Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File: _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier: evanhstbzZQLT2mCDDOliF8C5U+u6Avl7/4egLvffyM=
Subject key identifier: BF:E6:0F:E3:39:09:F5:7A:A3:C3:0A:21:4C:EF:0C:B6:C8:01:0E:42
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 01A1DF15116FD58371A92C9DB5B78AC48742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 12:01:02 +0000
Manifest this update: Sun 15 Nov 2026 12:01:02 +0000
Manifest next update: Mon 16 Nov 2026 12:01:02 +0000
Files and hashes: 1: BGnG6gtmJf9oXbmJn6G8to3OAXQ.roa (hash: 7lUuJCGm6EGdC4KlGNBvD3jQRgoMt2XAzy3kEwKql7A=)
2: GRQeTTIlDXdek7LI3xSxbyP0wko.roa (hash: /36LNNo/X3fjiRfzW93svxxPJpEouDboCXaZzVepsY0=)
3: QIkShXbbHThv1aeU1a-peKPDkSs.roa (hash: VjCUy/EF7Rus5PhS1elNAKUIyC4Ng0/nopkU975oiO4=)
4: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: jP505X02797t9dPRQtVfrTy/tcFXp7GcPS0M3CmIU5U=)
5: iYHzEnXzX7Ri36tD7aub9iMoOmA.roa (hash: 1jW4is5cwWCDH+AJEWg+glpxZJwRIEFEPAYxOuttUh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:11:6f:d5:83:71:a9:2c:9d:b5:b7:8a:c4:87:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Nov 15 12:01:02 2026 GMT
Not After : Nov 16 12:01:02 2026 GMT
Subject: CN=bfe60fe33909f57aa3c30a214cef0cb6c8010e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:9e:be:0a:68:01:72:7f:c4:0e:73:b2:d9:
9a:d0:8d:63:68:2f:79:f8:63:6b:25:1c:c7:97:b3:
f9:6d:af:d1:c6:af:ae:df:f4:0b:03:14:6f:b1:12:
1a:40:e1:b7:63:31:ba:64:d7:d3:c1:4c:18:db:a2:
d9:33:b9:90:12:e7:cb:e9:d6:65:dd:fb:10:40:93:
a1:8f:a9:37:ad:e0:87:38:25:1b:9a:81:84:84:d0:
d5:ae:b3:1c:a8:17:08:14:ee:cb:86:03:04:08:7d:
19:5e:cf:36:7f:2e:02:11:ce:bf:b7:50:cf:f8:99:
4c:15:b8:6f:25:4a:7d:ac:85:4d:6e:0a:67:de:d3:
6e:c8:59:88:75:dc:b8:08:66:7c:3f:1e:8a:86:a9:
d4:a0:0c:ea:32:51:d4:30:83:b7:5f:1a:5c:8d:c8:
94:32:b9:b4:cc:17:2a:4e:e4:5d:ef:a4:94:ab:2a:
19:c0:81:9e:be:b9:78:da:2a:ee:ea:38:b8:a9:9f:
a6:ac:89:1a:e4:bb:c8:02:80:0a:08:a1:eb:74:17:
f8:22:be:55:e9:c0:c4:f9:47:ff:4a:79:6c:24:23:
9a:1c:67:ae:d7:25:99:fd:e7:c0:91:6c:e6:b9:ac:
f3:e4:2b:fa:74:8a:dd:5b:a5:2a:89:c2:f1:3a:a7:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E6:0F:E3:39:09:F5:7A:A3:C3:0A:21:4C:EF:0C:B6:C8:01:0E:42
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:87:ef:69:11:c6:1d:3f:6c:22:70:54:f0:2e:d0:8f:1f:fb:
