
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
File: afURWpSbKIPEzDxJX_uJk97Z2F0.mft (raw, json)
Hash identifier: py8RrrSSbAp+JKJtq3vWI0LtWOGiogyvX2/GYchqvBU=
Subject key identifier: 97:7D:10:41:F4:D1:75:4F:9E:7B:D4:2D:CC:2B:3F:B6:7C:FC:B8:E1
Authority key identifier: 69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
Certificate issuer: /CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Certificate serial: 01A17BBAFA07902D4C5296454A82D87D9BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
Manifest number: 04E2
Signing time: Tue 27 Oct 2026 05:00:13 +0000
Manifest this update: Tue 27 Oct 2026 05:00:13 +0000
Manifest next update: Wed 28 Oct 2026 05:00:13 +0000
Files and hashes: 1: F0NU8SzenQKyHyDow73tXbiGwdo.roa (hash: iOBS39tMhlNuj1wPQ/s8NHjEci7w9ozCqefNCKugJMg=)
2: afURWpSbKIPEzDxJX_uJk97Z2F0.crl (hash: bYOh1yFiSDxQG7Npdu+PVAjvBytIh9sTgUvg5wlJ3/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:ba:fa:07:90:2d:4c:52:96:45:4a:82:d8:7d:9b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Validity
Not Before: Oct 27 05:00:13 2026 GMT
Not After : Oct 28 05:00:13 2026 GMT
Subject: CN=977d1041f4d1754f9e7bd42dcc2b3fb67cfcb8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:24:3b:3d:72:0b:06:74:1b:da:da:95:e0:
54:d4:af:ad:9a:f5:e0:3c:dd:f3:15:05:26:cb:f4:
ec:e7:7e:5b:21:9a:9d:d9:c6:93:b1:d6:52:8e:9c:
2f:79:84:ec:fd:e4:5f:ab:7c:07:7c:7d:a0:00:e1:
76:57:80:52:5b:2c:59:51:87:d0:9d:5b:65:48:a6:
8e:93:be:69:93:d7:1d:6a:48:11:ae:1f:25:b5:4c:
00:1e:84:ea:2b:0a:5a:fe:74:42:eb:f5:6a:31:0b:
32:ee:46:bb:48:1e:28:de:c8:1a:67:0c:c0:0c:5c:
bc:10:68:dd:4b:d4:40:d7:68:ac:ca:0b:1f:e7:b7:
08:33:b7:28:8c:68:76:86:48:17:39:56:08:30:d1:
92:10:c4:66:1e:01:cd:3e:4f:0a:cb:0d:45:57:a5:
1f:5c:62:91:b3:2e:86:f8:b4:58:d5:17:f1:af:e1:
e5:81:66:13:86:34:bf:c1:73:83:73:be:1f:d6:e2:
8b:a7:5f:43:dc:cf:99:c1:aa:c8:56:1d:da:57:2a:
76:7e:a7:e1:2d:b7:17:ef:07:c4:57:71:a5:12:09:
df:67:f0:63:05:a1:ab:96:5c:a7:9f:67:c1:18:e7:
7f:5c:ea:48:cb:54:58:40:df:5c:c8:06:50:28:e2:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7D:10:41:F4:D1:75:4F:9E:7B:D4:2D:CC:2B:3F:B6:7C:FC:B8:E1
X509v3 Authority Key Identifier:
keyid:69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:14:30:e0:c9:00:57:b9:ef:93:81:e2:c2:20:d2:00:b8:12:
f7:bd:76:e3:bf:09:1b:f2:25:74:7b:70:7c:9c:81:3e:31:5e:
eb:66:fe:e5:c7:c4:2b:b2:e4:44:01:b5:39:14:e2:6f:55:01:
e5:08:56:bb:3f:a3:f8:14:54:ef:84:13:52:bf:b7:1f:00:d6:
ab:b6:36:a4:01:03:1a:46:f7:8a:e5:51:63:15:ec:aa:63:02:
0b:db:ec:21:c3:48:b8:f6:a9:b5:67:75:5c:a1:b8:58:7e:86:
8b:a2:ee:f8:61:0c:3a:c6:aa:43:b9:73:c2:ec:4d:23:30:92:
33:1d:85:54:40:c2:29:83:b2:e1:07:73:fb:62:34:5b:f5:b3:
b5:0c:57:e5:dc:47:e9:f4:73:70:23:c6:83:6d:f6:f7:d1:ff:
dd:1f:af:e6:8d:72:00:fa:b5:d2:4e:09:60:6d:9e:f3:ba:c9:
f3:00:a4:9a:c0:bf:e1:f5:21:ef:99:06:e7:bd:5f:cd:5a:d8:
4c:1c:c2:ed:5c:55:e0:0a:e0:22:0a:e2:ed:f8:ba:fa:c0:ac:
5b:c8:5a:5c:c4:32:a5:5e:56:11:97:e2:98:e9:d1:03:3b:be:
d1:2e:68:78:35:55:bc:b7:d1:8e:ea:70:c7:df:61:01:b0:08:
9b:c7:b8:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7uvoHkC1MUpZFSoLYfZuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjUxMTVhOTQ5YjI4ODNjNGNjM2M0OTVmZmI4OTkzZGVk
OWQ4NWQwHhcNMjYxMDI3MDUwMDEzWhcNMjYxMDI4MDUwMDEzWjAzMTEwLwYDVQQD
Eyg5NzdkMTA0MWY0ZDE3NTRmOWU3YmQ0MmRjYzJiM2ZiNjdjZmNiOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnskOz1yCwZ0G9raleBU1K+tmvXg
PN3zFQUmy/Ts535bIZqd2caTsdZSjpwveYTs/eRfq3wHfH2gAOF2V4BSWyxZUYfQ
nVtlSKaOk75pk9cdakgRrh8ltUwAHoTqKwpa/nRC6/VqMQsy7ka7SB4o3sgaZwzA
DFy8EGjdS9RA12isygsf57cIM7cojGh2hkgXOVYIMNGSEMRmHgHNPk8Kyw1FV6Uf
XGKRsy6G+LRY1Rfxr+HlgWYThjS/wXODc74f1uKLp19D3M+ZwarIVh3aVyp2fqfh
LbcX7wfEV3GlEgnfZ/BjBaGrllynn2fBGOd/XOpIy1RYQN9cyAZQKOIgPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJd9EEH00XVPnnvULcwrP7Z8/LjhMB8GA1UdIwQY
MBaAFGn1EVqUmyiDxMw8SV/7iZPe2dhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jMDY1MzYtMDFhYS00ZTM5LTg5YjYt
YjU4NzA0ZjI4NTkxLzEvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jMDY1MzYtMDFhYS00ZTM5LTg5YjYtYjU4NzA0ZjI4NTkx
LzEvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARQw4MkA
V7nvk4HiwiDSALgS9712478JG/IldHtwfJyBPjFe62b+5cfEK7LkRAG1ORTib1UB
5QhWuz+j+BRU74QTUr+3HwDWq7Y2pAEDGkb3iuVRYxXsqmMCC9vsIcNIuPaptWd1
XKG4WH6Gi6Lu+GEMOsaqQ7lzwuxNIzCSMx2FVEDCKYOy4Qdz+2I0W/WztQxX5dxH
6fRzcCPGg23299H/3R+v5o1yAPq10k4JYG2e87rJ8wCkmsC/4fUh75kG571fzVrY
TBzC7VxV4ArgIgri7fi6+sCsW8haXMQypV5WEZfimOnRAzu+0S5oeDVVvLfRjupw
x99hAbAIm8e49g==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:38:57 2026 by rpki-client