Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
File: rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json)
Hash identifier: NdxQmBW1OGCFF+wtNgMiMF7XGmkd/sB0SjIUWd48Yk4=
Subject key identifier: B4:60:E9:16:CF:E5:E4:01:AE:8F:89:D0:9E:4E:AE:4D:F6:19:8E:AB
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Certificate issuer: /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial: 01A166B54B6529824C0F0AEA68DC91C6FEAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
Manifest number: 1AB9
Signing time: Fri 23 Oct 2026 03:01:59 +0000
Manifest this update: Fri 23 Oct 2026 03:01:59 +0000
Manifest next update: Sat 24 Oct 2026 03:01:59 +0000
Files and hashes: 1: csk4BDz5s79i6tCuRhaWetkbfYE.roa (hash: y6UPDjUC5Ue0t7W29lJsgRf1Q1DAQIYmF8ZHDpBKink=)
2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: GSYX1b0WGC5UX9mwy30xYSDMR/qytnwHvc3v0hGNc+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:b5:4b:65:29:82:4c:0f:0a:ea:68:dc:91:c6:fe:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Validity
Not Before: Oct 23 03:01:59 2026 GMT
Not After : Oct 24 03:01:59 2026 GMT
Subject: CN=b460e916cfe5e401ae8f89d09e4eae4df6198eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:79:46:ae:09:f6:82:d9:85:ac:71:ef:3f:
9a:62:11:67:1f:7f:1d:48:1e:01:bb:f3:43:44:a1:
35:26:99:3a:b0:85:af:c0:05:2c:27:3d:3f:9e:db:
89:4e:45:5e:f8:b8:8a:a0:b8:e2:c2:fa:5b:08:7b:
2e:b7:62:d3:c1:54:60:fe:ca:9b:1b:4e:fb:0f:96:
37:c9:f6:e5:ef:9e:58:d4:e2:25:cd:ae:67:5a:2a:
56:4c:3d:1e:1a:88:29:7f:ba:e7:55:27:c2:99:df:
f1:48:a8:a2:f3:25:e3:ec:5d:d9:1e:4d:aa:8a:77:
15:69:9f:8a:d0:ee:25:23:75:6f:c8:5c:58:69:c3:
d5:ea:5b:4d:1d:e0:62:ba:1a:3f:bc:e8:a3:40:2c:
3d:12:0f:64:88:5c:b9:42:8e:3b:13:19:4a:e8:c7:
e5:d4:bf:82:3e:72:76:51:ec:29:cd:a8:5c:fd:5d:
e8:26:2c:f5:79:41:bf:0c:ae:73:80:60:76:fa:55:
1b:0d:4c:10:bf:e2:45:2c:35:6e:9e:86:2e:c6:d3:
87:7c:5b:3a:c7:6a:bb:86:02:47:99:d3:38:b1:16:
f1:e6:7e:82:94:bc:78:a8:d4:10:fd:00:45:a9:c1:
10:1b:e7:4c:cb:df:c5:10:f0:2a:e1:fb:1c:60:b8:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:60:E9:16:CF:E5:E4:01:AE:8F:89:D0:9E:4E:AE:4D:F6:19:8E:AB
X509v3 Authority Key Identifier:
keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:0e:b6:3a:8a:7c:6d:c0:9c:82:0c:89:68:de:be:00:a3:d9:
0f:5a:f7:9d:95:25:9a:f7:74:bc:e4:a3:1d:95:ee:ce:f8:f4:
bb:7f:ff:76:02:50:4b:ad:f2:a3:fe:7c:1d:91:24:7a:a3:0e:
e0:c3:fc:1b:a9:41:9f:a3:c5:d3:c1:5f:d6:1b:e1:02:e9:a1:
aa:cb:26:4c:bd:c9:75:41:db:0b:3e:33:3a:0e:7b:b1:be:d5:
bd:e7:13:03:97:f7:70:f6:7c:bd:cb:f8:fd:67:50:33:bb:79:
45:8a:11:57:49:ce:38:ee:65:65:2a:85:42:49:73:ec:82:18:
56:3a:aa:8e:5f:b0:8c:23:d7:4a:c7:49:1b:40:6a:94:b3:b6:
c5:3c:5c:7a:ae:dc:47:d9:9d:e9:4f:e1:76:74:fc:4b:ec:b9:
c3:4e:fb:a9:4e:7c:f2:04:44:88:f1:0c:65:1a:61:55:4b:1f:
34:82:5e:40:9d:af:21:90:7c:72:9a:c4:d0:fd:2c:b0:81:fb:
f3:72:38:7c:69:60:0b:a6:ee:7d:b0:1d:20:94:81:3a:d9:6c:
59:1d:81:b6:42:88:76:d0:2d:05:82:32:9e:65:b5:18:5e:7b:
76:52:23:06:aa:c0:cb:ce:a0:65:da:0b:04:60:72:91:4a:aa:
6d:03:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 08:33:05 2026 by rpki-client