Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
File: v1axbhD6Re7KFoexaJ_CHxgR53U.mft (raw, json)
Hash identifier: gTDAFOd+9zBl3vqicOtcfFy84RUxLa46Gtw/0Qn9vdU=
Subject key identifier: E2:A4:03:7A:B2:ED:5F:88:45:18:D0:0C:B1:4A:C1:0B:71:23:BD:EC
Authority key identifier: BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75
Certificate issuer: /CN=bf56b16e10fa45eeca1687b1689fc21f1811e775
Certificate serial: 01A0E777769FC6557BD136075225826EB08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
Manifest number: 02A8
Signing time: Mon 28 Sep 2026 10:02:41 +0000
Manifest this update: Mon 28 Sep 2026 10:02:41 +0000
Manifest next update: Tue 29 Sep 2026 10:02:41 +0000
Files and hashes: 1: pdd46O_7-gqSCVYzyxen2RSC1dU.roa (hash: GncF/pont0DY3uOfDhLzl1X5Kar3INu8dZi3iu5gRVM=)
2: v1axbhD6Re7KFoexaJ_CHxgR53U.crl (hash: L9bmWQ/ULuQeo20Si+lv5jOB2CNZRDUGcsov0WAFGVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:77:76:9f:c6:55:7b:d1:36:07:52:25:82:6e:b0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56b16e10fa45eeca1687b1689fc21f1811e775
Validity
Not Before: Sep 28 10:02:41 2026 GMT
Not After : Sep 29 10:02:41 2026 GMT
Subject: CN=e2a4037ab2ed5f884518d00cb14ac10b7123bdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:17:fb:ea:05:f4:47:60:4d:42:d5:95:a9:db:
3c:10:54:87:f2:30:fb:8d:83:ba:0a:11:a5:10:e9:
95:20:08:72:b0:22:ed:d9:ba:71:bd:81:23:80:20:
87:69:c6:90:85:bd:0b:25:93:26:76:b2:91:5c:11:
c5:a2:32:d5:22:e0:1a:42:ec:b2:2a:c0:ba:85:ec:
f6:14:7e:02:a4:9f:15:ec:f8:f1:8f:7a:99:30:96:
b7:ad:ca:2e:3d:1e:60:86:9a:35:96:0b:7b:5d:36:
76:fa:2f:95:bb:91:83:49:1a:91:05:38:2d:04:62:
38:09:d1:7c:80:4f:3d:7c:bf:fa:55:50:f5:3d:23:
06:d3:a1:56:e5:44:55:e0:6f:ee:39:76:f8:0b:36:
b1:af:ef:9e:2e:73:ed:f3:27:33:e1:61:6d:e3:b6:
b1:5a:1d:63:dd:e1:09:a3:0b:e2:68:03:58:3d:89:
50:28:36:bf:90:ca:b3:45:36:2d:a4:44:1b:66:59:
d1:ab:cb:54:d1:70:fd:80:bb:ff:01:40:e9:8e:4f:
e1:87:0d:9f:34:c8:8e:d6:d4:b4:f6:b3:7d:9d:6f:
d7:8f:57:27:ee:13:b6:a9:49:f2:b8:27:36:32:6a:
41:00:97:c5:5d:43:eb:c4:a8:99:9b:5c:5d:f2:ae:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A4:03:7A:B2:ED:5F:88:45:18:D0:0C:B1:4A:C1:0B:71:23:BD:EC
X509v3 Authority Key Identifier:
keyid:BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6e:e5:b0:cf:35:a1:65:de:77:c1:35:c8:c6:b8:92:ca:d0:
5e:69:ae:fa:1a:4e:1e:56:f0:1a:69:b0:b6:34:21:ef:e7:0c:
