Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft
File: 1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft (raw, json)
Hash identifier: vOfvapWe6ugGe16TAqVJsz7lWy41hSbV6KeMAv5+DlY=
Subject key identifier: 5D:E7:DF:AD:E0:BE:2D:BE:46:5C:4B:E2:48:63:6A:84:44:B4:24:EF
Authority key identifier: F9:A8:A8:34:D1:6B:FE:F6:F1:44:CA:18:58:A9:61:19:D8:88:5A:02
Certificate issuer: /CN=f9a8a834d16bfef6f144ca1858a96119d8885a02
Certificate serial: 01A176276E6BBDCAF9F53389A87E3E274B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aioNNFr_vbxRMoYWKlhGdiIWgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft
Manifest number: 013B
Signing time: Mon 26 Oct 2026 03:00:58 +0000
Manifest this update: Mon 26 Oct 2026 03:00:58 +0000
Manifest next update: Tue 27 Oct 2026 03:00:58 +0000
Files and hashes: 1: 1-aioNNFr_vbxRMoYWKlhGdiIWgI.crl (hash: I4NJzx1YNt8bf/id2NCzSeQ2+7xfaj0lwyb5/GQ//To=)
2: k9k9T2ONQu0R5M8gf0ZEMIVydmM.roa (hash: H47SjZ9BIhJeQGY/J6bkZroBOYzowjDBp3fQiJCG8Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aioNNFr_vbxRMoYWKlhGdiIWgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:6e:6b:bd:ca:f9:f5:33:89:a8:7e:3e:27:4b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a8a834d16bfef6f144ca1858a96119d8885a02
Validity
Not Before: Oct 26 03:00:58 2026 GMT
Not After : Oct 27 03:00:58 2026 GMT
Subject: CN=5de7dfade0be2dbe465c4be248636a8444b424ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:d5:4e:2f:44:ff:5a:d5:7e:79:ce:19:23:
18:d0:40:5a:59:29:e5:75:c1:e8:fa:39:c8:57:7b:
ef:e8:a2:64:d5:d7:41:98:8d:f9:40:18:1a:80:4a:
f8:3f:cf:8b:dc:29:fe:6f:52:97:53:eb:da:b3:a7:
02:9c:83:39:dc:57:73:b0:da:e9:19:10:de:27:d5:
ef:6a:41:8d:e5:98:45:08:56:6c:21:21:da:b7:d0:
cc:13:27:9d:d7:f0:90:25:6b:f2:70:f3:1d:cc:1e:
d0:67:16:a4:3a:fb:9e:c3:e4:4e:1e:6e:d2:46:f3:
de:15:98:b2:0b:a2:41:86:af:4f:ff:da:be:f1:e0:
d8:e3:84:87:7e:01:ea:06:7b:63:1e:c4:ba:5f:c7:
04:24:49:77:ab:ca:28:dc:b7:88:f0:9f:8a:fc:a0:
9d:a6:13:c3:8c:cc:cb:67:e0:7b:a0:41:9d:04:aa:
2b:71:34:f6:6a:e2:2f:39:0e:60:5a:33:0f:fa:ad:
34:26:d7:56:f9:60:85:8d:7b:7c:06:fc:79:7b:2e:
f1:0d:36:d9:fe:d0:d7:74:29:49:e3:1f:40:b3:d3:
0c:fc:9a:f7:66:27:c1:e6:ec:fa:55:47:83:ea:a2:
39:35:48:3f:9f:99:51:f3:90:9a:4a:d5:60:40:5b:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E7:DF:AD:E0:BE:2D:BE:46:5C:4B:E2:48:63:6A:84:44:B4:24:EF
X509v3 Authority Key Identifier:
keyid:F9:A8:A8:34:D1:6B:FE:F6:F1:44:CA:18:58:A9:61:19:D8:88:5A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aioNNFr_vbxRMoYWKlhGdiIWgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/1-aioNNFr_vbxRMoYWKlhGdiIWgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:41:35:cb:6c:87:7d:9a:e0:5b:bf:5b:78:76:8e:c1:a3:a6:
