Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.mft
File: aU47bTyFgdD7sB7oNftOjeIhGg8.mft (raw, json)
Hash identifier: K3Bna0KIGh6goLch7Z9xza2o0Bp028uCS5xt4grGJiU=
Subject key identifier: A9:E4:45:30:8D:6A:AB:B8:0C:21:43:17:2F:2A:13:07:01:1C:04:D7
Authority key identifier: 69:4E:3B:6D:3C:85:81:D0:FB:B0:1E:E8:35:FB:4E:8D:E2:21:1A:0F
Certificate issuer: /CN=694e3b6d3c8581d0fbb01ee835fb4e8de2211a0f
Certificate serial: 01A0E286F4307F8985AE91A31F37B458574C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU47bTyFgdD7sB7oNftOjeIhGg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.mft
Manifest number: 0196
Signing time: Sun 27 Sep 2026 11:01:30 +0000
Manifest this update: Sun 27 Sep 2026 11:01:30 +0000
Manifest next update: Mon 28 Sep 2026 11:01:30 +0000
Files and hashes: 1: 2lNGwAAtHFC7YhY_Mp-axRGHDU8.roa (hash: ODKMj2/NSyQeIbF7eT6Nj0fLGtyoZ0RJH5O4JPORYsw=)
2: 9P70GWgIx8TeXA7vw7XVJPQsw-4.roa (hash: ieYeKx17Bc0QHC0T0GeyO6xw3PAObzLSoMQ4Iopm3rA=)
3: aU47bTyFgdD7sB7oNftOjeIhGg8.crl (hash: mSkfqkEyNbqPuWMJNyiWvJsHzvV71Zg64qjzS3xlZYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU47bTyFgdD7sB7oNftOjeIhGg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:86:f4:30:7f:89:85:ae:91:a3:1f:37:b4:58:57:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e3b6d3c8581d0fbb01ee835fb4e8de2211a0f
Validity
Not Before: Sep 27 11:01:30 2026 GMT
Not After : Sep 28 11:01:30 2026 GMT
Subject: CN=a9e445308d6aabb80c2143172f2a1307011c04d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6d:a7:8c:d9:58:71:e7:14:42:96:63:08:c9:
15:77:86:f1:9c:39:69:2a:fb:0a:15:61:7a:21:82:
76:e7:e9:c7:04:a5:09:27:e4:70:20:59:64:c3:98:
27:70:c6:ee:1d:6e:e4:8c:ba:90:fa:8b:0e:86:9a:
08:06:01:ac:49:a1:a5:5f:39:50:a1:8a:a2:88:ce:
08:cb:cb:72:0a:b3:22:c4:60:dc:4b:81:b5:85:7a:
df:69:a4:a7:50:1b:e1:cf:81:df:26:df:c2:1f:04:
7e:0a:b8:a8:75:d8:86:79:a1:ec:70:7d:12:ff:50:
25:fd:1d:de:90:51:a2:34:85:ac:f5:cf:7b:7c:e6:
f2:24:ac:72:e1:52:f8:c8:fc:6d:7e:9c:00:6a:d1:
e7:51:e4:c3:a6:1b:df:28:e3:40:89:e5:a1:56:a0:
e8:28:55:9b:76:dd:f2:10:16:53:0d:2b:6f:73:8c:
71:32:96:97:14:e1:34:77:92:6c:94:b2:8f:35:08:
64:f8:d6:ad:ec:41:f5:2f:fa:26:25:57:54:a5:ba:
50:1a:2c:0d:aa:fe:1e:6e:d2:70:e9:d3:61:9c:53:
57:e4:ad:ba:a6:f5:e3:4c:36:e2:4a:14:8e:f8:5e:
c2:b3:f0:04:c8:4a:b1:8c:c6:a9:81:22:35:18:16:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E4:45:30:8D:6A:AB:B8:0C:21:43:17:2F:2A:13:07:01:1C:04:D7
X509v3 Authority Key Identifier:
