Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
File: rAX0aJpExsm7ECrDExtucFNOr0U.mft (raw, json)
Hash identifier: fHyhN2i+X7b7sI6/3KasztShdWkcg3hiuFfwb7a65jE=
Subject key identifier: FD:8C:1E:22:F4:72:E6:72:D7:7F:50:0F:96:9B:23:AE:24:BB:73:60
Authority key identifier: AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
Certificate issuer: /CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Certificate serial: 01A153658524D60D6952B9F59C7751B0B032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
Manifest number: 0129
Signing time: Mon 19 Oct 2026 09:02:04 +0000
Manifest this update: Mon 19 Oct 2026 09:02:04 +0000
Manifest next update: Tue 20 Oct 2026 09:02:04 +0000
Files and hashes: 1: 8KpPDxsbWUdm2uUdpYhleeRGrAY.roa (hash: onwtO6lm790hsvkHwCBWU4djLXwDxoFOKGLkdsUwJNE=)
2: GiGclhLqZFLRsgCRYA0MC4_mt7U.roa (hash: TNhQmFU9fhhz9PaprjVTJQ3o1TKkQSYQEMCYW6CwS90=)
3: rAX0aJpExsm7ECrDExtucFNOr0U.crl (hash: yj47IzXT1C+6A+cD419wKsy3CQAY0NXpDBRVBf8YH8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:65:85:24:d6:0d:69:52:b9:f5:9c:77:51:b0:b0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Validity
Not Before: Oct 19 09:02:04 2026 GMT
Not After : Oct 20 09:02:04 2026 GMT
Subject: CN=fd8c1e22f472e672d77f500f969b23ae24bb7360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:99:38:6d:9e:8a:ab:53:45:0b:c0:a0:a2:
06:b4:82:bd:79:f2:14:61:59:0d:7f:37:94:f2:1f:
64:c4:70:33:da:6e:53:96:8c:78:db:f0:8b:f3:9e:
98:56:7b:d7:63:0d:74:ca:01:40:f4:e8:f2:36:64:
be:9e:3f:83:61:99:fc:2b:a3:66:8b:10:13:2a:67:
3f:69:16:85:69:a8:f8:a0:29:80:b7:62:63:4f:31:
d4:04:46:8c:6f:47:ed:10:29:ca:5e:a3:fb:2a:8b:
7e:66:91:8d:ec:c6:7d:d9:e4:1c:9f:ce:7e:79:6f:
5d:cb:c2:f5:90:e0:67:e0:ce:b5:7f:55:95:4e:13:
21:b6:f5:18:0b:b4:4f:b3:98:41:c3:2a:22:0e:71:
3b:d7:de:fe:02:23:cd:a6:a5:b7:d7:94:8b:89:e2:
1e:38:7e:73:93:2a:96:3b:de:d5:c2:8b:49:74:44:
0b:bc:09:3e:4f:8c:0b:ab:e8:85:11:cc:51:be:43:
db:2e:a4:6d:92:af:ed:b9:be:4f:91:14:7a:3d:05:
52:e7:03:70:ca:60:40:41:93:ef:5e:8b:21:42:5a:
91:a1:65:92:00:b5:e4:9c:b3:10:d2:1c:39:88:ca:
88:06:6a:d3:95:fa:da:eb:cb:66:35:bc:70:1f:8f:
7a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8C:1E:22:F4:72:E6:72:D7:7F:50:0F:96:9B:23:AE:24:BB:73:60
X509v3 Authority Key Identifier:
keyid:AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0d:ba:7e:ad:f0:90:bb:60:21:8f:a6:a5:95:5c:78:ed:f7:
