Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.mft
File: aU47bTyFgdD7sB7oNftOjeIhGg8.mft (raw, json)
Hash identifier: XmRuT5nUGimUpxcLFiNCFEO2Ra6m6ggGa8BTD9HjYYk=
Subject key identifier: F3:84:40:D9:51:70:04:BE:01:91:49:57:17:9B:40:72:30:DB:86:BE
Authority key identifier: 69:4E:3B:6D:3C:85:81:D0:FB:B0:1E:E8:35:FB:4E:8D:E2:21:1A:0F
Certificate issuer: /CN=694e3b6d3c8581d0fbb01ee835fb4e8de2211a0f
Certificate serial: 01A1754B52349931E82CADEBB0B3B7148F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU47bTyFgdD7sB7oNftOjeIhGg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.mft
Manifest number: 01E2
Signing time: Sun 25 Oct 2026 23:00:32 +0000
Manifest this update: Sun 25 Oct 2026 23:00:32 +0000
Manifest next update: Mon 26 Oct 2026 23:00:32 +0000
Files and hashes: 1: 2lNGwAAtHFC7YhY_Mp-axRGHDU8.roa (hash: ODKMj2/NSyQeIbF7eT6Nj0fLGtyoZ0RJH5O4JPORYsw=)
2: 9P70GWgIx8TeXA7vw7XVJPQsw-4.roa (hash: ieYeKx17Bc0QHC0T0GeyO6xw3PAObzLSoMQ4Iopm3rA=)
3: aU47bTyFgdD7sB7oNftOjeIhGg8.crl (hash: ZpoM4THu1CcVUvFEMNul9h45a1VkKJl0qRUx8cGwKbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU47bTyFgdD7sB7oNftOjeIhGg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:4b:52:34:99:31:e8:2c:ad:eb:b0:b3:b7:14:8f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e3b6d3c8581d0fbb01ee835fb4e8de2211a0f
Validity
Not Before: Oct 25 23:00:32 2026 GMT
Not After : Oct 26 23:00:32 2026 GMT
Subject: CN=f38440d9517004be01914957179b407230db86be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:03:a1:5b:e4:52:b2:03:cd:62:94:3b:66:
99:4d:8d:fa:8d:e6:78:2c:e6:ec:45:69:be:65:1e:
f4:48:93:37:cc:03:6c:8c:77:e9:7c:67:27:c4:10:
2c:d8:9d:9b:4f:b6:a5:4b:96:e5:4b:c6:3b:7e:91:
d9:9b:d4:22:f7:e7:0f:06:f5:9c:d3:95:cb:68:52:
00:9d:84:70:df:57:4b:88:36:34:92:d1:96:61:7b:
68:0d:9c:eb:51:53:6a:a1:51:8d:0b:b5:d2:e5:49:
12:99:97:00:b3:e0:f4:60:62:35:b5:f0:79:08:e8:
8c:15:a9:2d:f3:97:41:e4:bb:ca:74:76:93:14:42:
2c:5c:1d:95:8c:31:31:b6:7c:e1:8a:9f:8a:1b:6a:
0e:ba:aa:7a:c9:f0:65:c5:c2:e3:11:01:68:ab:05:
46:70:13:71:3e:11:be:97:99:cd:35:c9:af:58:df:
24:29:21:6c:f2:40:74:cd:64:9d:fd:dc:18:0b:e8:
64:2d:6a:4a:ca:68:fc:39:c6:96:47:36:17:0e:af:
18:ba:3d:65:59:50:0c:7d:04:46:c3:7c:c3:d5:5b:
48:d3:63:71:e4:19:b5:e8:4e:ed:84:30:2f:4b:fb:
21:56:56:26:f8:f6:c5:b7:ef:16:cc:cd:ed:98:9b:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:84:40:D9:51:70:04:BE:01:91:49:57:17:9B:40:72:30:DB:86:BE
X509v3 Authority Key Identifier:
keyid:69:4E:3B:6D:3C:85:81:D0:FB:B0:1E:E8:35:FB:4E:8D:E2:21:1A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU47bTyFgdD7sB7oNftOjeIhGg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:75:c8:09:f6:d5:91:a7:a4:8e:07:42:aa:0f:dc:8a:af:c1:
6d:85:49:21:5e:66:98:28:42:1a:1c:3f:6a:da:cc:cb:bf:ef:
d0:3a:fb:93:ae:71:c8:15:f8:09:7a:01:f1:2e:33:51:b3:e2:
5c:b9:5b:6e:46:c0:4f:88:54:9e:c6:8f:ef:0d:34:e4:4b:c7:
e6:4a:1c:f2:1e:1f:14:06:e8:a8:38:82:28:c9:e6:0f:b9:19:
7d:87:e6:b8:51:ff:62:98:08:c8:4c:f9:b3:e2:e9:ac:16:b0:
b2:b1:47:7e:4f:4e:08:dd:0a:25:d4:72:b8:a1:18:14:2d:2b:
f5:ec:7b:ff:54:10:e9:24:e6:c1:be:4e:7c:85:30:fd:23:10:
a9:9b:83:06:46:19:e7:75:e7:92:b9:85:0b:1b:bc:8c:23:b6:
98:66:7c:5f:5d:6a:56:8e:d6:ae:f4:46:2d:1e:08:e2:c6:bc:
4e:f7:34:3d:98:bf:9f:b9:04:5b:2a:6e:1e:73:0c:90:96:cc:
6f:23:86:ca:9a:21:01:d2:51:71:16:53:eb:21:82:cb:8c:4e:
d4:ab:6b:06:0d:5c:9f:09:af:f8:be:cf:ad:bf:9c:c7:7c:96:
b3:2e:32:84:ce:b8:cd:b6:62:7d:cb:2a:4e:80:34:86:1e:10:
56:4d:0f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:57 2026 by rpki-client