Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
File: rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json)
Hash identifier: z8/jfBqk4FpJXmME7hTVwnDdE5xQPgeQ3WvpfWcC8hg=
Subject key identifier: C4:98:9C:30:D5:03:2C:8F:CF:47:63:4B:3D:E4:5E:57:DA:43:0E:95
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Certificate issuer: /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial: 01A111BBE0AB8A577DCB83B6D0FD4ACC2F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
Manifest number: 1A8D
Signing time: Tue 06 Oct 2026 15:01:27 +0000
Manifest this update: Tue 06 Oct 2026 15:01:27 +0000
Manifest next update: Wed 07 Oct 2026 15:01:27 +0000
Files and hashes: 1: csk4BDz5s79i6tCuRhaWetkbfYE.roa (hash: y6UPDjUC5Ue0t7W29lJsgRf1Q1DAQIYmF8ZHDpBKink=)
2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: wqCuIEfTC4h+S/fj5Tqex7sk8P9pgGyltBsjC7WMq1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:bb:e0:ab:8a:57:7d:cb:83:b6:d0:fd:4a:cc:2f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Validity
Not Before: Oct 6 15:01:27 2026 GMT
Not After : Oct 7 15:01:27 2026 GMT
Subject: CN=c4989c30d5032c8fcf47634b3de45e57da430e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:80:19:5d:78:5e:da:54:37:83:95:80:bf:
ca:c9:dc:42:1e:af:6f:40:89:4b:cf:c7:37:7b:b8:
50:31:09:28:2a:59:d6:9c:6b:9f:d2:69:35:3c:e1:
55:84:10:12:87:ae:5d:89:90:6d:4c:7d:dd:d8:38:
fe:36:fa:82:48:1a:1c:ae:ee:e7:e9:9a:bf:37:32:
9b:4d:b7:29:69:e4:ac:a5:5e:81:f9:70:dd:5d:63:
1f:c9:82:2e:df:c6:6f:f7:dd:42:b4:fc:02:f8:61:
fb:f8:50:a9:f7:a4:a1:5c:f9:88:fa:c7:d6:7a:33:
8c:e1:86:25:58:38:66:fd:4d:e2:d2:04:e0:bf:c2:
d4:11:bd:d3:6d:7f:08:ab:60:89:58:64:08:71:7b:
47:85:e5:a4:f6:7a:63:13:98:9e:2b:62:89:9c:74:
eb:dc:5d:83:5d:eb:89:18:5d:66:07:3b:6c:86:4b:
20:9a:a1:02:f7:56:59:34:8f:e0:8d:17:d8:24:e2:
a2:2c:c7:9a:03:28:a4:0a:2e:c1:a6:20:48:5c:08:
88:77:1a:b9:67:ae:c1:b6:3d:5d:4f:86:55:ee:48:
81:87:25:ed:e0:f4:3a:f4:92:9c:14:9a:56:74:c6:
07:13:f8:ec:3a:20:f3:e7:dc:79:6e:12:20:1f:17:
90:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:98:9C:30:D5:03:2C:8F:CF:47:63:4B:3D:E4:5E:57:DA:43:0E:95
X509v3 Authority Key Identifier:
keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c7:47:31:b7:e8:88:69:74:b1:a7:aa:9d:75:d9:e1:eb:9c:
cb:c2:fa:63:e6:cb:13:83:48:e8:dc:a3:e8:f3:43:12:e5:02:
46:95:a0:07:9c:e0:d1:f4:24:1a:3b:36:01:32:7c:1e:01:0e:
a1:01:21:c8:33:2b:6e:a6:bc:07:e1:06:66:1c:53:4e:65:49:
7c:e2:93:59:ac:e1:f7:27:a6:49:1a:d0:d4:f7:10:e3:73:7d:
d8:cd:9c:6a:ca:80:f1:60:2c:d0:e3:a1:8a:10:eb:50:1d:2c:
4d:64:8d:6b:7e:0e:cf:ca:09:d9:81:c9:93:f9:df:c1:d3:f3:
ba:17:49:87:d4:fa:61:0f:fb:29:bf:06:eb:f5:ff:c6:d6:0b:
46:1e:16:20:84:81:40:bc:58:65:7b:97:03:35:2b:aa:d1:23:
87:79:00:7c:af:5e:df:2a:64:04:77:41:5d:ed:a5:4e:bd:7b:
94:2b:2e:bf:5d:b8:11:bb:ba:be:55:69:ed:0a:4c:b4:fc:4b:
78:a3:fc:54:ef:99:b7:e7:4d:54:4b:71:1a:bd:af:cb:f1:d1:
cb:3e:29:b3:1f:4b:c8:d3:c3:8b:d0:de:0a:07:7f:68:0e:8d:
02:2d:e3:71:d5:42:80:b3:5a:43:80:cc:a6:77:a2:a8:af:b3:
66:29:97:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaERu+Crild9y4O20P1KzC8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWVmM2Q2MjZhNzU0ZTQzZDA3YzcwMGQwNTEzYzExNGI2
NjBlZjUwHhcNMjYxMDA2MTUwMTI3WhcNMjYxMDA3MTUwMTI3WjAzMTEwLwYDVQQD
EyhjNDk4OWMzMGQ1MDMyYzhmY2Y0NzYzNGIzZGU0NWU1N2RhNDMwZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriKAGV14XtpUN4OVgL/KydxCHq9v
QIlLz8c3e7hQMQkoKlnWnGuf0mk1POFVhBASh65diZBtTH3d2Dj+NvqCSBocru7n
6Zq/NzKbTbcpaeSspV6B+XDdXWMfyYIu38Zv991CtPwC+GH7+FCp96ShXPmI+sfW
ejOM4YYlWDhm/U3i0gTgv8LUEb3TbX8Iq2CJWGQIcXtHheWk9npjE5ieK2KJnHTr
3F2DXeuJGF1mBztshksgmqEC91ZZNI/gjRfYJOKiLMeaAyikCi7BpiBIXAiIdxq5
Z67Btj1dT4ZV7kiBhyXt4PQ69JKcFJpWdMYHE/jsOiDz59x5bhIgHxeQKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSYnDDVAyyPz0djSz3kXlfaQw6VMB8GA1UdIwQY
MBaAFK4e89Ymp1TkPQfHANBRPBFLZg71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hZmU5YjgtZTg4MS00NDYyLWExZWUt
OGU4MWQxMzUwNzM2LzEvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hZmU5YjgtZTg4MS00NDYyLWExZWUtOGU4MWQxMzUwNzM2
LzEvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsdHMbfo
iGl0saeqnXXZ4eucy8L6Y+bLE4NI6Nyj6PNDEuUCRpWgB5zg0fQkGjs2ATJ8HgEO
oQEhyDMrbqa8B+EGZhxTTmVJfOKTWazh9yemSRrQ1PcQ43N92M2casqA8WAs0OOh
ihDrUB0sTWSNa34Oz8oJ2YHJk/nfwdPzuhdJh9T6YQ/7Kb8G6/X/xtYLRh4WIISB
QLxYZXuXAzUrqtEjh3kAfK9e3ypkBHdBXe2lTr17lCsuv124Ebu6vlVp7QpMtPxL
eKP8VO+Zt+dNVEtxGr2vy/HRyz4psx9LyNPDi9DeCgd/aA6NAi3jcdVCgLNaQ4DM
pneiqK+zZimXcg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 18:03:25 2026 by rpki-client