Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File: are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier: ueTs2K3j79IwINQQ2bzb8NX5A6rm3FI/E5C+eUFLGdw=
Subject key identifier: 62:09:A5:18:2F:EB:A0:BF:B3:CB:74:1A:E7:F9:BA:E0:8B:37:09:68
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 01A1867667FFD0EECA2EDBDD56802C32E472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number: 1AD0
Signing time: Thu 29 Oct 2026 07:01:09 +0000
Manifest this update: Thu 29 Oct 2026 07:01:09 +0000
Manifest next update: Fri 30 Oct 2026 07:01:09 +0000
Files and hashes: 1: T0XlvLPSE0rq8c-N7OAkkhLwUFg.roa (hash: tcM1/9+Y0ysaMgq7228hAfu0hiNGpyhSmSnmef1IcbQ=)
2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: B9T+x+KNksMpqUXHC7LlvqhqahTpmgUHvsNvDDGe8Ak=)
3: uAlfyOgC6lACz_fQjNh5oktGozY.roa (hash: AyHxXbtccjqD9qYxj8NhKDHPVrcTXTiY5Ov+6QmBFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:67:ff:d0:ee:ca:2e:db:dd:56:80:2c:32:e4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Oct 29 07:01:09 2026 GMT
Not After : Oct 30 07:01:09 2026 GMT
Subject: CN=6209a5182feba0bfb3cb741ae7f9bae08b370968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:97:1d:36:be:69:af:b3:41:c9:cb:a2:2f:
f8:0a:b4:eb:50:bb:32:3d:8b:fd:8a:d4:f7:a6:bf:
95:0c:ca:91:ca:8d:c0:6a:a0:1f:4b:5e:5f:9f:bc:
8b:46:44:cc:bb:14:eb:7b:97:a5:d2:d7:d0:23:8b:
67:ed:eb:03:35:df:0f:a7:b0:c6:ff:18:42:88:3c:
ab:a3:d9:28:8a:d1:0f:a5:e9:6f:33:d8:28:56:13:
d9:4e:ed:07:60:ec:fc:c5:4f:88:15:4e:da:58:23:
8d:67:49:ba:c6:93:15:47:c6:e8:53:da:c9:6f:43:
6f:ad:80:5f:97:6f:c9:0d:3b:49:0d:f7:22:89:38:
e4:de:c4:ba:52:d2:1b:fa:ad:11:4b:ca:8a:eb:19:
5b:b2:1e:64:cf:67:bd:d3:d1:a3:b9:76:ab:4a:59:
c9:51:06:c7:2f:c8:db:3f:95:b3:02:3f:a3:e4:5f:
32:fe:03:94:5e:a2:fa:c5:f1:b4:fd:72:5c:50:2b:
97:1d:6f:87:73:98:df:52:5b:e5:94:94:fb:01:e5:
0b:df:aa:38:23:dc:07:45:85:3d:29:54:3c:e6:e0:
91:3d:5a:e3:1c:8a:a1:15:27:1d:ee:52:21:f5:07:
92:68:53:67:77:b5:d9:da:87:29:78:57:1b:6c:9b:
ef:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:09:A5:18:2F:EB:A0:BF:B3:CB:74:1A:E7:F9:BA:E0:8B:37:09:68
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:77:dd:e3:3b:5b:a6:45:5b:b3:42:4c:f1:79:15:73:77:55:
90:6a:1a:d5:b6:4e:a5:7c:40:f9:36:e1:f9:8d:6e:65:1b:f6:
5e:a9:56:4d:51:e7:7b:bd:35:07:2e:69:3a:e8:2d:21:0f:12:
