Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier: IMLluCFp0/No2l/lVYZKRM9KzytS3NlRVuKCxgEF9bo=
Subject key identifier: FC:0D:98:E6:46:DA:9E:B4:36:19:58:9A:8E:D1:E1:F5:C5:EA:E7:0F
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 01A001DD95831CDC00CB7EB9CB0BD5B70597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number: 1994
Signing time: Fri 14 Aug 2026 20:01:33 +0000
Manifest this update: Fri 14 Aug 2026 20:01:33 +0000
Manifest next update: Sat 15 Aug 2026 20:01:33 +0000
Files and hashes: 1: 7AOoMOGVRmNfzkuDKRu3Sk1W0eA.roa (hash: +394RmOY/Sxcv9d3Us94xh5+rW7+06GfmeDJKppUg3M=)
2: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: 2hRq0+GyXxntIgw5BPn2ha/XAHu851hW4nu9J9C8LvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:95:83:1c:dc:00:cb:7e:b9:cb:0b:d5:b7:05:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Aug 14 20:01:33 2026 GMT
Not After : Aug 15 20:01:33 2026 GMT
Subject: CN=fc0d98e646da9eb43619589a8ed1e1f5c5eae70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:e1:a5:4f:5c:b9:30:80:89:87:65:bd:0d:
a1:67:f7:59:ba:a1:69:22:f2:58:2c:71:41:f2:a9:
98:d5:85:23:88:87:62:67:fb:c9:40:7e:f8:0d:65:
b5:8c:e8:b6:93:59:5d:9f:63:30:47:fd:67:95:e8:
2a:73:d9:1a:27:0a:2e:9c:e9:49:73:13:ba:05:1c:
d6:f7:7f:86:d9:ea:aa:67:1b:37:45:1f:55:b9:37:
9a:42:d7:f5:34:88:be:92:bc:75:88:57:5c:6d:54:
e8:66:2e:82:c1:13:d8:7f:42:9a:5c:71:0b:7b:06:
0f:68:2b:7f:e1:6f:dd:a7:f0:89:89:09:b7:af:db:
95:26:3b:47:33:03:b6:ec:ab:31:87:6e:b8:3b:ae:
9e:a9:cf:ec:a4:39:79:44:39:b2:90:60:26:2f:4c:
a9:42:85:d4:1f:56:5c:c4:e5:8e:85:7f:47:67:31:
73:91:34:68:cb:73:25:ef:54:45:ad:75:59:7b:ef:
1f:4b:8e:7b:b7:70:2a:bf:dc:8e:1d:01:0a:ca:96:
e6:79:62:e1:58:5a:aa:d2:b7:61:36:84:9b:71:42:
25:5f:e0:7b:57:3d:71:41:f5:ba:a5:98:de:43:72:
17:ec:fc:82:03:ef:bc:b4:95:78:68:02:b2:8d:97:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0D:98:E6:46:DA:9E:B4:36:19:58:9A:8E:D1:E1:F5:C5:EA:E7:0F
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:20:cc:19:a9:94:1c:d3:c7:16:72:f0:2c:19:be:da:95:f5:
a6:07:e5:fe:5a:8e:c3:78:d3:33:83:4d:db:cd:5c:e6:f8:6c:
9f:38:85:93:31:28:37:24:b4:12:35:b7:e1:02:c2:91:07:df:
da:63:a9:bc:6e:98:47:97:2d:56:6a:32:7a:43:58:fe:55:b6:
f4:2b:bd:55:8a:cf:1c:55:f3:90:3d:83:7c:d4:f1:bd:94:96:
37:65:bb:fc:d1:b8:ce:e6:58:81:22:03:58:85:1c:19:69:16:
03:11:35:68:0c:56:5c:d4:9d:c0:24:d0:b1:93:91:f7:a6:86:
2e:45:9b:ac:ce:f3:46:04:89:75:b4:52:d7:0e:46:bd:83:30:
b5:a0:71:e9:6c:c4:ee:6c:ab:9b:bf:f5:ea:66:cc:f3:31:1f:
ed:51:e1:cf:b7:de:9b:b3:cb:32:bc:8a:9e:a9:d3:ab:e5:c7:
68:2f:25:ac:7b:74:a2:a2:b7:26:36:9c:ca:b2:41:3d:b9:b5:
b2:eb:d0:c8:8e:2d:e1:50:07:c3:1a:b4:2a:f0:a7:3f:86:9b:
cc:e1:08:0b:f1:fe:48:63:ab:37:fe:3b:31:9e:f0:ec:c3:1d:
ef:b2:76:4b:ee:a5:f5:2b:18:0f:dc:16:dd:6e:d7:e7:1c:ec:
41:13:cf:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3ZWDHNwAy365ywvVtwWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4N2Q5YjU2MmJhNDcyNjE4ZjkzOThlMjY1Y2EwZTcxMDhm
Njg3YTMwHhcNMjYwODE0MjAwMTMzWhcNMjYwODE1MjAwMTMzWjAzMTEwLwYDVQQD
EyhmYzBkOThlNjQ2ZGE5ZWI0MzYxOTU4OWE4ZWQxZTFmNWM1ZWFlNzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXLhpU9cuTCAiYdlvQ2hZ/dZuqFp
IvJYLHFB8qmY1YUjiIdiZ/vJQH74DWW1jOi2k1ldn2MwR/1nlegqc9kaJwounOlJ
cxO6BRzW93+G2eqqZxs3RR9VuTeaQtf1NIi+krx1iFdcbVToZi6CwRPYf0KaXHEL
ewYPaCt/4W/dp/CJiQm3r9uVJjtHMwO27Ksxh264O66eqc/spDl5RDmykGAmL0yp
QoXUH1ZcxOWOhX9HZzFzkTRoy3Ml71RFrXVZe+8fS457t3Aqv9yOHQEKypbmeWLh
WFqq0rdhNoSbcUIlX+B7Vz1xQfW6pZjeQ3IX7PyCA++8tJV4aAKyjZf9CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwNmOZG2p60NhlYmo7R4fXF6ucPMB8GA1UdIwQY
MBaAFGh9m1YrpHJhj5OY4mXKDnEI9oejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQt
NjA1ZDEzNTEzNmY3LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQtNjA1ZDEzNTEzNmY3
LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSDMGamU
HNPHFnLwLBm+2pX1pgfl/lqOw3jTM4NN281c5vhsnziFkzEoNyS0EjW34QLCkQff
2mOpvG6YR5ctVmoyekNY/lW29Cu9VYrPHFXzkD2DfNTxvZSWN2W7/NG4zuZYgSID
WIUcGWkWAxE1aAxWXNSdwCTQsZOR96aGLkWbrM7zRgSJdbRS1w5GvYMwtaBx6WzE
7myrm7/16mbM8zEf7VHhz7fem7PLMryKnqnTq+XHaC8lrHt0oqK3JjacyrJBPbm1
suvQyI4t4VAHwxq0KvCnP4abzOEIC/H+SGOrN/47MZ7w7MMd77J2S+6l9SsYD9wW
3W7X5xzsQRPPOQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:18 2026 by rpki-client