Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: IA6wj66y9n/wcHPEN+gspboDyCRa0KFIrGe1AwEH7HI=
Subject key identifier: ED:63:2F:8E:17:C9:7E:CE:56:5D:00:34:27:76:EC:EA:D9:9E:88:4D
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 01A16E3724777D4CBC8B2A3D84A3A57B58AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 0B21
Signing time: Sat 24 Oct 2026 14:01:09 +0000
Manifest this update: Sat 24 Oct 2026 14:01:09 +0000
Manifest next update: Sun 25 Oct 2026 14:01:09 +0000
Files and hashes: 1: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: 7rBTHpE2r7Ou92i8UY7eNYQkmF6Th4lSQRRlLek9eUM=)
2: ilf77_-o9-q6za7MOsqeG7F-F18.roa (hash: QcXY77GP6oWSI7llT54vOOPgAvyMn7s0Et6LlhSw/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:37:24:77:7d:4c:bc:8b:2a:3d:84:a3:a5:7b:58:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Oct 24 14:01:09 2026 GMT
Not After : Oct 25 14:01:09 2026 GMT
Subject: CN=ed632f8e17c97ece565d00342776ecead99e884d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:fd:6a:f9:a7:ef:6a:54:7f:07:81:14:15:
4c:9b:ed:5f:f5:19:15:dd:d2:3c:7f:76:10:6c:ce:
59:b8:77:62:eb:9b:19:88:07:24:63:90:e6:73:52:
2f:f0:9c:0a:e1:cf:b2:d1:1d:c6:21:5e:98:8d:10:
23:df:1a:34:21:43:a0:ed:d5:56:06:20:eb:e3:4a:
e2:f6:6e:1c:18:fe:bf:10:d7:0e:90:bc:ee:0e:07:
6e:2d:61:1b:12:e4:c2:fc:7d:94:80:c2:6c:80:c4:
5c:9b:b9:52:73:c3:dd:86:e1:51:60:a3:f0:e4:67:
ad:24:18:18:45:63:52:67:47:71:5f:b0:1a:e7:84:
f6:9b:c8:68:b6:96:e5:36:4a:be:7d:1a:da:de:8e:
c5:98:b0:57:81:fe:46:9d:9c:b3:b9:7b:e2:70:36:
a2:4a:cb:27:06:83:aa:b1:e7:98:34:4d:4f:b9:5b:
df:88:27:23:e5:b5:49:b7:f9:b4:27:c7:a8:6f:1e:
d7:3b:88:73:d1:c7:98:46:a0:e8:cc:44:53:4e:98:
90:80:a2:0f:0b:82:b5:f7:80:f3:66:0c:91:7a:81:
b9:23:02:93:53:be:c6:7a:e4:31:0a:58:5e:7e:fc:
78:b3:c0:ce:f8:54:8d:3f:1d:8a:27:3c:f5:40:ea:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:63:2F:8E:17:C9:7E:CE:56:5D:00:34:27:76:EC:EA:D9:9E:88:4D
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e4:05:fa:f3:47:8d:af:43:bc:9d:2c:f4:f4:32:ef:c8:5d:
83:e6:6f:bc:45:7b:60:11:55:71:03:ed:64:7a:da:0d:2b:b2:
a5:03:2f:67:92:b4:16:b2:b5:80:b6:96:82:02:9b:92:32:31:
4a:b5:7e:1d:e7:52:90:68:94:c6:ed:2f:f0:68:41:12:c0:41:
32:c0:e9:44:3c:d9:23:ee:e9:1e:7e:d5:c4:85:b9:19:3c:89:
b6:06:28:e4:e5:22:ab:d6:a9:19:c7:8e:4b:9e:75:ba:ba:a8:
5a:92:d3:36:f4:8f:2e:d6:96:3f:c3:7f:f1:26:06:bc:ed:56:
2d:9e:97:1f:17:7b:b7:55:cb:f6:18:fe:fe:78:07:e0:ae:84:
aa:d1:9b:6a:43:67:f0:f3:a1:08:38:59:5f:55:b6:9f:b9:66:
f4:eb:93:01:c1:6b:34:61:62:9c:3f:5e:e0:36:84:ed:25:43:
02:71:79:01:70:ae:79:15:98:af:be:76:df:76:50:e6:40:77:
61:fb:20:a5:3d:99:92:d2:79:20:eb:a3:23:ef:ae:63:c1:f7:
bb:f8:e9:12:98:9b:5f:66:73:8f:a9:f8:f3:de:e6:f7:fa:a8:
8c:81:a1:a2:bc:6a:a2:da:37:dc:4d:58:5e:27:50:4f:ce:df:
8d:9d:67:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFuNyR3fUy8iyo9hKOle1iuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MDdmMDA2M2VlOWFmMzFkODdjZmU2NWI5YmMxOTNlYjQy
Yzg5NjkwHhcNMjYxMDI0MTQwMTA5WhcNMjYxMDI1MTQwMTA5WjAzMTEwLwYDVQQD
EyhlZDYzMmY4ZTE3Yzk3ZWNlNTY1ZDAwMzQyNzc2ZWNlYWQ5OWU4ODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pP9avmn72pUfweBFBVMm+1f9RkV
3dI8f3YQbM5ZuHdi65sZiAckY5Dmc1Iv8JwK4c+y0R3GIV6YjRAj3xo0IUOg7dVW
BiDr40ri9m4cGP6/ENcOkLzuDgduLWEbEuTC/H2UgMJsgMRcm7lSc8PdhuFRYKPw
5GetJBgYRWNSZ0dxX7Aa54T2m8hotpblNkq+fRra3o7FmLBXgf5GnZyzuXvicDai
SssnBoOqseeYNE1PuVvfiCcj5bVJt/m0J8eobx7XO4hz0ceYRqDozERTTpiQgKIP
C4K194DzZgyReoG5IwKTU77GeuQxClhefvx4s8DO+FSNPx2KJzz1QOoj4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1jL44XyX7OVl0ANCd27OrZnohNMB8GA1UdIwQY
MBaAFIQH8AY+6a8x2Hz+Zbm8GT60LIlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWIt
ZTFlZmNmMmVkMGE3LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWItZTFlZmNmMmVkMGE3
LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOQF+vNH
ja9DvJ0s9PQy78hdg+ZvvEV7YBFVcQPtZHraDSuypQMvZ5K0FrK1gLaWggKbkjIx
SrV+HedSkGiUxu0v8GhBEsBBMsDpRDzZI+7pHn7VxIW5GTyJtgYo5OUiq9apGceO
S551urqoWpLTNvSPLtaWP8N/8SYGvO1WLZ6XHxd7t1XL9hj+/ngH4K6EqtGbakNn
8POhCDhZX1W2n7lm9OuTAcFrNGFinD9e4DaE7SVDAnF5AXCueRWYr75233ZQ5kB3
YfsgpT2ZktJ5IOujI++uY8H3u/jpEpibX2Zzj6n4897m9/qojIGhorxqoto33E1Y
XidQT87fjZ1nAg==
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:28:24 2026 by rpki-client