Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft (raw, json)
Hash identifier: rUu0cYTJ+VirfW62Mp+YFpwVKPMBdIfKEOLanTFXhLI=
Subject key identifier: 4B:04:77:D4:00:5E:08:D5:0C:91:38:FB:DE:5F:86:6E:4F:41:34:F4
Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Certificate serial: 01A1A71427B1DE9BEF450749C67942658ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
Manifest number: 0A45
Signing time: Wed 04 Nov 2026 15:01:18 +0000
Manifest this update: Wed 04 Nov 2026 15:01:18 +0000
Manifest next update: Thu 05 Nov 2026 15:01:18 +0000
Files and hashes: 1: TxCuEKO4UFBws6tMJ89yfNDgvSA.roa (hash: ye0le9kc8j89F6B3VF5KOiTRqH3PrXwEdQjOQuRJ7Js=)
2: aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl (hash: H0/54x1AqYEA/OVJLG7mtiomGnjHVKQPkD7Co7EjHPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:14:27:b1:de:9b:ef:45:07:49:c6:79:42:65:8a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Validity
Not Before: Nov 4 15:01:18 2026 GMT
Not After : Nov 5 15:01:18 2026 GMT
Subject: CN=4b0477d4005e08d50c9138fbde5f866e4f4134f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:65:a9:33:f1:e7:70:3d:9c:d9:d6:ee:d6:
73:14:1c:d4:fb:e3:05:52:18:41:6c:f5:07:29:97:
56:06:59:27:c9:c6:f3:c0:bf:83:1e:f7:8e:eb:4d:
57:65:56:6a:c7:0b:aa:0d:f8:dc:4f:64:28:1a:c0:
92:81:e3:f0:b0:9d:7e:54:c2:ba:8b:8c:9e:32:9e:
75:97:37:d2:2b:53:0f:6d:5e:40:85:cd:7a:9e:c9:
ef:2a:e7:d1:91:97:51:d9:c9:7a:88:f0:eb:c9:7d:
9f:9d:ee:b1:f1:de:42:7c:bc:de:b5:2b:ac:2a:3d:
f4:d3:04:a3:1f:e8:51:e0:03:ff:4c:c4:eb:87:b0:
90:01:82:fc:40:67:b2:f2:f5:36:67:f0:1d:2f:6b:
df:b4:fc:ac:a4:01:bf:55:01:eb:8a:37:00:c4:64:
21:05:d2:ed:1b:b4:98:b2:3e:6d:14:11:fa:81:b7:
bd:1e:69:bc:2b:40:3e:2d:bf:ba:6f:c4:33:c5:e1:
d9:69:17:11:d8:2d:70:44:56:75:05:22:0d:e1:4c:
ef:f9:70:08:4e:84:3d:02:8f:91:6e:b2:78:4e:c4:
e5:e7:4e:b9:ba:a6:7b:1e:03:9c:df:48:46:45:81:
3f:f6:51:5c:2e:dd:57:04:43:3e:3f:5f:bc:6e:9e:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:04:77:D4:00:5E:08:D5:0C:91:38:FB:DE:5F:86:6E:4F:41:34:F4
X509v3 Authority Key Identifier:
keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c6:95:6a:05:1b:33:bb:50:e9:48:73:e7:cd:41:55:1e:c1:
cf:2e:4c:79:f9:e1:c3:7a:09:00:23:2e:39:da:f5:b3:17:40:
1c:d1:13:06:87:e3:a2:98:3e:bd:a0:fd:59:68:63:20:23:bd:
01:6c:f8:22:d4:d0:aa:e9:96:73:f7:12:09:bc:5b:2a:d2:f0:
ff:8c:40:05:64:af:84:12:ff:ae:8f:14:dc:ac:76:34:a1:c9:
ab:55:45:5b:66:35:a5:6d:2a:5a:b6:7a:b1:ae:55:33:e4:be:
bf:3b:45:22:8f:af:0a:e6:8c:08:e7:93:9f:28:6a:95:47:c3:
8e:d1:7a:07:ff:0d:7e:ac:82:62:44:ae:3e:59:e8:af:c8:34:
8e:a8:4b:fe:94:78:7b:68:48:05:1d:9c:58:32:84:0a:63:1a:
79:8f:32:47:94:9e:24:97:9b:c5:f9:e8:29:9a:36:04:9c:fd:
0c:bd:4e:89:46:35:cd:74:d2:f2:84:5c:3d:cc:bd:4a:e9:07:
6d:fd:51:81:e1:13:91:5e:5b:ec:cb:d4:9d:ae:c1:c7:b1:78:
ca:94:e9:b2:2a:90:a6:a0:28:e1:6e:08:58:96:c8:88:be:dd:
d9:fb:ae:23:31:69:d5:76:07:d4:37:a1:f1:de:4f:c9:29:ff:
45:b3:23:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGnFCex3pvvRQdJxnlCZYrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4N2I5MWVkYTE2YjZmMWIxZmEwMTc1ZDY3Yzc5OTRmNjkx
ZDhlOTcwHhcNMjYxMTA0MTUwMTE4WhcNMjYxMTA1MTUwMTE4WjAzMTEwLwYDVQQD
Eyg0YjA0NzdkNDAwNWUwOGQ1MGM5MTM4ZmJkZTVmODY2ZTRmNDEzNGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/5lqTPx53A9nNnW7tZzFBzU++MF
UhhBbPUHKZdWBlknycbzwL+DHveO601XZVZqxwuqDfjcT2QoGsCSgePwsJ1+VMK6
i4yeMp51lzfSK1MPbV5Ahc16nsnvKufRkZdR2cl6iPDryX2fne6x8d5CfLzetSus
Kj300wSjH+hR4AP/TMTrh7CQAYL8QGey8vU2Z/AdL2vftPyspAG/VQHrijcAxGQh
BdLtG7SYsj5tFBH6gbe9Hmm8K0A+Lb+6b8QzxeHZaRcR2C1wRFZ1BSIN4Uzv+XAI
ToQ9Ao+RbrJ4TsTl5065uqZ7HgOc30hGRYE/9lFcLt1XBEM+P1+8bp4WywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsEd9QAXgjVDJE4+95fhm5PQTT0MB8GA1UdIwQY
MBaAFGh7ke2ha28bH6AXXWfHmU9pHY6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZmI4ZGYtMGU0OC00NjY1LWE5OWIt
ZGZmZTU5MDIzZTg5LzEvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZmI4ZGYtMGU0OC00NjY1LWE5OWItZGZmZTU5MDIzZTg5
LzEvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAusaVagUb
M7tQ6Uhz581BVR7Bzy5Mefnhw3oJACMuOdr1sxdAHNETBofjopg+vaD9WWhjICO9
AWz4ItTQqumWc/cSCbxbKtLw/4xABWSvhBL/ro8U3Kx2NKHJq1VFW2Y1pW0qWrZ6
sa5VM+S+vztFIo+vCuaMCOeTnyhqlUfDjtF6B/8NfqyCYkSuPlnor8g0jqhL/pR4
e2hIBR2cWDKECmMaeY8yR5SeJJebxfnoKZo2BJz9DL1OiUY1zXTS8oRcPcy9SukH
bf1RgeETkV5b7MvUna7Bx7F4ypTpsiqQpqAo4W4IWJbIiL7d2fuuIzFp1XYH1Deh
8d5PySn/RbMj6w==
-----END CERTIFICATE-----
Generated at Thu Nov 5 02:54:02 2026 by rpki-client