Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/7684c4-d4c4-4546-b555-8ebbc8769f84/1/pk-aIUfxp5IRyWIBilHj7aKCI2A.mft
File: pk-aIUfxp5IRyWIBilHj7aKCI2A.mft (raw, json)
Hash identifier: 1QyqCWpE7QL4mk1q2kYu1eF8pX1tHxDlJmslHClM1ls=
Subject key identifier: D8:9B:44:02:F8:87:18:59:0A:67:8D:49:3F:15:BD:EE:A3:78:0B:74
Authority key identifier: A6:4F:9A:21:47:F1:A7:92:11:C9:62:01:8A:51:E3:ED:A2:82:23:60
Certificate issuer: /CN=a64f9a2147f1a79211c962018a51e3eda2822360
Certificate serial: 01A17ADFD063EE9C4195C1FD8F049CC262A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-aIUfxp5IRyWIBilHj7aKCI2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7684c4-d4c4-4546-b555-8ebbc8769f84/1/pk-aIUfxp5IRyWIBilHj7aKCI2A.mft
Manifest number: 025B
Signing time: Tue 27 Oct 2026 01:00:50 +0000
Manifest this update: Tue 27 Oct 2026 01:00:50 +0000
Manifest next update: Wed 28 Oct 2026 01:00:50 +0000
Files and hashes: 1: osSDINeYKm5_JYjyxZSYnMac5Fw.asa (hash: J+kHxM0skR5UstJh7HIVErlEbjJKJ7i1i+Y59uTkDio=)
2: pk-aIUfxp5IRyWIBilHj7aKCI2A.crl (hash: fVaNBj9Y8KdvAL704kT0f6OOEtBGO5Ay9TByaR/aW9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7684c4-d4c4-4546-b555-8ebbc8769f84/1/pk-aIUfxp5IRyWIBilHj7aKCI2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/7684c4-d4c4-4546-b555-8ebbc8769f84/1/pk-aIUfxp5IRyWIBilHj7aKCI2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-aIUfxp5IRyWIBilHj7aKCI2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:d0:63:ee:9c:41:95:c1:fd:8f:04:9c:c2:62:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64f9a2147f1a79211c962018a51e3eda2822360
Validity
Not Before: Oct 27 01:00:50 2026 GMT
Not After : Oct 28 01:00:50 2026 GMT
Subject: CN=d89b4402f88718590a678d493f15bdeea3780b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:5f:04:c2:1a:f3:f8:77:d3:a6:25:39:36:
c1:30:93:37:89:23:20:c6:9d:41:60:3c:06:91:76:
51:2b:d7:07:fc:9b:f4:39:e0:dd:9b:e0:c2:5d:65:
9f:10:6a:4d:d4:68:90:3b:47:c7:ff:1b:27:2a:e0:
63:d4:ff:ab:a3:7e:8a:32:93:3f:51:ca:d8:57:31:
49:11:80:fd:50:99:27:86:cd:13:b3:a7:25:b9:d5:
7f:3c:13:fc:31:76:01:41:88:79:65:bb:39:d6:82:
43:5e:a7:c8:ba:a4:92:44:55:6e:47:fd:d0:cb:ba:
cd:a2:09:79:dc:05:34:37:72:73:06:c3:12:7b:e6:
ab:34:2b:bc:f6:4e:b5:a7:22:c4:38:55:3d:aa:d9:
ff:e1:8a:1f:a8:a6:97:e2:17:86:08:22:96:b4:8c:
d8:e8:0a:f9:20:ee:51:68:80:85:a0:2c:ff:54:6f:
11:d3:5a:6a:af:49:7b:fd:8a:46:1d:6f:88:2a:44:
72:ce:f8:eb:4e:28:9e:1c:2d:04:dc:3c:0d:a9:77:
ef:60:16:15:dc:ab:1c:9c:57:61:0b:a1:17:ee:06:
4b:e1:8d:3d:1e:04:11:9a:d1:c1:16:15:d9:31:fd:
f9:46:3b:df:46:94:77:21:6c:54:3b:38:af:39:d9:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9B:44:02:F8:87:18:59:0A:67:8D:49:3F:15:BD:EE:A3:78:0B:74
X509v3 Authority Key Identifier:
