Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
File: aNVC9HJ2FI-se4mU780q8Q56SEo.mft (raw, json)
Hash identifier: laoUe3OS/0E3LoS8CWlgMTuHV7S9My39Bg/Hrdh6jfc=
Subject key identifier: FA:F3:8D:E8:CD:E1:AF:B3:CB:70:52:70:C8:0B:EF:28:FB:41:E5:4E
Authority key identifier: 68:D5:42:F4:72:76:14:8F:AC:7B:89:94:EF:CD:2A:F1:0E:7A:48:4A
Certificate issuer: /CN=68d542f47276148fac7b8994efcd2af10e7a484a
Certificate serial: 01A12AD71B69BBC8A8B9172714ADF0D5BCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 12:01:42 +0000
Manifest this update: Sun 11 Oct 2026 12:01:42 +0000
Manifest next update: Mon 12 Oct 2026 12:01:42 +0000
Files and hashes: 1: HSSRUKBEGAwzctbuSfK5pqFW7og.roa (hash: JzHF9cnYKiNULXtoW5fjwRQd1kJW6OGN1ZbOkNwiJFU=)
2: aNVC9HJ2FI-se4mU780q8Q56SEo.crl (hash: 3Wk6Rp5WQ356s8AOjctwsPDeLtQrzv7ysoCGZNngtps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d7:1b:69:bb:c8:a8:b9:17:27:14:ad:f0:d5:bc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d542f47276148fac7b8994efcd2af10e7a484a
Validity
Not Before: Oct 11 12:01:42 2026 GMT
Not After : Oct 12 12:01:42 2026 GMT
Subject: CN=faf38de8cde1afb3cb705270c80bef28fb41e54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:25:f9:65:76:5c:a3:3f:11:92:73:dd:4d:
c9:39:b5:96:7b:40:e3:d9:8e:89:ff:a0:a5:73:10:
a2:40:d1:92:03:94:41:b6:0f:0a:e0:0f:12:32:a4:
ed:95:e1:e1:22:1b:1e:a6:5e:04:9f:42:23:05:33:
49:61:da:b3:a4:ec:28:e8:3c:ec:bb:d1:30:37:e2:
2b:45:bb:be:f7:48:14:36:da:7e:31:13:92:c5:5e:
86:66:47:5c:18:e5:e8:12:59:16:ee:ae:35:aa:b6:
f6:2d:54:d8:70:4d:86:75:94:bc:b0:17:ff:98:fd:
21:f2:f8:87:64:74:8b:1f:47:32:1c:aa:48:4a:a5:
59:c3:9a:19:65:eb:05:ba:ed:d0:95:7d:12:ce:b6:
e7:fc:dc:d8:e1:44:78:54:27:05:83:c2:b3:e2:91:
6c:af:ff:38:17:b6:6f:a1:dc:4d:42:d2:e1:34:c4:
cb:78:8f:31:16:87:54:f6:14:82:f2:9f:3a:7c:a6:
90:4a:dc:fc:48:15:aa:a2:3f:05:5f:90:a7:c5:e9:
e8:59:8e:fa:d2:8b:e5:93:61:4f:f9:fa:e0:ec:cd:
01:0f:8d:a9:14:a3:b6:3b:af:5b:fe:82:17:43:f4:
23:2c:75:a6:86:11:c7:8d:df:e4:74:eb:f3:e7:98:
0d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F3:8D:E8:CD:E1:AF:B3:CB:70:52:70:C8:0B:EF:28:FB:41:E5:4E
X509v3 Authority Key Identifier:
keyid:68:D5:42:F4:72:76:14:8F:AC:7B:89:94:EF:CD:2A:F1:0E:7A:48:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1e:3c:86:b1:ed:68:27:bd:af:ec:e6:b3:0f:ee:ca:98:ec:
26:8c:05:63:f5:78:30:5b:4f:28:43:6b:22:c1:1d:fa:24:79:
14:0b:9a:aa:30:e4:01:c6:87:bf:a1:91:4f:08:68:bc:27:77:
ba:8b:90:55:67:ef:50:e7:84:4a:f4:a9:2e:c3:f0:96:a0:b6:
5b:0d:93:86:ca:22:e1:49:91:b5:98:b9:6a:71:66:20:df:dd:
f9:c0:5d:b1:91:a5:3c:95:f9:a5:b7:73:3d:86:e3:21:49:51:
09:52:fb:c6:ab:66:df:bc:99:1e:70:f6:74:e9:f7:02:a8:1b:
34:72:b9:cc:57:f3:06:9d:b7:c7:16:ac:6f:30:5c:8b:a3:6f:
1d:4c:4d:73:05:a9:dd:52:a5:a1:c8:58:bc:41:f5:da:bd:1f:
ed:8a:07:2f:26:67:54:78:0f:b1:3b:f7:e6:88:35:58:38:89:
ce:e4:2a:78:4f:b4:9a:13:23:95:04:5c:17:0a:65:b0:ab:5d:
1f:dd:f3:03:ae:96:ea:64:3a:a4:59:aa:54:24:27:24:7e:51:
97:6f:0c:af:e1:d2:92:a8:58:72:6f:36:a7:cf:58:25:78:fa:
79:4e:cf:2a:30:89:75:18:86:68:91:ca:dc:92:c0:01:91:00:
ea:5e:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:09:02 2026 by rpki-client