Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft (raw, json)
Hash identifier: ppr4UFt11WdQ+kGE2O2rDdVDdl5Sh/g30od9zoYQLog=
Subject key identifier: F7:68:85:A3:83:F9:B6:05:C2:D8:68:95:68:1F:FC:55:6E:73:F5:8D
Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Certificate serial: 019FDB74D57685806A7350601B7A0EB5B327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
Manifest number: 0957
Signing time: Fri 07 Aug 2026 09:01:34 +0000
Manifest this update: Fri 07 Aug 2026 09:01:34 +0000
Manifest next update: Sat 08 Aug 2026 09:01:34 +0000
Files and hashes: 1: TxCuEKO4UFBws6tMJ89yfNDgvSA.roa (hash: ye0le9kc8j89F6B3VF5KOiTRqH3PrXwEdQjOQuRJ7Js=)
2: aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl (hash: F9b/n7xegBXTaT41qWfQTqy3MYGEj/+AZLB06J+36KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:74:d5:76:85:80:6a:73:50:60:1b:7a:0e:b5:b3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Validity
Not Before: Aug 7 09:01:34 2026 GMT
Not After : Aug 8 09:01:34 2026 GMT
Subject: CN=f76885a383f9b605c2d86895681ffc556e73f58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:e8:f6:89:91:4b:cc:bd:5a:b3:bf:86:07:
e5:4b:4a:0a:64:61:aa:c9:03:e6:07:0f:88:8b:7c:
fc:d8:8f:6d:f6:a6:d2:dc:1c:9d:77:11:dc:b4:33:
fe:3f:8a:ee:89:be:38:f8:64:7b:f2:a4:56:e1:2d:
de:36:8d:42:cf:41:3c:d0:fa:5a:00:e2:c8:b6:75:
c3:a3:8c:8d:5c:b5:75:88:e5:59:ca:25:28:41:aa:
81:b7:98:14:4d:95:f6:3e:63:74:4e:96:70:81:3e:
ae:2c:3c:f2:69:b9:21:2f:56:f2:98:c5:81:54:27:
2b:f9:c1:a3:4c:9f:63:17:5c:58:98:44:4d:98:ff:
b6:c8:a7:29:42:f7:a4:8f:2b:25:f4:a4:8f:bb:ab:
94:9f:8f:a0:3f:6d:18:d9:13:4e:92:00:29:2f:98:
34:0d:23:03:2b:33:0b:4c:db:3d:80:e0:c3:be:1c:
7a:93:bf:23:b6:62:fd:74:0c:f2:9c:ec:07:a7:a6:
04:66:3b:7a:40:62:9b:23:e0:b2:98:a8:d8:75:5c:
22:6e:a6:f6:b3:56:8e:82:88:61:b6:2b:e9:d9:9c:
ac:b7:c0:4f:8b:ab:f9:b5:66:73:18:2b:a1:1e:f0:
83:4e:43:33:fb:3e:7f:19:c8:20:f4:51:73:1c:43:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:68:85:A3:83:F9:B6:05:C2:D8:68:95:68:1F:FC:55:6E:73:F5:8D
X509v3 Authority Key Identifier:
keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:54:a0:fc:1f:3a:6f:b5:e3:7a:b4:31:1c:5c:ca:b9:b6:6c:
8f:b6:0c:3e:25:28:cb:40:d2:76:7b:2f:ee:1c:a5:39:4e:e0:
d6:52:02:3e:bf:8f:f6:2f:42:fc:42:bb:94:00:35:c3:aa:9c:
40:90:85:a2:f1:d2:b9:4d:0b:d7:73:24:8e:42:42:bd:c6:4b:
88:68:09:62:dd:13:2f:c2:49:f2:6e:63:d2:ec:5f:6f:94:29:
7b:9b:7f:9f:db:7d:e3:2c:7a:55:20:07:9d:a4:2f:4c:ab:50:
b5:d1:f1:51:2f:3c:95:7c:65:71:89:8c:7e:87:6e:03:ab:06:
c1:23:ae:f4:23:0e:9a:fb:93:d9:c2:26:9e:14:ff:d6:4b:82:
ff:96:76:fa:fa:15:2c:e9:b0:4e:bf:9c:ad:19:d4:f7:0d:4e:
88:3f:b8:cf:5f:da:34:b0:42:d2:f7:b6:ae:65:fd:b2:16:06:
50:ac:ea:50:f4:1f:f4:d7:2b:90:7a:e5:9f:c8:80:68:00:af:
52:3c:95:90:c8:5f:1a:b0:73:fe:d5:aa:8b:07:d8:ad:b9:4e:
d2:23:2c:9c:85:6d:2e:66:1e:19:35:86:99:83:b2:13:a1:9b:
45:59:20:30:c8:4d:a5:83:8b:3f:12:e5:31:36:1e:86:98:49:
d7:a1:2e:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/bdNV2hYBqc1BgG3oOtbMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4N2I5MWVkYTE2YjZmMWIxZmEwMTc1ZDY3Yzc5OTRmNjkx
ZDhlOTcwHhcNMjYwODA3MDkwMTM0WhcNMjYwODA4MDkwMTM0WjAzMTEwLwYDVQQD
EyhmNzY4ODVhMzgzZjliNjA1YzJkODY4OTU2ODFmZmM1NTZlNzNmNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OXo9omRS8y9WrO/hgflS0oKZGGq
yQPmBw+Ii3z82I9t9qbS3ByddxHctDP+P4ruib44+GR78qRW4S3eNo1Cz0E80Ppa
AOLItnXDo4yNXLV1iOVZyiUoQaqBt5gUTZX2PmN0TpZwgT6uLDzyabkhL1bymMWB
VCcr+cGjTJ9jF1xYmERNmP+2yKcpQvekjysl9KSPu6uUn4+gP20Y2RNOkgApL5g0
DSMDKzMLTNs9gODDvhx6k78jtmL9dAzynOwHp6YEZjt6QGKbI+CymKjYdVwibqb2
s1aOgohhtivp2Zyst8BPi6v5tWZzGCuhHvCDTkMz+z5/Gcgg9FFzHEN5JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdohaOD+bYFwtholWgf/FVuc/WNMB8GA1UdIwQY
MBaAFGh7ke2ha28bH6AXXWfHmU9pHY6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZmI4ZGYtMGU0OC00NjY1LWE5OWIt
ZGZmZTU5MDIzZTg5LzEvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZmI4ZGYtMGU0OC00NjY1LWE5OWItZGZmZTU5MDIzZTg5
LzEvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFSg/B86
b7XjerQxHFzKubZsj7YMPiUoy0DSdnsv7hylOU7g1lICPr+P9i9C/EK7lAA1w6qc
QJCFovHSuU0L13MkjkJCvcZLiGgJYt0TL8JJ8m5j0uxfb5Qpe5t/n9t94yx6VSAH
naQvTKtQtdHxUS88lXxlcYmMfoduA6sGwSOu9CMOmvuT2cImnhT/1kuC/5Z2+voV
LOmwTr+crRnU9w1OiD+4z1/aNLBC0ve2rmX9shYGUKzqUPQf9NcrkHrln8iAaACv
UjyVkMhfGrBz/tWqiwfYrblO0iMsnIVtLmYeGTWGmYOyE6GbRVkgMMhNpYOLPxLl
MTYehphJ16Eu9Q==
-----END CERTIFICATE-----
Generated at Fri Aug 7 17:11:58 2026 by rpki-client