Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: f9Pu2X57hD4yvwxA6Zs89vEfQY3qq5Bw6B5mGeREzXU=
Subject key identifier: 11:57:E4:0D:03:B2:84:2B:7F:CF:FB:45:DC:AB:A5:DE:5C:3E:B5:2A
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 01A0CCA37472E0DA47A4343316C780321F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 0D5B
Signing time: Wed 23 Sep 2026 05:00:59 +0000
Manifest this update: Wed 23 Sep 2026 05:00:59 +0000
Manifest next update: Thu 24 Sep 2026 05:00:59 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: 7a3075FNzBn7YxZkzpSML9Z/GmYcbwx7/6S8qeLQRTw=)
2: vngLZNmfLJj1az9Fmgtss3szy7c.roa (hash: ssOKv+ps89YXTCCYgONYAdpYtqCOvvIBxQPvm7fOwUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:74:72:e0:da:47:a4:34:33:16:c7:80:32:1f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Sep 23 05:00:59 2026 GMT
Not After : Sep 24 05:00:59 2026 GMT
Subject: CN=1157e40d03b2842b7fcffb45dcaba5de5c3eb52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:fd:59:a5:09:0b:b7:68:e9:20:03:e6:01:
11:d9:20:4f:e3:22:25:2d:76:bb:e3:a0:27:91:8a:
fd:97:ad:87:6e:a1:be:2c:ee:12:23:7c:fb:b8:1f:
fe:4a:e2:c8:47:ef:c8:77:7d:e6:c7:bb:d7:19:d5:
5a:a5:dc:dc:7f:fe:bd:40:d0:65:b8:d6:78:ce:48:
ce:03:67:93:83:03:55:36:e3:84:28:d7:53:7b:12:
5f:93:38:3e:8d:59:1c:81:db:68:7d:a2:c4:5d:10:
0a:fd:6c:d8:05:cb:64:ac:2e:af:9a:d3:f1:f2:1d:
40:70:d0:b4:a4:66:fc:ef:1c:10:ff:4f:37:17:63:
a3:e7:6d:b9:3e:21:a2:52:53:83:a0:37:d8:44:0f:
23:f8:94:b6:e2:c6:98:db:dc:a5:3c:69:4f:0f:8e:
9e:c3:ea:cc:6b:f7:0f:9b:84:1d:02:8a:d4:ab:6d:
18:23:09:1c:f7:58:86:98:83:a0:a1:81:4b:2d:b2:
8f:52:b7:f5:c0:ad:2a:d2:aa:80:3e:99:6c:fa:31:
8c:ac:f9:1a:aa:78:33:ee:33:58:28:11:34:d9:7f:
3b:89:99:e1:2e:d1:69:34:08:18:72:bd:21:52:23:
39:23:e7:ab:ff:5b:2d:37:db:1a:ea:d5:74:5b:29:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:57:E4:0D:03:B2:84:2B:7F:CF:FB:45:DC:AB:A5:DE:5C:3E:B5:2A
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:26:69:ba:b9:af:f5:9e:f0:6e:48:8f:e4:4d:67:2e:19:50:
b1:00:77:3d:2b:83:b2:eb:0e:7c:4c:34:a4:9c:3c:f8:e3:e0:
08:b3:92:ce:05:5b:11:4b:6f:8a:46:f0:a3:7f:ed:1d:98:1e:
8f:b1:89:42:8c:4a:8a:64:92:ed:f8:99:86:b0:e8:8c:b4:64:
50:be:98:d5:37:c9:de:c7:8e:90:5e:d4:a8:38:b5:0f:87:1c:
71:46:fc:da:f2:65:91:4b:80:66:6e:b6:35:86:bb:d1:65:94:
fc:24:68:31:b4:47:68:51:c7:e7:77:25:4c:c1:3a:60:76:23:
e1:4c:a4:40:5f:ad:64:c6:98:2a:70:82:08:23:e8:eb:50:c7:
b4:9c:d0:cf:e8:b9:3b:f1:a5:cf:e7:30:72:87:c1:38:bb:c6:
bb:42:2a:ad:00:a4:bf:24:99:87:09:c8:bb:de:b2:bf:60:47:
bd:e8:a3:ca:b1:91:4c:e3:7c:86:32:50:89:ab:ec:92:df:35:
2e:ce:00:9c:dc:af:dd:6f:5c:81:a5:82:99:c9:5a:4a:96:8e:
59:4d:35:15:f9:5b:65:5d:36:fd:06:1e:44:28:4e:b9:33:13:
f3:7b:5e:34:cc:1b:d0:54:da:4f:e4:f2:54:3d:21:ad:14:67:
7c:c8:f0:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMo3Ry4NpHpDQzFseAMh+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGM5ZDU1NDJhNWFhOGNkNWUwMTk4YWI4M2ZjZTBmOTQ3
MmE0NjEwHhcNMjYwOTIzMDUwMDU5WhcNMjYwOTI0MDUwMDU5WjAzMTEwLwYDVQQD
EygxMTU3ZTQwZDAzYjI4NDJiN2ZjZmZiNDVkY2FiYTVkZTVjM2ViNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbn9WaUJC7do6SAD5gER2SBP4yIl
LXa746AnkYr9l62HbqG+LO4SI3z7uB/+SuLIR+/Id33mx7vXGdVapdzcf/69QNBl
uNZ4zkjOA2eTgwNVNuOEKNdTexJfkzg+jVkcgdtofaLEXRAK/WzYBctkrC6vmtPx
8h1AcNC0pGb87xwQ/083F2Oj5225PiGiUlODoDfYRA8j+JS24saY29ylPGlPD46e
w+rMa/cPm4QdAorUq20YIwkc91iGmIOgoYFLLbKPUrf1wK0q0qqAPpls+jGMrPka
qngz7jNYKBE02X87iZnhLtFpNAgYcr0hUiM5I+er/1stN9sa6tV0WylsOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFX5A0DsoQrf8/7Rdyrpd5cPrUqMB8GA1UdIwQY
MBaAFAAMnVVCpaqM1eAZirg/zg+UcqRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xOWQ4NjctZmQzOS00MDllLWIyMGEt
ZGRjYzI1ODgxMTI4LzEvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xOWQ4NjctZmQzOS00MDllLWIyMGEtZGRjYzI1ODgxMTI4
LzEvQUF5ZFZVS2xxb3pWNEJtS3VEX09ENVJ5cEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCZpurmv
9Z7wbkiP5E1nLhlQsQB3PSuDsusOfEw0pJw8+OPgCLOSzgVbEUtvikbwo3/tHZge
j7GJQoxKimSS7fiZhrDojLRkUL6Y1TfJ3seOkF7UqDi1D4cccUb82vJlkUuAZm62
NYa70WWU/CRoMbRHaFHH53clTME6YHYj4UykQF+tZMaYKnCCCCPo61DHtJzQz+i5
O/Glz+cwcofBOLvGu0IqrQCkvySZhwnIu96yv2BHveijyrGRTON8hjJQiavskt81
Ls4AnNyv3W9cgaWCmclaSpaOWU01FflbZV02/QYeRChOuTMT83teNMwb0FTaT+Ty
VD0hrRRnfMjweQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:50:09 2026 by rpki-client