db:00:e0:5e:79:11:9e:49:2e:fc:5d:1e:98:d6:e2:60:e5:07:
36:25:50:a7:3e:6c:d3:8d:77:0f:44:fc:2a:32:70:4e:2c:70:
c9:12:f3:a4:0c:48:de:61:12:1f:c5:cb:f6:26:77:16:be:2e:
f4:68:86:6a:6f:7e:74:b1:cd:ae:72:d4:f7:2f:03:1f:7c:2c:
06:61:95:e6:fd:54:06:3f:06:ee:28:a7:33:8a:bf:ed:80:9f:
a2:95:4b:31:36:9f:73:63:5d:c9:0e:de:b7:cf:3b:b0:5e:1b:
e9:57:54:eb:41:92:76:ee:3d:7c:a7:a8:fa:3b:dd:ec:2f:d3:
a4:df:84:8d:14:76:43:e0:f9:78:f8:a9:57:50:e3:80:da:71:
d1:64:ba:92:92:68:8a:82:a3:eb:5b:7a:ba:66:f4:bd:bc:f2:
b7:62:d0:d1:31:68:16:37:aa:f1:77:8a:8b:f4:1a:25:69:0d:
52:b7:4d:da:74:6b:5c:a9:5b:34:e3:cd:c5:7d:00:6a:9a:5b:
65:39:61:6d:8d:4f:b6:d8:07:4e:ac:cd:37:35:2e:31:5b:34:
b0:68:88:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnd3afxlV70TYHUiWCbrCOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNTZiMTZlMTBmYTQ1ZWVjYTE2ODdiMTY4OWZjMjFmMTgx
MWU3NzUwHhcNMjYwOTI4MTAwMjQxWhcNMjYwOTI5MTAwMjQxWjAzMTEwLwYDVQQD
EyhlMmE0MDM3YWIyZWQ1Zjg4NDUxOGQwMGNiMTRhYzEwYjcxMjNiZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xf76gX0R2BNQtWVqds8EFSH8jD7
jYO6ChGlEOmVIAhysCLt2bpxvYEjgCCHacaQhb0LJZMmdrKRXBHFojLVIuAaQuyy
KsC6hez2FH4CpJ8V7Pjxj3qZMJa3rcouPR5ghpo1lgt7XTZ2+i+Vu5GDSRqRBTgt
BGI4CdF8gE89fL/6VVD1PSMG06FW5URV4G/uOXb4Czaxr++eLnPt8ycz4WFt47ax
Wh1j3eEJowviaANYPYlQKDa/kMqzRTYtpEQbZlnRq8tU0XD9gLv/AUDpjk/hhw2f
NMiO1tS09rN9nW/Xj1cn7hO2qUnyuCc2MmpBAJfFXUPrxKiZm1xd8q7iRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKkA3qy7V+IRRjQDLFKwQtxI73sMB8GA1UdIwQY
MBaAFL9WsW4Q+kXuyhaHsWifwh8YEed1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjFheGJoRDZSZTdLRm9leGFKX0NIeGdSNTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wMjdmZTMtMGNjYy00YTE3LTk2MDYt
YjA2NDMxYmVjYWNhLzEvdjFheGJoRDZSZTdLRm9leGFKX0NIeGdSNTNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wMjdmZTMtMGNjYy00YTE3LTk2MDYtYjA2NDMxYmVjYWNh
LzEvdjFheGJoRDZSZTdLRm9leGFKX0NIeGdSNTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi27lsM81
oWXed8E1yMa4ksrQXmmu+hpOHlbwGmmwtjQh7+cM2wDgXnkRnkku/F0emNbiYOUH
NiVQpz5s0413D0T8KjJwTixwyRLzpAxI3mESH8XL9iZ3Fr4u9GiGam9+dLHNrnLU
9y8DH3wsBmGV5v1UBj8G7iinM4q/7YCfopVLMTafc2NdyQ7et887sF4b6VdU60GS
du49fKeo+jvd7C/TpN+EjRR2Q+D5ePipV1DjgNpx0WS6kpJoioKj61t6umb0vbzy
t2LQ0TFoFjeq8XeKi/QaJWkNUrdN2nRrXKlbNOPNxX0AappbZTlhbY1PttgHTqzN
NzUuMVs0sGiIjg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 16:36:45 2026 by rpki-client