Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier: 77KV6YqASa22D3I7fMFtBlAdFTCo+pQDs4qMyWoFBr8=
Subject key identifier: C6:2B:EF:FE:48:14:34:B0:AC:B1:DE:BC:24:D0:62:27:DF:64:83:98
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 01A17A71DA7FA43A760515F02D8C7AEB5ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number: 1A57
Signing time: Mon 26 Oct 2026 23:00:44 +0000
Manifest this update: Mon 26 Oct 2026 23:00:44 +0000
Manifest next update: Tue 27 Oct 2026 23:00:44 +0000
Files and hashes: 1: 7AOoMOGVRmNfzkuDKRu3Sk1W0eA.roa (hash: +394RmOY/Sxcv9d3Us94xh5+rW7+06GfmeDJKppUg3M=)
2: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: qWOazki3KDGzoH0oz0ur3bOSYuYi9x09TZed+li85qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:da:7f:a4:3a:76:05:15:f0:2d:8c:7a:eb:5e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Oct 26 23:00:44 2026 GMT
Not After : Oct 27 23:00:44 2026 GMT
Subject: CN=c62beffe481434b0acb1debc24d06227df648398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:a5:74:d8:89:05:9f:06:e7:da:95:fa:8f:
0f:3c:76:3a:fa:05:19:79:0a:12:3a:dc:ce:66:f3:
12:c3:6f:04:66:de:9b:ce:76:5d:99:94:cc:55:d9:
46:ca:d5:db:3a:5e:d4:a6:fe:3f:d8:60:d2:96:d3:
34:6f:59:07:1e:39:3a:9b:06:75:08:7e:df:0a:25:
8c:79:f3:26:0d:1f:b4:1f:8c:46:bc:e5:04:33:08:
1e:c4:10:73:37:2d:f3:18:60:b7:f8:73:24:61:e3:
c3:65:d0:37:a9:85:42:06:7e:36:4f:59:94:26:72:
5d:9a:ed:39:f4:94:be:0c:03:1a:7b:6b:1e:49:77:
e0:06:c7:2a:c1:ad:86:ed:db:f0:2a:4d:f5:7f:2c:
ac:21:0b:39:17:07:29:0f:51:6a:0f:9d:af:9e:eb:
d9:93:09:75:35:da:39:91:84:d2:91:69:ff:27:ea:
7f:47:85:23:98:99:b1:7f:b8:17:91:31:20:83:cb:
7c:ef:99:64:75:eb:c3:ce:cf:c2:a5:31:01:ff:fb:
37:47:98:94:9f:60:22:7c:4f:27:ee:1f:cb:bd:c2:
23:1b:5c:ae:9c:91:39:12:f1:d0:61:23:5e:cc:db:
7c:e0:0b:5e:e2:34:84:00:4d:2b:50:42:cd:de:fd:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2B:EF:FE:48:14:34:B0:AC:B1:DE:BC:24:D0:62:27:DF:64:83:98
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:23:4a:a7:60:fa:5f:ed:17:27:b8:01:4f:40:a1:78:eb:31:
8f:e0:8d:7e:b5:df:23:a1:a8:f9:41:2c:2b:cf:37:a6:0a:2d:
6f:45:71:9c:9b:e7:d8:36:65:1a:55:c1:9d:15:d3:95:76:c3:
9a:1b:22:0d:b8:6d:37:3b:54:6d:c4:c8:76:1f:e7:2c:e0:85:
01:ea:b5:69:df:03:80:94:62:ba:d9:00:e4:df:89:45:70:e9:
7e:a0:fa:1b:32:6c:74:fc:f8:58:83:64:17:6f:bd:a1:76:ee:
f7:77:70:9c:50:2f:8e:bd:80:5f:54:ad:c4:f5:d4:53:a0:ec:
b4:67:c5:07:f4:17:0b:9d:20:02:06:7c:76:a4:54:f7:ac:b6:
b9:4a:ba:68:f7:24:b0:fc:7c:ac:92:56:a6:53:69:76:52:b0:
ec:22:92:f8:a6:7e:12:87:59:94:1f:ce:19:8a:7f:51:39:ff:
88:e8:de:a7:0b:3a:29:92:bb:76:69:94:6b:c1:cf:88:1f:d0:
3a:9c:98:e5:7f:c9:e7:38:09:b1:2a:82:e6:18:39:f3:74:cc:
c1:7e:f5:1d:2f:03:39:a1:f2:7d:f1:22:63:50:73:03:fb:ed:
bd:3c:2d:60:05:5d:c2:58:5e:9c:88:30:d1:4b:a8:30:7f:88:
22:4f:82:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6cdp/pDp2BRXwLYx6617OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4N2Q5YjU2MmJhNDcyNjE4ZjkzOThlMjY1Y2EwZTcxMDhm
Njg3YTMwHhcNMjYxMDI2MjMwMDQ0WhcNMjYxMDI3MjMwMDQ0WjAzMTEwLwYDVQQD
EyhjNjJiZWZmZTQ4MTQzNGIwYWNiMWRlYmMyNGQwNjIyN2RmNjQ4Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzuldNiJBZ8G59qV+o8PPHY6+gUZ
eQoSOtzOZvMSw28EZt6bznZdmZTMVdlGytXbOl7Upv4/2GDSltM0b1kHHjk6mwZ1
CH7fCiWMefMmDR+0H4xGvOUEMwgexBBzNy3zGGC3+HMkYePDZdA3qYVCBn42T1mU
JnJdmu059JS+DAMae2seSXfgBscqwa2G7dvwKk31fyysIQs5FwcpD1FqD52vnuvZ
kwl1Ndo5kYTSkWn/J+p/R4UjmJmxf7gXkTEgg8t875lkdevDzs/CpTEB//s3R5iU
n2AifE8n7h/LvcIjG1yunJE5EvHQYSNezNt84Ate4jSEAE0rUELN3v2HXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYr7/5IFDSwrLHevCTQYiffZIOYMB8GA1UdIwQY
MBaAFGh9m1YrpHJhj5OY4mXKDnEI9oejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQt
NjA1ZDEzNTEzNmY3LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQtNjA1ZDEzNTEzNmY3
LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyNKp2D6
X+0XJ7gBT0CheOsxj+CNfrXfI6Go+UEsK883pgotb0VxnJvn2DZlGlXBnRXTlXbD
mhsiDbhtNztUbcTIdh/nLOCFAeq1ad8DgJRiutkA5N+JRXDpfqD6GzJsdPz4WINk
F2+9oXbu93dwnFAvjr2AX1StxPXUU6DstGfFB/QXC50gAgZ8dqRU96y2uUq6aPck
sPx8rJJWplNpdlKw7CKS+KZ+EodZlB/OGYp/UTn/iOjepws6KZK7dmmUa8HPiB/Q
OpyY5X/J5zgJsSqC5hg583TMwX71HS8DOaHyffEiY1BzA/vtvTwtYAVdwlhenIgw
0UuoMH+IIk+CrA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:02:58 2026 by rpki-client