74:a1:3a:8f:09:f9:f5:b9:19:f2:94:90:6d:55:3e:f3:22:3b:
e9:6d:81:1e:3d:5f:9b:18:d2:0d:42:5a:5f:12:e7:25:d3:06:
df:8b:d6:78:bb:df:ed:79:71:a1:9b:54:b8:06:fa:c9:bb:7d:
1c:62:f6:8a:2b:81:45:00:6f:90:13:4b:83:02:d8:8d:b1:cf:
25:85:8f:c2:24:e6:58:83:9f:b3:9e:ed:8e:ad:a0:6d:67:d2:
31:42:62:b7:1a:c3:39:1c:56:25:3a:70:1d:c8:43:8c:3c:c6:
88:b3:ce:65:84:3c:c3:69:59:04:e6:3d:40:35:98:af:bf:ab:
14:70:03:3e:40:8e:1b:ac:be:4b:a5:82:a2:84:44:4d:1b:12:
2e:f7:0c:d2:02:37:af:c3:2e:d7:ad:b8:5b:a1:d3:90:d0:77:
69:4b:51:20:d5:55:c7:9a:0d:9f:fc:b5:df:62:73:44:ab:c8:
fb:f0:e7:d4:cd:92:8f:4d:cf:f3:0c:de:78:65:0e:22:ad:e4:
bf:f3:61:42:f2:f6:c8:90:d6:69:c2:02:08:ae:48:5d:67:fd:
16:4e:2c:74:7e:38:32:ea:de:46:b1:a0:c8:64:64:a6:00:ad:
bc:05:a3:77
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaF2J25rvcr59TOJqH4+J0suMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YThhODM0ZDE2YmZlZjZmMTQ0Y2ExODU4YTk2MTE5ZDg4
ODVhMDIwHhcNMjYxMDI2MDMwMDU4WhcNMjYxMDI3MDMwMDU4WjAzMTEwLwYDVQQD
Eyg1ZGU3ZGZhZGUwYmUyZGJlNDY1YzRiZTI0ODYzNmE4NDQ0YjQyNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6zVTi9E/1rVfnnOGSMY0EBaWSnl
dcHo+jnIV3vv6KJk1ddBmI35QBgagEr4P8+L3Cn+b1KXU+vas6cCnIM53FdzsNrp
GRDeJ9XvakGN5ZhFCFZsISHat9DMEyed1/CQJWvycPMdzB7QZxakOvuew+ROHm7S
RvPeFZiyC6JBhq9P/9q+8eDY44SHfgHqBntjHsS6X8cEJEl3q8oo3LeI8J+K/KCd
phPDjMzLZ+B7oEGdBKorcTT2auIvOQ5gWjMP+q00JtdW+WCFjXt8Bvx5ey7xDTbZ
/tDXdClJ4x9As9MM/Jr3ZifB5uz6VUeD6qI5NUg/n5lR85CaStVgQFtygwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFF3n363gvi2+RlxL4khjaoREtCTvMB8GA1UdIwQY
MBaAFPmoqDTRa/728UTKGFipYRnYiFoCMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1haW9OTkZyX3ZieFJNb1lXS2xoR2RpSVdnSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvMWZkZTA0LTU4N2ItNDA4NS1iNTg1
LTZhZDIwYTJlYWNiOC8xLzEtYWlvTk5Gcl92YnhSTW9ZV0tsaEdkaUlXZ0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2MyLzFmZGUwNC01ODdiLTQwODUtYjU4NS02YWQyMGEyZWFj
YjgvMS8xLWFpb05ORnJfdmJ4Uk1vWVdLbGhHZGlJV2dJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkE1
y2yHfZrgW79beHaOwaOmdKE6jwn59bkZ8pSQbVU+8yI76W2BHj1fmxjSDUJaXxLn
JdMG34vWeLvf7XlxoZtUuAb6ybt9HGL2iiuBRQBvkBNLgwLYjbHPJYWPwiTmWIOf
s57tjq2gbWfSMUJitxrDORxWJTpwHchDjDzGiLPOZYQ8w2lZBOY9QDWYr7+rFHAD
PkCOG6y+S6WCooRETRsSLvcM0gI3r8Mu1624W6HTkNB3aUtRINVVx5oNn/y132Jz
RKvI+/Dn1M2Sj03P8wzeeGUOIq3kv/NhQvL2yJDWacICCK5IXWf9Fk4sdH44Mure
RrGgyGRkpgCtvAWjdw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 13:20:36 2026 by rpki-client