Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json)
Hash identifier: qyptGFAR1pYh04FSbCH2nYO5Wlgnj8E7KHFlJ2qrZWk=
Subject key identifier: 1A:64:84:6B:DC:53:E8:05:AE:16:47:A2:69:A7:22:C1:BB:76:4E:45
Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Certificate serial: 01A18FB0C36BBF2D61330545D35B55197D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
Manifest number: 07AF
Signing time: Sat 31 Oct 2026 02:01:28 +0000
Manifest this update: Sat 31 Oct 2026 02:01:28 +0000
Manifest next update: Sun 01 Nov 2026 02:01:28 +0000
Files and hashes: 1: 1-xuFkRRYNkNx6K_y3gpKzk8bpNU.roa (hash: DSnPrHXS1D+ilU9Cyi7GMDMNOZU+oSTK260zTbsfVyU=)
2: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: 3JqMx7Wop/QWUKA2WDt9btPC6h4O1SQve6FWPY2uscg=)
3: lVCAHWqvhYg8WCWuPDI6JtrlmoU.roa (hash: 8vRKXr3v7lfmQwJ46dN1JawVHnwZVtyt70o7OLDYeFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:b0:c3:6b:bf:2d:61:33:05:45:d3:5b:55:19:7d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082
Validity
Not Before: Oct 31 02:01:28 2026 GMT
Not After : Nov 1 02:01:28 2026 GMT
Subject: CN=1a64846bdc53e805ae1647a269a722c1bb764e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:68:78:03:e3:5e:34:bf:c5:38:9f:ff:23:
e5:58:7a:76:4e:26:59:ec:af:55:3d:c3:51:13:ba:
cd:67:42:12:9e:de:62:c9:c9:58:03:a7:57:2e:c3:
d0:6e:94:e4:1f:f7:76:e8:e4:2d:f4:ee:19:81:c4:
c4:30:5e:3f:64:ee:cf:2f:fb:a4:1b:ae:0f:f9:83:
9f:95:93:21:19:a0:f4:61:20:82:6b:e0:46:b4:da:
d5:27:6f:e6:dc:8b:dc:c7:54:b5:fc:e2:5e:cf:6a:
e8:5a:f9:e2:a9:58:eb:4e:5e:0f:98:fd:7a:6a:0b:
c7:1c:3b:50:b7:38:d7:30:8e:45:3f:9a:07:9a:7e:
e6:4c:31:0f:0c:a7:08:20:df:be:30:75:00:65:db:
2c:8d:38:18:d9:b9:a6:19:b0:c8:66:72:e7:79:45:
ef:4f:7b:ee:39:fe:d2:ef:ac:d4:6d:78:d1:48:f3:
b4:47:2f:a7:f1:8c:ed:5f:f8:39:e4:fd:e4:db:a8:
d9:dd:2c:ed:10:c5:04:b8:e6:db:a5:bf:b9:ec:26:
9c:62:ce:9d:30:8d:a1:d2:14:ba:68:17:21:8a:a2:
d0:53:77:91:1e:d3:2c:5e:98:73:41:03:6f:58:73:
0e:87:80:6c:6a:f8:bb:e9:d2:a5:ca:47:5f:93:7a:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:64:84:6B:DC:53:E8:05:AE:16:47:A2:69:A7:22:C1:BB:76:4E:45
X509v3 Authority Key Identifier:
keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c3:a5:63:0f:94:07:e6:40:d6:da:33:53:5f:35:0d:4e:a6:
14:b8:9e:d7:4e:db:4a:b3:3b:f7:09:3f:b0:4e:82:85:7f:73:
ca:d6:9e:b0:a4:a1:3c:7a:7b:f5:53:16:ba:4b:fd:0b:2f:02:
3e:fb:95:4f:61:10:fe:55:93:5f:d7:38:27:de:76:c7:1b:06:
16:d1:e9:54:21:83:cf:f1:d4:03:b6:65:b6:b4:f0:07:79:48:
1f:32:b6:de:1f:01:5b:90:86:5c:85:78:17:40:e0:71:18:09:
e0:e7:42:d4:9b:7a:a3:fb:3c:22:64:44:5d:7a:fb:a3:d9:d5:
f7:d2:ce:33:ec:88:03:7b:74:be:f8:7e:b0:ca:48:3c:43:07:
64:1b:e7:ad:b1:67:b3:f4:0d:a4:56:98:38:9c:a6:fd:4d:53:
ef:cc:c8:9c:ce:b5:06:aa:a4:64:f3:a5:ed:e0:13:d5:b2:b6:
7f:8b:9f:d4:32:9d:06:c5:40:97:26:7d:ac:e3:ff:1c:38:22:
4a:14:82:bb:04:04:a5:ad:18:0d:18:cf:ca:60:47:81:8c:42:
49:29:f5:22:e8:00:b8:02:4e:ae:76:ec:46:ec:ef:b8:ae:5c:
d8:f8:f5:10:9c:55:74:b1:cd:0e:97:4d:92:d6:72:5a:05:d2:
1a:84:6b:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGPsMNrvy1hMwVF01tVGX0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGUyYTIwN2Y2OTc3MjE0YTk1N2E4ZTE0OGQxZjhiNWE1
Y2QwODIwHhcNMjYxMDMxMDIwMTI4WhcNMjYxMTAxMDIwMTI4WjAzMTEwLwYDVQQD
EygxYTY0ODQ2YmRjNTNlODA1YWUxNjQ3YTI2OWE3MjJjMWJiNzY0ZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonhoeAPjXjS/xTif/yPlWHp2TiZZ
7K9VPcNRE7rNZ0ISnt5iyclYA6dXLsPQbpTkH/d26OQt9O4ZgcTEMF4/ZO7PL/uk
G64P+YOflZMhGaD0YSCCa+BGtNrVJ2/m3Ivcx1S1/OJez2roWvniqVjrTl4PmP16
agvHHDtQtzjXMI5FP5oHmn7mTDEPDKcIIN++MHUAZdssjTgY2bmmGbDIZnLneUXv
T3vuOf7S76zUbXjRSPO0Ry+n8YztX/g55P3k26jZ3SztEMUEuObbpb+57CacYs6d
MI2h0hS6aBchiqLQU3eRHtMsXphzQQNvWHMOh4Bsavi76dKlykdfk3roEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpkhGvcU+gFrhZHommnIsG7dk5FMB8GA1UdIwQY
MBaAFIcOKiB/aXchSpV6jhSNH4taXNCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80MjExNTgtZjBjNi00NjE5LWFmYTUt
OGE5NDY4N2RiYTZmLzEvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi80MjExNTgtZjBjNi00NjE5LWFmYTUtOGE5NDY4N2RiYTZm
LzEvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8OlYw+U
B+ZA1tozU181DU6mFLie107bSrM79wk/sE6ChX9zytaesKShPHp79VMWukv9Cy8C
PvuVT2EQ/lWTX9c4J952xxsGFtHpVCGDz/HUA7ZltrTwB3lIHzK23h8BW5CGXIV4
F0DgcRgJ4OdC1Jt6o/s8ImREXXr7o9nV99LOM+yIA3t0vvh+sMpIPEMHZBvnrbFn
s/QNpFaYOJym/U1T78zInM61BqqkZPOl7eAT1bK2f4uf1DKdBsVAlyZ9rOP/HDgi
ShSCuwQEpa0YDRjPymBHgYxCSSn1IugAuAJOrnbsRuzvuK5c2Pj1EJxVdLHNDpdN
ktZyWgXSGoRrKg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 09:48:32 2026 by rpki-client