f9:4c:7f:56:39:e2:3e:cf:59:4d:44:c0:b3:b1:06:60:ca:ed:
26:65:4c:f2:41:d7:a3:98:cc:b5:07:4a:6b:b9:33:04:cf:c8:
93:ca:cb:5d:d1:f3:d3:ee:76:73:6e:05:ec:4a:9b:3a:eb:05:
f0:92:c8:f6:a2:01:35:09:e2:94:ac:a6:57:21:7d:27:fa:2d:
3e:f0:30:49:b4:29:db:b8:7b:00:1b:0c:cf:a3:e8:6b:05:18:
eb:e1:5f:44:a1:75:0e:b9:c5:8f:19:30:e1:eb:e9:9c:1d:d3:
66:4e:f7:85:f1:60:75:20:ad:65:bc:12:83:7f:60:72:19:ef:
16:44:c0:65:5d:c8:39:ae:57:da:d6:55:50:62:91:60:2f:9a:
c5:6e:1e:36:78:89:4f:47:50:1a:eb:c7:0f:d2:b9:b6:e1:b4:
19:ee:52:21:41:ed:34:91:7e:19:b2:a4:d7:cb:a8:2b:3b:0c:
2f:67:8e:38:2c:9b:14:ef:55:3d:a1:6d:5a:57:7d:83:e7:ff:
96:87:3a:9a:b7:fc:be:1a:02:7d:1a:8e:14:09:69:1d:b8:b9:
2a:4c:f2:64:ef:7e:cb:65:98:83:61:75:06:77:2a:28:53:e2:
57:ac:b2:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfFRFv1YNxqSydtbeKxIdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMWQxOGQ5YTIyMjczNmRiYWMyMzExMTBiODhkZWFjOGRi
MDMzNmQwHhcNMjYxMTE1MTIwMTAyWhcNMjYxMTE2MTIwMTAyWjAzMTEwLwYDVQQD
EyhiZmU2MGZlMzM5MDlmNTdhYTNjMzBhMjE0Y2VmMGNiNmM4MDEwZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNCevgpoAXJ/xA5zstma0I1jaC95
+GNrJRzHl7P5ba/Rxq+u3/QLAxRvsRIaQOG3YzG6ZNfTwUwY26LZM7mQEufL6dZl
3fsQQJOhj6k3reCHOCUbmoGEhNDVrrMcqBcIFO7LhgMECH0ZXs82fy4CEc6/t1DP
+JlMFbhvJUp9rIVNbgpn3tNuyFmIddy4CGZ8Px6KhqnUoAzqMlHUMIO3XxpcjciU
Mrm0zBcqTuRd76SUqyoZwIGevrl42iru6ji4qZ+mrIka5LvIAoAKCKHrdBf4Ir5V
6cDE+Uf/SnlsJCOaHGeu1yWZ/efAkWzmuazz5Cv6dIrdW6UqicLxOqfRlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/mD+M5CfV6o8MKIUzvDLbIAQ5CMB8GA1UdIwQY
MBaAFP4dGNmiInNtusIxEQuI3qyNsDNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NGUxZWYtOWJhOC00MzA3LWJmYWQt
NjU4N2Y3NmZkODEwLzEvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82NGUxZWYtOWJhOC00MzA3LWJmYWQtNjU4N2Y3NmZkODEw
LzEvX2gwWTJhSWljMjI2d2pFUkM0amVySTJ3TTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4fvaRHG
HT9sInBU8C7Qjx/7+Ux/VjniPs9ZTUTAs7EGYMrtJmVM8kHXo5jMtQdKa7kzBM/I
k8rLXdHz0+52c24F7EqbOusF8JLI9qIBNQnilKymVyF9J/otPvAwSbQp27h7ABsM
z6PoawUY6+FfRKF1DrnFjxkw4evpnB3TZk73hfFgdSCtZbwSg39gchnvFkTAZV3I
Oa5X2tZVUGKRYC+axW4eNniJT0dQGuvHD9K5tuG0Ge5SIUHtNJF+GbKk18uoKzsM
L2eOOCybFO9VPaFtWld9g+f/loc6mrf8vhoCfRqOFAlpHbi5KkzyZO9+y2WYg2F1
BncqKFPiV6yyMg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:51:57 2026 by rpki-client