Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: 82XZy8pktrwe8IgL30xpTt0iqo5BBUzTpyy2UnZ/S/A=
Subject key identifier: 1B:AB:11:90:DE:AF:48:70:CE:67:B0:29:36:23:03:17:C0:90:E0:E0
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 01A178F1451E8D6E764EB2467A376A220B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 1A55
Signing time: Mon 26 Oct 2026 16:00:40 +0000
Manifest this update: Mon 26 Oct 2026 16:00:40 +0000
Manifest next update: Tue 27 Oct 2026 16:00:40 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: a2frMZUSbYR/qWFoqWzlN9g9qFWq8JcItYVJQXILCOM=)
2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:45:1e:8d:6e:76:4e:b2:46:7a:37:6a:22:0b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Oct 26 16:00:40 2026 GMT
Not After : Oct 27 16:00:40 2026 GMT
Subject: CN=1bab1190deaf4870ce67b02936230317c090e0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:da:8e:e4:f1:19:be:82:a0:3d:f1:7d:e5:
4d:6a:4c:63:7f:bf:0b:c8:b5:90:51:20:ec:c7:b3:
22:6f:db:77:1b:9d:ee:28:8c:a4:2d:4c:04:82:3a:
21:b0:fa:6a:1b:78:c8:6c:70:a8:12:65:e0:8e:c1:
56:34:7f:de:dc:4c:90:d6:3d:8c:f5:8b:fc:9e:01:
4c:d0:7b:1e:60:fe:58:22:f6:56:90:e3:39:a5:55:
2a:82:7f:27:9a:41:95:bb:ad:4b:8f:66:99:52:e4:
66:9e:ef:3f:2e:4f:f5:55:6d:74:b1:7f:51:24:ed:
a3:53:19:2d:fb:43:6e:56:49:c2:c6:a5:03:b8:b2:
9f:4f:15:73:f4:b2:aa:32:6b:02:d1:c2:38:af:8f:
fc:d0:7c:2c:2b:99:91:9c:47:94:8c:68:11:f1:55:
06:e7:10:fd:ab:e7:20:db:05:a5:ae:60:7b:27:8c:
3f:da:b4:4f:69:01:8a:bc:82:fd:29:7b:70:50:37:
fc:50:e0:bd:e3:14:93:32:d9:1f:9e:f7:9e:b1:89:
c3:94:9b:ba:33:47:80:75:bd:89:d5:9e:fb:56:d6:
4a:77:8a:7e:1a:85:4b:d6:36:2e:ac:bc:e6:90:1f:
73:98:bc:08:2a:d8:34:b5:6e:2d:22:cb:8a:e7:22:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AB:11:90:DE:AF:48:70:CE:67:B0:29:36:23:03:17:C0:90:E0:E0
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:06:a8:cc:4e:78:94:7e:1b:c7:f8:1e:c9:86:e4:be:2a:0c:
6d:24:06:2f:f6:77:13:76:6d:7c:ad:85:74:44:85:ea:35:ce:
fc:f8:bb:f0:16:4e:38:94:b7:80:5d:1d:84:ef:fd:15:78:6d:
a1:f4:f8:b1:f8:7c:87:d0:fc:76:94:64:14:10:74:fa:7f:1e:
87:a5:17:28:e5:e0:b6:b6:48:f7:40:83:1c:31:6c:04:6b:8d:
d1:ce:7a:39:ac:b6:e4:b5:7d:ad:44:66:a8:02:e0:82:3d:30:
a3:b2:d3:9d:75:9c:8d:d4:c9:8c:5f:82:96:f1:fa:03:4a:87:
32:9c:af:fc:fa:78:93:67:2e:5a:db:26:44:40:3a:b1:b7:fe:
8c:fe:5b:9c:09:b1:82:89:1b:58:f2:55:9d:91:96:6d:38:4e:
e7:cb:59:8e:19:dd:e5:78:63:6a:c9:4f:6a:1e:9a:a1:d3:2d:
0d:8a:74:c7:c1:2b:38:26:20:15:96:6e:ac:51:1b:1b:c3:6d:
03:58:ff:52:3b:58:08:14:8b:a6:4d:f2:59:db:30:29:dc:6b:
f2:20:53:66:c9:d4:90:fc:b5:ae:eb:28:f8:26:4c:5d:f5:d5:
c3:ce:4c:dd:b5:04:5f:fa:a0:45:05:09:4a:6e:6a:3c:53:a6:
48:a7:15:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF48UUejW52TrJGejdqIgtLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTUxZDQ0NWI3NjdhYjliNjYyNzcwMmU0YTJiMzkwNGQy
MDNmNzcwHhcNMjYxMDI2MTYwMDQwWhcNMjYxMDI3MTYwMDQwWjAzMTEwLwYDVQQD
EygxYmFiMTE5MGRlYWY0ODcwY2U2N2IwMjkzNjIzMDMxN2MwOTBlMGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gzajuTxGb6CoD3xfeVNakxjf78L
yLWQUSDsx7Mib9t3G53uKIykLUwEgjohsPpqG3jIbHCoEmXgjsFWNH/e3EyQ1j2M
9Yv8ngFM0HseYP5YIvZWkOM5pVUqgn8nmkGVu61Lj2aZUuRmnu8/Lk/1VW10sX9R
JO2jUxkt+0NuVknCxqUDuLKfTxVz9LKqMmsC0cI4r4/80HwsK5mRnEeUjGgR8VUG
5xD9q+cg2wWlrmB7J4w/2rRPaQGKvIL9KXtwUDf8UOC94xSTMtkfnveesYnDlJu6
M0eAdb2J1Z77VtZKd4p+GoVL1jYurLzmkB9zmLwIKtg0tW4tIsuK5yJpLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBurEZDer0hwzmewKTYjAxfAkODgMB8GA1UdIwQY
MBaAFGmlHURbdnq5tmJ3AuSis5BNID93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDkt
NzA1MjBlYTc2MzY5LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDktNzA1MjBlYTc2MzY5
LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAaozE54
lH4bx/geyYbkvioMbSQGL/Z3E3ZtfK2FdESF6jXO/Pi78BZOOJS3gF0dhO/9FXht
ofT4sfh8h9D8dpRkFBB0+n8eh6UXKOXgtrZI90CDHDFsBGuN0c56Oay25LV9rURm
qALggj0wo7LTnXWcjdTJjF+ClvH6A0qHMpyv/Pp4k2cuWtsmREA6sbf+jP5bnAmx
gokbWPJVnZGWbThO58tZjhnd5XhjaslPah6aodMtDYp0x8ErOCYgFZZurFEbG8Nt
A1j/UjtYCBSLpk3yWdswKdxr8iBTZsnUkPy1ruso+CZMXfXVw85M3bUEX/qgRQUJ
Sm5qPFOmSKcVSg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:52:24 2026 by rpki-client