Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier: C1yIHE4RqE4g51EEtTAc53Ohh6idx5BvlCkc0C1QjGc=
Subject key identifier: 56:9E:97:A9:D9:5B:2A:E1:9E:DC:B4:15:70:3C:A9:51:8B:17:B2:B6
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 01A11229E578C64013D3B01F2A02F159B4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number: 1A21
Signing time: Tue 06 Oct 2026 17:01:37 +0000
Manifest this update: Tue 06 Oct 2026 17:01:37 +0000
Manifest next update: Wed 07 Oct 2026 17:01:37 +0000
Files and hashes: 1: 7AOoMOGVRmNfzkuDKRu3Sk1W0eA.roa (hash: +394RmOY/Sxcv9d3Us94xh5+rW7+06GfmeDJKppUg3M=)
2: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: ueBJnEX9d15pBg0DZmKdfjJ5Hx9D0gGJTlvA8xeOIjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:29:e5:78:c6:40:13:d3:b0:1f:2a:02:f1:59:b4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Oct 6 17:01:37 2026 GMT
Not After : Oct 7 17:01:37 2026 GMT
Subject: CN=569e97a9d95b2ae19edcb415703ca9518b17b2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:fc:44:db:4e:ef:67:7d:b4:ad:8f:76:53:
f3:cf:b3:07:3b:4f:7f:b2:40:b0:db:97:e2:21:ab:
2f:72:d2:0e:cd:2d:15:37:a4:0b:4e:65:c0:f5:15:
4a:be:6d:4a:b6:f7:d1:41:d9:dc:87:9a:73:f8:5d:
76:58:1a:d3:13:a7:36:4d:9c:e0:82:47:1c:9a:8e:
9c:a4:fd:86:ed:84:c1:28:8e:35:74:d7:11:c1:34:
db:5b:2c:3a:86:1b:fa:58:e2:39:f5:e8:63:a1:b9:
47:9a:a7:42:1a:f5:02:0f:f5:fd:c0:e0:06:ef:ae:
d7:8e:59:f2:87:52:4a:58:08:5c:78:f0:cb:1d:b8:
96:d2:48:fc:e6:1d:46:bd:33:d6:73:1b:0b:4b:98:
68:c6:ea:e7:9f:ff:e5:b4:e8:bf:d8:1f:3b:e3:40:
05:96:5c:12:b8:a9:59:fc:e9:c0:47:c9:6b:a2:b2:
64:25:2b:32:3d:43:f7:2c:9b:d8:1d:87:f4:24:d2:
bc:1b:9a:04:a4:2c:58:c3:bb:8b:8a:88:7d:2f:36:
f7:71:db:52:bf:d3:d6:5c:36:43:d6:a6:a8:39:72:
e0:a8:77:3a:aa:1b:98:ef:66:1d:a8:c5:15:f1:02:
c2:c4:39:20:66:c4:c7:1c:ec:9f:10:5c:e6:03:0d:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9E:97:A9:D9:5B:2A:E1:9E:DC:B4:15:70:3C:A9:51:8B:17:B2:B6
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:da:53:21:4d:c7:8e:2e:58:55:45:15:4d:7a:30:7c:5e:99:
77:96:90:5a:da:2d:ac:c8:b3:57:3c:0f:eb:c2:ae:f9:e3:26:
8a:92:88:4e:ee:14:2a:f6:f7:d5:d5:2e:ce:87:c9:f8:e2:06:
e4:5a:cf:90:86:a0:bd:2d:92:d1:19:fc:c0:38:aa:db:cf:1b:
0a:b4:e1:31:69:9f:7a:b0:c6:03:ee:29:db:fc:9f:a9:2e:22:
5b:e8:c5:36:a1:fa:2d:79:97:a2:e3:c4:32:0b:45:e1:71:ec:
ad:f9:2e:b9:eb:ac:a2:de:41:db:9f:89:2d:05:23:68:bf:c3:
e4:06:2a:80:7d:54:cf:94:02:d1:6e:71:50:1d:18:80:ae:1b:
d4:84:d1:e1:f0:1b:4d:43:41:47:ff:1d:02:54:54:16:38:62:
f8:c9:88:95:3d:2f:22:82:24:60:0e:68:f7:29:e0:06:6c:de:
a1:3a:4d:cb:ba:48:28:da:ae:49:75:68:d8:ce:2b:fd:d1:9a:
5c:a4:0d:aa:af:d5:de:d7:b4:c7:f0:76:5c:a4:95:2c:c4:b7:
a2:c5:59:c5:88:01:dc:78:fa:56:3e:df:b7:da:d2:9a:f7:c5:
7f:90:3d:a6:88:63:a3:bc:c8:3c:8a:9e:fb:d0:80:09:c2:b8:
e2:92:db:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaESKeV4xkAT07AfKgLxWbS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4N2Q5YjU2MmJhNDcyNjE4ZjkzOThlMjY1Y2EwZTcxMDhm
Njg3YTMwHhcNMjYxMDA2MTcwMTM3WhcNMjYxMDA3MTcwMTM3WjAzMTEwLwYDVQQD
Eyg1NjllOTdhOWQ5NWIyYWUxOWVkY2I0MTU3MDNjYTk1MThiMTdiMmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7b8RNtO72d9tK2PdlPzz7MHO09/
skCw25fiIasvctIOzS0VN6QLTmXA9RVKvm1KtvfRQdnch5pz+F12WBrTE6c2TZzg
gkccmo6cpP2G7YTBKI41dNcRwTTbWyw6hhv6WOI59ehjoblHmqdCGvUCD/X9wOAG
767Xjlnyh1JKWAhcePDLHbiW0kj85h1GvTPWcxsLS5hoxurnn//ltOi/2B8740AF
llwSuKlZ/OnAR8lrorJkJSsyPUP3LJvYHYf0JNK8G5oEpCxYw7uLioh9Lzb3cdtS
v9PWXDZD1qaoOXLgqHc6qhuY72YdqMUV8QLCxDkgZsTHHOyfEFzmAw2lHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFael6nZWyrhnty0FXA8qVGLF7K2MB8GA1UdIwQY
MBaAFGh9m1YrpHJhj5OY4mXKDnEI9oejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQt
NjA1ZDEzNTEzNmY3LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQtNjA1ZDEzNTEzNmY3
LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9pTIU3H
ji5YVUUVTXowfF6Zd5aQWtotrMizVzwP68Ku+eMmipKITu4UKvb31dUuzofJ+OIG
5FrPkIagvS2S0Rn8wDiq288bCrThMWmferDGA+4p2/yfqS4iW+jFNqH6LXmXouPE
MgtF4XHsrfkuueusot5B25+JLQUjaL/D5AYqgH1Uz5QC0W5xUB0YgK4b1ITR4fAb
TUNBR/8dAlRUFjhi+MmIlT0vIoIkYA5o9yngBmzeoTpNy7pIKNquSXVo2M4r/dGa
XKQNqq/V3te0x/B2XKSVLMS3osVZxYgB3Hj6Vj7ft9rSmvfFf5A9pohjo7zIPIqe
+9CACcK44pLbfw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 00:36:32 2026 by rpki-client