keyid:69:4E:3B:6D:3C:85:81:D0:FB:B0:1E:E8:35:FB:4E:8D:E2:21:1A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU47bTyFgdD7sB7oNftOjeIhGg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ade42b-fdce-4b4d-88ac-406b3614e0b2/1/aU47bTyFgdD7sB7oNftOjeIhGg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d0:a9:94:de:35:09:0a:97:2d:e7:2c:9e:01:2f:ab:6b:b9:
58:b5:73:07:02:27:95:66:ff:81:17:27:bb:6a:5b:3a:1a:28:
41:7b:76:44:f3:86:60:f7:43:d4:8b:95:90:07:16:28:63:89:
4c:86:f4:e8:ec:43:9c:38:d6:f7:3a:b3:b6:38:4b:8a:04:db:
8a:43:50:b7:5d:2e:36:30:91:78:d3:e6:2f:74:cd:35:ed:f4:
f8:f0:59:df:98:61:37:01:4e:ed:87:26:36:cd:db:5d:24:5b:
f7:33:9b:b5:72:3a:68:8b:af:d6:87:e0:fd:f3:1e:2c:f3:a3:
42:fd:ec:e5:e3:80:3e:65:e5:1d:cf:b1:92:9f:3e:73:b0:e8:
d9:8e:b4:77:21:d6:7a:54:17:e5:bb:a8:09:dc:b3:92:ca:4e:
14:23:54:d4:ea:a4:3c:44:c5:07:2f:37:eb:ca:bf:a6:d5:60:
2d:09:30:d6:22:61:6c:22:b4:05:ae:bc:2c:a6:f6:38:6e:83:
0e:7a:56:8c:4c:18:68:ae:e9:56:6d:5f:ee:b5:27:b2:08:16:
56:28:07:b1:7b:77:1e:43:fb:78:06:c7:73:8e:9e:7c:6b:39:
91:26:72:5a:79:fd:47:27:bf:e1:8a:ca:51:08:81:f4:fe:75:
77:3e:2f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDihvQwf4mFrpGjHze0WFdMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGUzYjZkM2M4NTgxZDBmYmIwMWVlODM1ZmI0ZThkZTIy
MTFhMGYwHhcNMjYwOTI3MTEwMTMwWhcNMjYwOTI4MTEwMTMwWjAzMTEwLwYDVQQD
EyhhOWU0NDUzMDhkNmFhYmI4MGMyMTQzMTcyZjJhMTMwNzAxMWMwNGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6W2njNlYcecUQpZjCMkVd4bxnDlp
KvsKFWF6IYJ25+nHBKUJJ+RwIFlkw5gncMbuHW7kjLqQ+osOhpoIBgGsSaGlXzlQ
oYqiiM4Iy8tyCrMixGDcS4G1hXrfaaSnUBvhz4HfJt/CHwR+CrioddiGeaHscH0S
/1Al/R3ekFGiNIWs9c97fObyJKxy4VL4yPxtfpwAatHnUeTDphvfKONAieWhVqDo
KFWbdt3yEBZTDStvc4xxMpaXFOE0d5JslLKPNQhk+Nat7EH1L/omJVdUpbpQGiwN
qv4ebtJw6dNhnFNX5K26pvXjTDbiShSO+F7Cs/AEyEqxjMapgSI1GBY0uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnkRTCNaqu4DCFDFy8qEwcBHATXMB8GA1UdIwQY
MBaAFGlOO208hYHQ+7Ae6DX7To3iIRoPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVU0N2JUeUZnZEQ3c0I3b05mdE9qZUloR2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hZGU0MmItZmRjZS00YjRkLTg4YWMt
NDA2YjM2MTRlMGIyLzEvYVU0N2JUeUZnZEQ3c0I3b05mdE9qZUloR2c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hZGU0MmItZmRjZS00YjRkLTg4YWMtNDA2YjM2MTRlMGIy
LzEvYVU0N2JUeUZnZEQ3c0I3b05mdE9qZUloR2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINCplN41
CQqXLecsngEvq2u5WLVzBwInlWb/gRcnu2pbOhooQXt2RPOGYPdD1IuVkAcWKGOJ
TIb06OxDnDjW9zqztjhLigTbikNQt10uNjCReNPmL3TNNe30+PBZ35hhNwFO7Ycm
Ns3bXSRb9zObtXI6aIuv1ofg/fMeLPOjQv3s5eOAPmXlHc+xkp8+c7Do2Y60dyHW
elQX5buoCdyzkspOFCNU1OqkPETFBy8368q/ptVgLQkw1iJhbCK0Ba68LKb2OG6D
DnpWjEwYaK7pVm1f7rUnsggWVigHsXt3HkP7eAbHc46efGs5kSZyWnn9Rye/4YrK
UQiB9P51dz4vaw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 17:15:27 2026 by rpki-client