Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File: Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier: wg6TfwAH5IUauwHhInssmz9Ns8gw2z6QKVr3oymd41A=
Subject key identifier: EA:0F:64:21:C7:8B:DB:14:11:2F:ED:88:3D:C2:10:81:8C:DD:31:05
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial: 01A13C6EC2DCB05CB86EE9A926110B717D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 22:00:53 +0000
Manifest this update: Wed 14 Oct 2026 22:00:53 +0000
Manifest next update: Thu 15 Oct 2026 22:00:53 +0000
Files and hashes: 1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: MFOeP50U00Gqi4cu5/3JLu+FQRoVdFXfCoaHHZSxnB8=)
2: DAfU0D6FgxQd5_vEH2Qpid-IR7g.roa (hash: fxIk5AsChzngQysfi5it8JFJ1Q8x41MNpVTTV3uuLiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:c2:dc:b0:5c:b8:6e:e9:a9:26:11:0b:71:7d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
Validity
Not Before: Oct 14 22:00:53 2026 GMT
Not After : Oct 15 22:00:53 2026 GMT
Subject: CN=ea0f6421c78bdb14112fed883dc210818cdd3105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:f0:65:dc:70:04:69:7d:ef:f5:b9:2d:63:
61:3e:a6:2d:53:8e:ca:24:59:24:75:d9:0f:7f:11:
65:8b:09:d0:bc:71:31:8e:f5:a3:b7:c2:8e:09:65:
8f:a9:d7:8e:20:9e:c7:67:02:b8:c4:a9:92:99:51:
dc:fe:52:96:12:8b:6c:ce:32:b1:62:e1:e5:1c:1f:
35:3b:17:12:46:3d:3b:ea:bc:a0:1c:4a:62:7a:9b:
57:17:3d:ed:07:2f:ee:28:b1:c7:11:f6:7c:39:48:
46:6e:87:94:9d:e6:e5:e0:c2:94:1d:8e:38:81:d5:
18:f8:df:dc:3a:db:03:7e:94:18:a6:48:53:68:89:
6f:8c:57:da:5b:bf:b7:12:3a:a1:bf:1c:97:48:22:
b5:64:bd:99:c0:39:cc:90:42:81:69:97:b0:ca:eb:
12:6c:70:02:65:10:9b:bc:8a:02:7e:27:08:02:80:
fb:32:72:a7:9e:da:7d:25:ed:27:47:54:6b:9b:d4:
13:38:bb:47:79:ae:cc:f3:7c:6f:32:29:67:8d:05:
83:2f:c7:5c:45:c9:c6:4c:dd:b5:49:24:26:22:ee:
33:93:d4:ed:b1:78:fc:c9:a3:a5:a7:9e:87:c7:74:
8b:4e:bc:ca:f8:ac:d3:6f:fc:4e:d6:07:d6:c0:fa:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0F:64:21:C7:8B:DB:14:11:2F:ED:88:3D:C2:10:81:8C:DD:31:05
X509v3 Authority Key Identifier:
keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d4:e6:1d:77:9b:6f:e9:f9:a9:32:38:aa:c4:c0:65:15:0d:
e7:7d:d8:d2:88:6f:4f:ba:de:b7:bb:31:6e:29:99:fc:4b:5d:
0d:32:04:f9:ff:15:bf:c2:ac:a4:b0:98:08:f9:eb:01:f8:e7:
34:b2:e9:39:0a:68:20:b1:df:51:e5:02:82:f0:f6:e9:66:34:
fd:6c:0f:0d:ac:26:25:42:ad:fa:d1:17:2d:11:7c:b5:7a:96:
da:9f:f7:db:df:85:59:08:80:e3:85:9c:8d:41:a2:b4:b8:65:
d0:c4:43:14:cf:e6:5a:f0:f0:fa:5c:e1:ba:f0:25:d7:bf:0c:
cb:c2:f0:19:cb:a9:b9:da:b4:3a:e8:4c:05:d3:36:aa:92:63:
bb:11:8d:80:37:33:e6:b8:3e:76:d2:15:b3:b8:6d:7b:e5:82:
96:40:17:0c:dc:b8:c1:fb:18:9f:3e:a9:0b:c2:19:64:fa:98:
36:c9:69:6d:96:6f:19:15:22:53:b5:0e:c8:63:df:e7:c9:28:
3c:db:ec:4e:b5:7e:b1:b5:b1:c8:ed:d2:58:c5:1c:68:16:f9:
bd:33:d5:5f:7c:3d:c7:0c:c1:6d:11:bf:2c:28:a9:51:c2:dd:
7a:b4:4e:e0:9e:23:a3:6c:5d:d0:4e:8d:9b:35:72:05:ee:fc:
12:7b:60:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8bsLcsFy4bumpJhELcX19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZWEyNWUzNTY5MzI4NzVjMDk2YTAzMTc1NTk4MDQxNTVm
NmM5OWQwHhcNMjYxMDE0MjIwMDUzWhcNMjYxMDE1MjIwMDUzWjAzMTEwLwYDVQQD
EyhlYTBmNjQyMWM3OGJkYjE0MTEyZmVkODgzZGMyMTA4MThjZGQzMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsnwZdxwBGl97/W5LWNhPqYtU47K
JFkkddkPfxFliwnQvHExjvWjt8KOCWWPqdeOIJ7HZwK4xKmSmVHc/lKWEotszjKx
YuHlHB81OxcSRj076rygHEpieptXFz3tBy/uKLHHEfZ8OUhGboeUnebl4MKUHY44
gdUY+N/cOtsDfpQYpkhTaIlvjFfaW7+3EjqhvxyXSCK1ZL2ZwDnMkEKBaZewyusS
bHACZRCbvIoCficIAoD7MnKnntp9Je0nR1Rrm9QTOLtHea7M83xvMilnjQWDL8dc
RcnGTN21SSQmIu4zk9TtsXj8yaOlp56Hx3SLTrzK+KzTb/xO1gfWwPqsZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoPZCHHi9sUES/tiD3CEIGM3TEFMB8GA1UdIwQY
MBaAFALqJeNWkyh1wJagMXVZgEFV9smdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85YjZiZTItZGE0NC00MmZjLTgxZTEt
ZDgxNGZkY2E1YmVkLzEvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85YjZiZTItZGE0NC00MmZjLTgxZTEtZDgxNGZkY2E1YmVk
LzEvQXVvbDQxYVRLSFhBbHFBeGRWbUFRVlgyeVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtTmHXeb
b+n5qTI4qsTAZRUN533Y0ohvT7ret7sxbimZ/EtdDTIE+f8Vv8KspLCYCPnrAfjn
NLLpOQpoILHfUeUCgvD26WY0/WwPDawmJUKt+tEXLRF8tXqW2p/329+FWQiA44Wc
jUGitLhl0MRDFM/mWvDw+lzhuvAl178My8LwGcupudq0OuhMBdM2qpJjuxGNgDcz
5rg+dtIVs7hte+WClkAXDNy4wfsYnz6pC8IZZPqYNslpbZZvGRUiU7UOyGPf58ko
PNvsTrV+sbWxyO3SWMUcaBb5vTPVX3w9xwzBbRG/LCipUcLderRO4J4jo2xd0E6N
mzVyBe78EntgZg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:54 2026 by rpki-client