74:70:34:27:23:76:7f:f3:54:53:25:b0:a8:2a:b1:90:17:c0:
f0:d4:26:0d:e5:a5:c2:b6:65:8d:61:29:81:30:60:49:8c:3b:
34:44:81:11:7b:5b:9b:2a:0e:5c:a3:1b:42:a6:f5:b6:d1:c1:
e0:05:12:ab:d0:d8:b9:21:95:10:ec:e5:d1:c7:cb:67:30:40:
db:8e:89:df:6b:51:35:87:ef:dc:6f:f8:f3:e1:6c:52:0c:c9:
ea:e1:f5:07:d2:6a:16:5d:18:39:93:0d:a6:74:10:b0:1a:22:
42:8f:9c:53:02:37:49:c1:89:37:2a:b6:ae:13:e4:5c:e2:88:
17:b5:be:00:3e:f1:bb:04:30:6c:38:cf:72:df:6d:31:f8:2f:
7c:1e:3a:38:ab:16:d5:4a:e5:99:89:c2:7a:53:cf:8a:02:e6:
d6:5f:5a:ad:e2:b2:94:0b:27:cf:f5:a9:b4:78:91:be:05:1f:
09:ba:8b:aa:bd:73:a9:73:bc:e0:47:94:59:d5:2b:2b:dd:11:
51:c0:79:cd:79:11:2f:25:e4:4a:63:35:50:ae:71:3c:4f:e8:
6f:17:c0:d3:d4:5c:9a:c0:a1:1d:95:38:80:1d:14:a4:19:db:
7f:4d:c6:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFTZYUk1g1pUrn1nHdRsLAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDVmNDY4OWE0NGM2YzliYjEwMmFjMzEzMWI2ZTcwNTM0
ZWFmNDUwHhcNMjYxMDE5MDkwMjA0WhcNMjYxMDIwMDkwMjA0WjAzMTEwLwYDVQQD
EyhmZDhjMWUyMmY0NzJlNjcyZDc3ZjUwMGY5NjliMjNhZTI0YmI3MzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wuZOG2eiqtTRQvAoKIGtIK9efIU
YVkNfzeU8h9kxHAz2m5Tlox42/CL856YVnvXYw10ygFA9OjyNmS+nj+DYZn8K6Nm
ixATKmc/aRaFaaj4oCmAt2JjTzHUBEaMb0ftECnKXqP7Kot+ZpGN7MZ92eQcn85+
eW9dy8L1kOBn4M61f1WVThMhtvUYC7RPs5hBwyoiDnE7197+AiPNpqW315SLieIe
OH5zkyqWO97VwotJdEQLvAk+T4wLq+iFEcxRvkPbLqRtkq/tub5PkRR6PQVS5wNw
ymBAQZPvXoshQlqRoWWSALXknLMQ0hw5iMqIBmrTlfra68tmNbxwH496+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2MHiL0cuZy139QD5abI64ku3NgMB8GA1UdIwQY
MBaAFKwF9GiaRMbJuxAqwxMbbnBTTq9FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFYMGFKcEV4c203RUNyREV4dHVjRk5PcjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2Ut
MzJlYjNhNGVhZDQzLzEvckFYMGFKcEV4c203RUNyREV4dHVjRk5PcjBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2UtMzJlYjNhNGVhZDQz
LzEvckFYMGFKcEV4c203RUNyREV4dHVjRk5PcjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdA26fq3w
kLtgIY+mpZVceO33dHA0JyN2f/NUUyWwqCqxkBfA8NQmDeWlwrZljWEpgTBgSYw7
NESBEXtbmyoOXKMbQqb1ttHB4AUSq9DYuSGVEOzl0cfLZzBA246J32tRNYfv3G/4
8+FsUgzJ6uH1B9JqFl0YOZMNpnQQsBoiQo+cUwI3ScGJNyq2rhPkXOKIF7W+AD7x
uwQwbDjPct9tMfgvfB46OKsW1UrlmYnCelPPigLm1l9areKylAsnz/WptHiRvgUf
CbqLqr1zqXO84EeUWdUrK90RUcB5zXkRLyXkSmM1UK5xPE/obxfA09RcmsChHZU4
gB0UpBnbf03GFw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:43:51 2026 by rpki-client