11:9f:cf:5e:1a:82:3b:24:3c:5a:1e:f8:82:4b:95:75:12:42:
1a:80:2c:b7:2b:25:fe:66:00:f9:cb:72:ba:df:4d:42:50:9f:
d5:54:36:80:b5:9f:65:2c:d1:87:11:70:bf:fa:37:7a:d8:a4:
d4:f8:6d:8d:d0:bc:a0:00:3b:ee:02:d3:2d:cc:cb:17:96:2f:
a1:2e:5a:ec:b4:6b:da:ec:e0:6d:02:71:e8:49:7c:80:68:77:
ee:d8:d7:0e:0c:f1:da:ae:d3:22:0b:02:6c:b1:24:17:aa:f8:
cb:49:6b:c6:8e:b1:3c:e9:7b:d8:53:23:09:bb:34:66:6a:f4:
61:63:4e:73:09:ec:ee:eb:1f:d5:c5:cc:1c:86:7c:47:3e:52:
81:f5:4b:32:c0:22:9d:c5:db:af:de:8d:60:fa:e1:af:b2:ca:
ff:aa:2d:2a:56:ec:84:e0:0d:2c:4a:04:21:4d:7d:63:ac:5c:
83:f0:f5:34:24:07:eb:dd:04:79:62:4b:5b:3e:bf:17:51:ab:
f8:f1:b9:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGdmf/0O7KLtvdVoAsMuRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYjdiOWNlZTAwNDMwMGVhZmUwOWJmMTJmY2I2ZGExZGQz
MGE0ZDcwHhcNMjYxMDI5MDcwMTA5WhcNMjYxMDMwMDcwMTA5WjAzMTEwLwYDVQQD
Eyg2MjA5YTUxODJmZWJhMGJmYjNjYjc0MWFlN2Y5YmFlMDhiMzcwOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfeXHTa+aa+zQcnLoi/4CrTrULsy
PYv9itT3pr+VDMqRyo3AaqAfS15fn7yLRkTMuxTre5el0tfQI4tn7esDNd8Pp7DG
/xhCiDyro9koitEPpelvM9goVhPZTu0HYOz8xU+IFU7aWCONZ0m6xpMVR8boU9rJ
b0NvrYBfl2/JDTtJDfciiTjk3sS6UtIb+q0RS8qK6xlbsh5kz2e909GjuXarSlnJ
UQbHL8jbP5WzAj+j5F8y/gOUXqL6xfG0/XJcUCuXHW+Hc5jfUlvllJT7AeUL36o4
I9wHRYU9KVQ85uCRPVrjHIqhFScd7lIh9QeSaFNnd7XZ2ocpeFcbbJvvOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIJpRgv66C/s8t0Guf5uuCLNwloMB8GA1UdIwQY
MBaAFGq3uc7gBDAOr+Cb8S/LbaHdMKTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXJlNXp1QUVNQTZ2NEp2eEw4dHRvZDB3cE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83ZDExZTItNTI3NC00NDdlLTlmZTYt
ODhhYTZmZDBhYThlLzEvYXJlNXp1QUVNQTZ2NEp2eEw4dHRvZDB3cE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83ZDExZTItNTI3NC00NDdlLTlmZTYtODhhYTZmZDBhYThl
LzEvYXJlNXp1QUVNQTZ2NEp2eEw4dHRvZDB3cE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXfd4ztb
pkVbs0JM8XkVc3dVkGoa1bZOpXxA+Tbh+Y1uZRv2XqlWTVHne701By5pOugtIQ8S
EZ/PXhqCOyQ8Wh74gkuVdRJCGoAstysl/mYA+ctyut9NQlCf1VQ2gLWfZSzRhxFw
v/o3etik1PhtjdC8oAA77gLTLczLF5YvoS5a7LRr2uzgbQJx6El8gGh37tjXDgzx
2q7TIgsCbLEkF6r4y0lrxo6xPOl72FMjCbs0Zmr0YWNOcwns7usf1cXMHIZ8Rz5S
gfVLMsAincXbr96NYPrhr7LK/6otKlbshOANLEoEIU19Y6xcg/D1NCQH690EeWJL
Wz6/F1Gr+PG5Rg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 18:14:14 2026 by rpki-client