Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
File: aCyELfoqHnFHJ7zLlfFlNHED8nc.mft (raw, json)
Hash identifier: hARBeh9fXRQbiNEeG6yV1nzBMsOeqvD6FpVg+WRihJw=
Subject key identifier: D7:A8:1B:E4:64:20:25:10:37:9C:48:59:5B:DF:48:AF:80:EE:FA:1E
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial: 01A1DE7081720FB0A437EA8FD06BB32112EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
Manifest number: 1AFE
Signing time: Sun 15 Nov 2026 09:01:17 +0000
Manifest this update: Sun 15 Nov 2026 09:01:17 +0000
Manifest next update: Mon 16 Nov 2026 09:01:17 +0000
Files and hashes: 1: 8dtgaFANkeK8huuG3p8_JsPAwVY.roa (hash: hnOGO5yhOzCse60swZYvKqiyn0VjBoHkixTNWL2xNnI=)
2: Prdw3L1Fwkc8ytRFu-oUK_xAQuU.roa (hash: doY6BOzth/370lmaa2UkKcv45HRXOMVWu34UaSPlsc8=)
3: aCyELfoqHnFHJ7zLlfFlNHED8nc.crl (hash: OQbbbqFiaz2EgCR3BYocruacyEM9S7ks4IeTbWnyG3w=)
4: mQRanHoIY0IoJuE4VcyHEcinjeo.roa (hash: fBz0EC50LChidWvY4MFa5hHhW36+s8IY+jpOw7hyIu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:81:72:0f:b0:a4:37:ea:8f:d0:6b:b3:21:12:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
Validity
Not Before: Nov 15 09:01:17 2026 GMT
Not After : Nov 16 09:01:17 2026 GMT
Subject: CN=d7a81be464202510379c48595bdf48af80eefa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:f3:0d:c7:d2:b7:2a:d3:36:13:e8:2e:85:
4f:bc:e9:d5:18:a3:d3:87:f5:e1:d0:0d:c4:07:a3:
ff:c6:fb:f9:2e:01:cb:10:04:ca:98:6f:9d:bf:d7:
19:15:8e:fa:43:f3:71:84:20:23:45:d1:70:75:cd:
f6:11:f2:47:2c:1f:5a:6a:42:00:b8:31:95:86:90:
cd:2a:73:87:0a:80:0a:1d:d9:4d:5d:b6:4d:9a:12:
5a:a7:8f:41:7f:6d:6d:6a:a8:e3:e9:9a:b7:08:e9:
4b:ad:1c:ff:8c:c0:3d:4f:ac:2d:ac:fa:8f:19:7d:
f2:a7:e7:b1:42:39:d2:de:71:74:ee:1b:18:23:1f:
14:d8:b1:d8:97:96:c9:43:58:b5:7a:99:ba:4f:57:
df:74:e7:af:ad:1b:8f:fa:61:2a:fe:69:60:11:84:
70:26:0b:2c:4a:3f:29:ca:f1:f8:16:0c:40:99:21:
94:09:c5:b5:38:87:7b:c3:29:42:cc:34:33:5b:b7:
fc:3a:af:85:ee:41:78:71:6f:e9:62:21:b7:ca:0a:
7a:1c:f3:a4:10:c6:46:5d:bf:89:14:c2:5b:e6:bd:
ef:cd:93:b6:13:e5:26:f7:4d:75:1e:95:59:f9:d4:
db:4b:cf:e1:37:d8:dc:c5:4e:09:8d:55:61:da:62:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A8:1B:E4:64:20:25:10:37:9C:48:59:5B:DF:48:AF:80:EE:FA:1E
X509v3 Authority Key Identifier:
keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7c:a8:4a:3a:4e:0e:ab:75:2a:b3:10:56:ad:fc:bc:88:8e:
3d:76:5c:e5:bf:2e:b9:fb:06:b3:74:a2:4c:a9:18:55:e6:e1:
1d:77:5d:e3:6a:c8:7f:38:1c:5e:f5:23:0f:c0:3d:4b:9b:b1:
e2:fd:1c:94:14:bf:7c:15:1d:f2:b8:7f:64:30:ab:ac:18:82:
fc:59:db:20:d7:ff:0b:aa:52:e6:47:f6:d7:3d:35:39:54:9a:
d4:8e:e7:9f:39:87:f9:5b:47:b1:b9:61:5d:a0:f6:1a:2a:c2:
0d:6e:83:60:5f:bf:b2:a2:9b:32:31:ce:f5:f6:c2:8f:a3:76:
c1:5c:9f:9d:b1:0e:2b:5d:17:46:7b:cd:df:66:e6:7d:17:2d:
69:55:ab:42:22:c2:06:9e:10:95:da:47:5a:77:68:f5:90:20:
ed:5b:8c:54:4c:61:b7:00:68:8a:1b:bb:e9:4c:cd:6a:14:e9:
11:b1:89:4b:01:d2:75:a2:ab:f6:76:a1:12:7b:c5:84:fb:0c:
82:88:05:45:13:f4:1e:5c:40:6b:79:04:4d:9f:5b:fa:72:92:
d0:5f:91:da:ae:79:c2:e7:9e:a9:96:19:a2:6c:3a:ad:99:20:
5b:c1:b1:73:30:db:00:27:9c:eb:4a:1b:12:9a:04:bf:17:d0:
8a:70:29:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecIFyD7CkN+qP0GuzIRLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MmM4NDJkZmEyYTFlNzE0NzI3YmNjYjk1ZjE2NTM0NzEw
M2YyNzcwHhcNMjYxMTE1MDkwMTE3WhcNMjYxMTE2MDkwMTE3WjAzMTEwLwYDVQQD
EyhkN2E4MWJlNDY0MjAyNTEwMzc5YzQ4NTk1YmRmNDhhZjgwZWVmYTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVPzDcfStyrTNhPoLoVPvOnVGKPT
h/Xh0A3EB6P/xvv5LgHLEATKmG+dv9cZFY76Q/NxhCAjRdFwdc32EfJHLB9aakIA
uDGVhpDNKnOHCoAKHdlNXbZNmhJap49Bf21taqjj6Zq3COlLrRz/jMA9T6wtrPqP
GX3yp+exQjnS3nF07hsYIx8U2LHYl5bJQ1i1epm6T1ffdOevrRuP+mEq/mlgEYRw
JgssSj8pyvH4FgxAmSGUCcW1OId7wylCzDQzW7f8Oq+F7kF4cW/pYiG3ygp6HPOk
EMZGXb+JFMJb5r3vzZO2E+Um9011HpVZ+dTbS8/hN9jcxU4JjVVh2mLhyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeoG+RkICUQN5xIWVvfSK+A7voeMB8GA1UdIwQY
MBaAFGgshC36Kh5xRye8y5XxZTRxA/J3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAt
MDhkNjViMzg2MzlkLzEvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAtMDhkNjViMzg2Mzlk
LzEvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnyoSjpO
Dqt1KrMQVq38vIiOPXZc5b8uufsGs3SiTKkYVebhHXdd42rIfzgcXvUjD8A9S5ux
4v0clBS/fBUd8rh/ZDCrrBiC/FnbINf/C6pS5kf21z01OVSa1I7nnzmH+VtHsblh
XaD2GirCDW6DYF+/sqKbMjHO9fbCj6N2wVyfnbEOK10XRnvN32bmfRctaVWrQiLC
Bp4QldpHWndo9ZAg7VuMVExhtwBoihu76UzNahTpEbGJSwHSdaKr9nahEnvFhPsM
gogFRRP0HlxAa3kETZ9b+nKS0F+R2q55wueeqZYZomw6rZkgW8GxczDbACec60ob
EpoEvxfQinApmg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:34:59 2026 by rpki-client