keyid:A6:4F:9A:21:47:F1:A7:92:11:C9:62:01:8A:51:E3:ED:A2:82:23:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-aIUfxp5IRyWIBilHj7aKCI2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7684c4-d4c4-4546-b555-8ebbc8769f84/1/pk-aIUfxp5IRyWIBilHj7aKCI2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7684c4-d4c4-4546-b555-8ebbc8769f84/1/pk-aIUfxp5IRyWIBilHj7aKCI2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:64:98:c0:50:db:c6:71:5f:fc:ca:66:80:bb:91:f5:d4:a3:
59:8d:5c:ec:2a:98:aa:75:78:ac:7d:5e:1d:5f:7e:56:3e:b8:
1f:1d:50:ea:55:af:64:a9:43:0c:65:0e:64:2f:5e:47:20:0a:
c0:a6:9a:af:65:42:0c:17:02:f6:e9:db:c7:e6:78:89:ab:b7:
b9:f0:1a:40:32:80:3c:b5:02:25:e2:54:d4:58:33:98:9b:a4:
9e:53:94:2e:f0:2b:03:94:93:c8:11:52:87:38:cf:60:91:8b:
c4:42:88:cb:7a:c0:2d:7b:5f:63:76:1f:40:34:c6:13:a2:bd:
5f:5c:9e:72:40:8f:04:3b:fa:d4:95:0e:8c:9f:ec:e8:86:bc:
e2:6e:4a:ab:1f:d2:9b:ef:6a:d3:86:a1:93:ba:53:79:3b:bb:
9c:8e:6a:57:2a:5f:81:e4:c0:82:29:00:92:1b:00:f1:b8:e1:
10:c0:67:16:9b:52:ab:8c:d3:ef:2a:e6:0c:f8:8d:c0:0f:07:
56:71:e4:89:0a:d1:a6:fb:6c:1a:45:04:87:85:ea:d2:69:be:
52:a0:a3:cf:bf:a3:10:48:26:ee:07:80:9c:ba:80:21:e1:e7:
61:7a:d6:fc:53:de:f7:5a:92:70:d9:b5:95:58:8a:8f:0f:0f:
47:5b:7c:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF639Bj7pxBlcH9jwScwmKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NGY5YTIxNDdmMWE3OTIxMWM5NjIwMThhNTFlM2VkYTI4
MjIzNjAwHhcNMjYxMDI3MDEwMDUwWhcNMjYxMDI4MDEwMDUwWjAzMTEwLwYDVQQD
EyhkODliNDQwMmY4ODcxODU5MGE2NzhkNDkzZjE1YmRlZWEzNzgwYjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8NfBMIa8/h306YlOTbBMJM3iSMg
xp1BYDwGkXZRK9cH/Jv0OeDdm+DCXWWfEGpN1GiQO0fH/xsnKuBj1P+ro36KMpM/
UcrYVzFJEYD9UJknhs0Ts6cludV/PBP8MXYBQYh5Zbs51oJDXqfIuqSSRFVuR/3Q
y7rNogl53AU0N3JzBsMSe+arNCu89k61pyLEOFU9qtn/4YofqKaX4heGCCKWtIzY
6Ar5IO5RaICFoCz/VG8R01pqr0l7/YpGHW+IKkRyzvjrTiieHC0E3DwNqXfvYBYV
3KscnFdhC6EX7gZL4Y09HgQRmtHBFhXZMf35RjvfRpR3IWxUOzivOdkaDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNibRAL4hxhZCmeNST8Vve6jeAt0MB8GA1UdIwQY
MBaAFKZPmiFH8aeSEcliAYpR4+2igiNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGstYUlVZnhwNUlSeVdJQmlsSGo3YUtDSTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83Njg0YzQtZDRjNC00NTQ2LWI1NTUt
OGViYmM4NzY5Zjg0LzEvcGstYUlVZnhwNUlSeVdJQmlsSGo3YUtDSTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83Njg0YzQtZDRjNC00NTQ2LWI1NTUtOGViYmM4NzY5Zjg0
LzEvcGstYUlVZnhwNUlSeVdJQmlsSGo3YUtDSTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2SYwFDb
xnFf/MpmgLuR9dSjWY1c7CqYqnV4rH1eHV9+Vj64Hx1Q6lWvZKlDDGUOZC9eRyAK
wKaar2VCDBcC9unbx+Z4iau3ufAaQDKAPLUCJeJU1FgzmJuknlOULvArA5STyBFS
hzjPYJGLxEKIy3rALXtfY3YfQDTGE6K9X1yeckCPBDv61JUOjJ/s6Ia84m5Kqx/S
m+9q04ahk7pTeTu7nI5qVypfgeTAgikAkhsA8bjhEMBnFptSq4zT7yrmDPiNwA8H
VnHkiQrRpvtsGkUEh4Xq0mm+UqCjz7+jEEgm7geAnLqAIeHnYXrW/FPe91qScNm1
lViKjw8PR1t8fA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:02:24 2026 by rpki-client