Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft (raw, json)
Hash identifier: zxSXguwsWluUvgJIIHTuETHLe9qmk/ajjD5zL3MAiFk=
Subject key identifier: 21:48:93:67:69:AD:BF:20:EF:47:ED:B3:D3:D7:65:51:6E:56:61:AD
Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Certificate serial: 01A0DA5F6E40E1AE7AF2A723B4220C3D7878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
Manifest number: 09DB
Signing time: Fri 25 Sep 2026 21:01:22 +0000
Manifest this update: Fri 25 Sep 2026 21:01:22 +0000
Manifest next update: Sat 26 Sep 2026 21:01:22 +0000
Files and hashes: 1: TxCuEKO4UFBws6tMJ89yfNDgvSA.roa (hash: ye0le9kc8j89F6B3VF5KOiTRqH3PrXwEdQjOQuRJ7Js=)
2: aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl (hash: cQdUZw5ZNxyujXxmCQzSHhvwTCWoszL7f2zukJ11kN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:6e:40:e1:ae:7a:f2:a7:23:b4:22:0c:3d:78:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Validity
Not Before: Sep 25 21:01:22 2026 GMT
Not After : Sep 26 21:01:22 2026 GMT
Subject: CN=2148936769adbf20ef47edb3d3d765516e5661ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:c2:a6:c0:bc:e2:aa:b4:40:dc:8b:d4:76:
64:cb:68:75:1c:08:d7:20:cd:51:96:97:93:93:46:
cc:11:cc:b0:d5:a3:24:f1:dd:0e:82:be:51:fe:c2:
56:f5:c0:0d:6d:98:61:c4:e8:a4:47:06:01:bf:aa:
10:93:dd:86:9a:28:0e:e0:b1:df:86:00:ef:98:87:
72:d4:5a:22:04:d8:7f:8f:59:fb:68:1c:51:60:d8:
5c:87:d3:68:ae:7d:97:a9:21:a3:32:bc:64:ed:19:
a7:29:a1:3b:7d:0a:82:ce:9b:4c:97:47:1a:20:ff:
38:a8:8e:5d:1f:fa:f4:30:17:31:cb:9b:15:f6:39:
41:d6:72:8e:f2:99:ec:b8:9e:28:4d:fb:47:35:2e:
87:85:31:01:7e:e9:77:41:ad:ee:41:95:74:4b:98:
bb:70:f4:ea:36:dd:b1:ea:15:85:97:94:79:1b:64:
3a:76:9d:0a:e5:b9:38:26:ff:10:78:c6:05:e1:bd:
a2:ba:6a:f6:0e:85:04:8c:a4:9d:2a:14:21:7a:11:
c0:a1:9d:35:c8:ba:9c:91:ae:17:e4:f6:4a:03:54:
04:fe:7e:72:ad:64:55:38:b1:2e:4b:b6:fc:42:5e:
7c:b6:29:b4:c1:1d:f7:7c:28:6e:ff:b9:7d:f5:aa:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:48:93:67:69:AD:BF:20:EF:47:ED:B3:D3:D7:65:51:6E:56:61:AD
X509v3 Authority Key Identifier:
keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:77:c7:01:f0:a5:b3:9c:28:15:b3:ca:13:44:c7:77:d1:0f:
6a:eb:a5:ba:37:c9:a0:7f:31:64:fe:c8:50:1a:01:46:5c:b6:
1d:02:61:ba:43:47:2d:66:de:cb:1c:f3:66:b5:e4:56:d4:25:
f2:cb:b2:dc:b5:4b:0f:b3:72:51:df:70:72:58:25:a6:d2:42:
77:c9:cc:88:d4:fb:4a:5f:26:87:98:34:b9:75:09:18:cb:4d:
a1:6c:15:6f:ed:b8:73:4f:b1:2e:2e:8c:bc:fd:71:bb:15:d4:
8f:13:43:93:2f:fc:cf:e1:54:ab:dc:ba:e4:76:01:a2:c1:e5:
c5:97:6d:7a:2c:1d:a3:e4:77:76:f4:91:d0:fa:dc:32:e0:1f:
66:30:3e:ed:cd:6f:c4:18:b8:b3:4d:77:21:61:23:3c:e4:31:
e4:97:10:d6:d7:4e:08:20:4f:1c:17:3b:94:4e:88:74:35:08:
52:c8:ad:91:b7:f1:e8:d5:99:fc:e1:76:1a:cc:29:9f:04:16:
82:72:83:a5:f5:fb:56:d2:ad:cc:3a:f0:9d:6f:03:63:26:f1:
26:6f:83:be:e3:1f:ab:62:b0:b5:3f:ca:0c:5e:7e:fe:13:69:
f8:df:22:ef:d5:29:81:90:5f:c3:a7:6c:6b:d6:18:56:44:80:
9a:de:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:42:46 2026 by rpki-client