Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
File: tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json)
Hash identifier: 7IghH64kuLtDY57uZ4mDC5aWhbU0Nfi6HOG1Jj69Bck=
Subject key identifier: F0:22:7D:B3:B5:08:82:3C:62:2A:D0:78:A6:18:FE:9B:C1:57:76:49
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial: 01A1A902F5E74F6E43587A2950766780E860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
Manifest number: 1ADD
Signing time: Thu 05 Nov 2026 00:01:45 +0000
Manifest this update: Thu 05 Nov 2026 00:01:45 +0000
Manifest next update: Fri 06 Nov 2026 00:01:45 +0000
Files and hashes: 1: Enpd7RSzC3L6emd7pGDdiVehZtE.roa (hash: WWtbFjYeptz2lkJzGb3OE5GVhYZDAyY+VdSSKK6ahKw=)
2: H2qs3ZQqvdlHKgDA_gk8S_ryct4.asa (hash: ITlpnWwDLnXyke1mLtpv0ncHybvgt23d76IpkIbnisw=)
3: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: fjAN48Q+Jww3mLbXZIuWcyOh24zJgdM4Iklpwje1uJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 00:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:02:f5:e7:4f:6e:43:58:7a:29:50:76:67:80:e8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
Validity
Not Before: Nov 5 00:01:45 2026 GMT
Not After : Nov 6 00:01:45 2026 GMT
Subject: CN=f0227db3b508823c622ad078a618fe9bc1577649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:76:39:b5:23:dc:90:90:45:cc:aa:94:f9:
f0:6a:be:0a:60:ef:7c:28:0f:f5:42:22:ce:5d:86:
15:a7:f1:79:19:dd:06:27:f4:1d:e5:81:87:a9:84:
c2:0d:66:5a:0a:33:3f:c1:9e:d8:6f:51:ce:1b:f0:
80:65:32:a1:65:3a:7c:ce:0b:c9:17:3c:f1:7c:54:
42:2d:e4:92:d0:a7:17:75:0c:86:ee:e7:c3:eb:ef:
68:c0:66:0b:6e:24:b5:c3:e5:94:1a:3c:41:3f:3c:
a1:e3:c2:da:10:e8:0b:d7:c9:80:36:65:fb:c2:22:
a6:35:07:76:0c:ff:9d:10:79:97:51:59:21:5b:e1:
f0:cd:e9:6d:88:37:72:04:30:2e:d2:bd:bc:05:1f:
af:6b:75:ec:b8:e8:e4:65:d6:73:09:ac:60:30:d7:
7d:17:68:ad:2f:d5:3f:eb:bc:57:18:a5:a3:84:cd:
e0:1c:b8:c3:75:3f:d1:50:ac:95:3d:1c:6a:ad:2b:
cd:d9:18:37:15:e5:13:36:f1:53:b3:9f:89:11:25:
38:67:a0:a2:54:bc:40:72:cb:55:0e:2a:4c:63:d1:
8e:55:a8:83:27:4e:4b:82:90:47:d3:88:a7:23:ac:
fb:b7:fc:7e:a1:6e:43:05:e7:d9:1b:2d:d9:b6:8c:
f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:22:7D:B3:B5:08:82:3C:62:2A:D0:78:A6:18:FE:9B:C1:57:76:49
X509v3 Authority Key Identifier:
keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:09:5e:53:5f:1c:4c:7f:98:3a:5e:a8:d2:de:59:47:92:44:
7e:db:3c:81:2b:7a:e7:fe:64:75:cd:6f:5b:87:7b:41:1e:b8:
8a:c1:0d:d7:72:0f:6d:7e:aa:0e:70:24:1f:d2:b7:de:43:04:
38:6d:3c:89:7a:cc:78:a2:ba:ba:ac:87:c2:b5:3b:a5:01:4a:
64:8f:48:a4:7e:82:05:24:ef:ad:c1:6e:a5:68:06:35:1c:f3:
55:2c:b8:da:2b:a7:7c:42:14:0d:e7:86:5f:c8:a9:80:b9:29:
46:63:e0:4e:87:a9:ba:f1:07:73:12:78:a0:d3:29:d4:bf:ca:
26:3b:50:c7:3a:e2:61:4b:2d:4b:d2:a3:67:bf:85:e6:96:d4:
b3:da:ae:7f:fe:70:62:24:89:a3:fd:9b:a9:fd:30:d7:fd:a1:
72:9f:e4:c4:c7:cd:6a:b5:9f:99:00:31:0a:88:35:77:dc:b8:
f6:1b:a4:da:e0:2a:c9:5c:16:4f:34:0b:c2:ef:da:f8:35:6b:
7f:44:31:20:8f:ee:e6:72:f0:19:ce:b0:a2:9c:c4:62:d2:c0:
5f:c6:ea:71:ef:e1:f5:f5:34:28:ac:0f:da:bc:2f:6a:2a:a2:
26:42:3e:db:f2:87:4c:24:58:90:c1:71:f1:c7:a2:b6:29:e1:
67:59:a2:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGpAvXnT25DWHopUHZngOhgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MDg5Zjg0NDgzMDU3YWMzNjQ2NDdjODBhMWIyM2M5NzZi
OTMwMTYwHhcNMjYxMTA1MDAwMTQ1WhcNMjYxMTA2MDAwMTQ1WjAzMTEwLwYDVQQD
EyhmMDIyN2RiM2I1MDg4MjNjNjIyYWQwNzhhNjE4ZmU5YmMxNTc3NjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEN2ObUj3JCQRcyqlPnwar4KYO98
KA/1QiLOXYYVp/F5Gd0GJ/Qd5YGHqYTCDWZaCjM/wZ7Yb1HOG/CAZTKhZTp8zgvJ
FzzxfFRCLeSS0KcXdQyG7ufD6+9owGYLbiS1w+WUGjxBPzyh48LaEOgL18mANmX7
wiKmNQd2DP+dEHmXUVkhW+HwzeltiDdyBDAu0r28BR+va3XsuOjkZdZzCaxgMNd9
F2itL9U/67xXGKWjhM3gHLjDdT/RUKyVPRxqrSvN2Rg3FeUTNvFTs5+JESU4Z6Ci
VLxAcstVDipMY9GOVaiDJ05LgpBH04inI6z7t/x+oW5DBefZGy3ZtozxYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAifbO1CII8YirQeKYY/pvBV3ZJMB8GA1UdIwQY
MBaAFLQIn4RIMFesNkZHyAobI8l2uTAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFpZmhFZ3dWNncyUmtmSUNoc2p5WGE1TUJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NDVmNmEtMjY1My00ZDMxLWJiNGUt
MWY4Nzk3NjEzN2EwLzEvdEFpZmhFZ3dWNncyUmtmSUNoc2p5WGE1TUJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NDVmNmEtMjY1My00ZDMxLWJiNGUtMWY4Nzk3NjEzN2Ew
LzEvdEFpZmhFZ3dWNncyUmtmSUNoc2p5WGE1TUJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgleU18c
TH+YOl6o0t5ZR5JEfts8gSt65/5kdc1vW4d7QR64isEN13IPbX6qDnAkH9K33kME
OG08iXrMeKK6uqyHwrU7pQFKZI9IpH6CBSTvrcFupWgGNRzzVSy42iunfEIUDeeG
X8ipgLkpRmPgToepuvEHcxJ4oNMp1L/KJjtQxzriYUstS9KjZ7+F5pbUs9quf/5w
YiSJo/2bqf0w1/2hcp/kxMfNarWfmQAxCog1d9y49huk2uAqyVwWTzQLwu/a+DVr
f0QxII/u5nLwGc6wopzEYtLAX8bqce/h9fU0KKwP2rwvaiqiJkI+2/KHTCRYkMFx
8ceitinhZ1mitA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:29:25 2026 by rpki-client