9e:d1:30:69:4f:9c:0b:11:e2:b4:4b:91:d7:5d:c2:d5:
ac:b0:7d:62:9a:de:f8:61:04:f2:85:6d:86:ca:21:86:08:b4:
44:6b:c2:5b:44:66:8a:40:23:34:df:39:c4:c0:c1:bf:3e:dd:
e5:78:bc:09:76:7d:10:e8:02:8e:a2:f6:f5:5b:e1:3a:eb:cc:
18:54:16:a8:a5:0a:ec:b0:61:8b:0b:37:9a:26:6c:9d:c2:5b:
9d:0e:fe:08:9a:0f:bf:5e:e7:7e:cd:94:76:8e:f2:55:fd:57:
5e:ad:1d:81:04:8a:fa:6a:b0:7b:f7:d1:69:2f:d7:7e:10:3e:
bc:ca:15:cb:29:37:63:d4:31:da:64:58:82:9f:0e:8d:97:25:
40:5f:80:ec:9f:90:fd:c8:36:50:bc:9b:cf:54:98:20:86:9d:
16:af:10:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqT4r6u443sHksIOtLH1ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MDQyYzFmMjdhN2Q3ODYyNDc1MDg3MDIzZGM5N2MzMzMw
ZjczYzYwHhcNMjYwMzI2MDEwMTM2WhcNMjYwMzI3MDEwMTM2WjAzMTEwLwYDVQQD
Eyg5ZmQyMTBjMDliZGY4MDIyZTQ4Y2M5MTBhNGEyMzEzOGY3ODdjN2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyloFlEJti3/1d+xWF9XPHwTEplfR
b+rP/w1AzNnU3FK5XzCrbTwmdiBfY65LkLfBJwkHSPuv3hxhmsAYur9aVVbG1Dsa
PyEFuvEZzvNv7blFEpl3MRXYmLHXgqKKgK1JExiS8YrtDpdu6djSEg4qISx1fBwv
m8QynTB5/mFdV5qtm2GJudxq28ZU/4TRD4ljKu0aClQ+I3v0hoLUeButIP70YiWS
/o4HPouw+27htiF6c3gMTV6xuzuT49f8vvMZo887GNonx/2HAWfGaNm4ya3GZNCk
wOOIweXUCS7Rc66HR97/CSxWOiFGYs/qsTPRa5sSXfF+ju9AvKpNbklmDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/SEMCb34Ai5IzJEKSiMTj3h8erMB8GA1UdIwQY
MBaAFGkELB8np9eGJHUIcCPcl8MzD3PGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgt
Y2JiM2Q2MzVkODJmLzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80YWU2NGItZjczZS00MDhjLWI0YTgtY2JiM2Q2MzVkODJm
LzEvYVFRc0h5ZW4xNFlrZFFod0k5eVh3ek1QYzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGe9ZO+BZ
MdJWQyzIVkacDAmWIsTuzVAVSMyyOv31luRnD8/Zw8y+oLyggJgW+HxCDccyFd0E
K7xP+OfYVz1UfQuNIDBzLpadWkQn7cJDsAP94tDz2v366sfOGbae0TBpT5wLEeK0
S5HXXcLVrLB9Ypre+GEE8oVthsohhgi0RGvCW0RmikAjNN85xMDBvz7d5Xi8CXZ9
EOgCjqL29VvhOuvMGFQWqKUK7LBhiws3miZsncJbnQ7+CJoPv17nfs2Udo7yVf1X
Xq0dgQSK+mqwe/fRaS/XfhA+vMoVyyk3Y9Qx2mRYgp8OjZclQF+A7J+Q/cg2ULyb
z1SYIIadFq8QrQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:05 2026 by rpki-client