Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: a4f1M06MVAIJLgiTDyeTREmsZsv+jh+PVc5PrSe6IVM=
Subject key identifier: 5D:2E:29:70:DA:CB:C1:C6:42:83:D7:34:79:AD:99:D9:06:30:DE:15
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 01A0C5FBF3215D154F6F000810B988F1662D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 04CE
Signing time: Mon 21 Sep 2026 22:00:18 +0000
Manifest this update: Mon 21 Sep 2026 22:00:18 +0000
Manifest next update: Tue 22 Sep 2026 22:00:18 +0000
Files and hashes: 1: _XeETx4mh6Plm0BK-RBuP2zSujs.roa (hash: xDOylPin64Mcz52VO00yVSOPCA3wH6/qSwl1hwhbWC4=)
2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: IvZXaDRd3kNkUNi4yQWjA5Zu+z4tudw6dlc+iNq5F0U=)
3: yEqniktZbtzkmkZc_KMxAGvhuuU.roa (hash: pfRE4hx//8zmgvIA0elXhM8ZhL1kk+eFoYZAKrtL3rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fb:f3:21:5d:15:4f:6f:00:08:10:b9:88:f1:66:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Sep 21 22:00:18 2026 GMT
Not After : Sep 22 22:00:18 2026 GMT
Subject: CN=5d2e2970dacbc1c64283d73479ad99d90630de15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a5:75:aa:96:cf:ef:07:35:e4:6c:b4:35:61:
b9:5c:f1:1e:50:66:99:77:cc:2e:55:5c:5a:31:40:
85:47:2f:da:e4:fc:96:91:f9:b4:60:74:6c:bd:9a:
47:fa:52:44:1d:c3:f4:e4:2f:54:4b:49:9b:f2:fe:
c1:3b:63:ee:f3:07:6b:95:fb:c2:4e:36:31:da:23:
da:80:fb:74:78:47:e8:6c:2c:34:13:b6:4a:17:cf:
96:95:ca:02:08:88:61:1b:d7:c2:ae:a1:b2:47:b3:
d7:3f:f8:5b:7d:05:92:7c:12:92:53:33:f2:9f:ae:
bb:20:f3:51:b0:c5:b0:17:a4:58:37:ed:6d:25:9e:
50:06:42:b5:46:2b:ce:e4:54:b9:8d:16:91:8d:e1:
87:e5:0c:6b:3a:4f:2f:32:70:f6:ff:ff:1d:44:26:
f7:e7:17:51:60:24:cd:3f:fe:04:50:20:20:2d:9e:
57:6e:f4:26:59:a2:f9:ae:95:2f:7d:d8:38:f1:a5:
53:f5:ed:46:74:0b:1d:ce:b2:c9:a7:b9:29:e0:5f:
e6:5a:14:f3:58:59:cf:2a:91:d2:49:b6:ac:b5:6c:
a9:e7:76:8d:29:85:0e:ae:64:b4:b7:ef:23:f4:e0:
82:cf:c2:fe:e4:65:59:cc:46:61:5c:61:f5:e0:e9:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2E:29:70:DA:CB:C1:C6:42:83:D7:34:79:AD:99:D9:06:30:DE:15
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f6:4d:3f:92:81:19:22:48:1d:4e:2c:8c:f3:90:3f:e4:ab:
20:9a:9f:85:5c:36:b8:22:1e:72:ce:57:1a:f1:aa:17:f4:8b:
fa:ce:d9:4c:a9:d0:5b:f6:95:90:87:45:ec:5d:22:43:b7:e4:
a4:cb:ae:f9:16:62:4b:af:3b:a3:14:d5:79:96:92:b7:d8:4a:
b9:21:ea:1e:07:58:dc:9a:c5:c3:54:3a:45:57:4c:3d:76:79:
c3:3d:13:c9:25:dc:77:3c:5d:f2:31:64:c9:b0:af:29:65:ed:
2f:99:a2:27:c4:8e:32:f1:02:e6:73:3c:c5:42:dd:0c:cb:eb:
18:cc:72:3c:3c:8b:15:e2:10:73:51:34:b5:73:24:8f:ff:54:
47:1c:a7:e5:a2:08:f3:f6:3b:17:7d:e0:4a:8f:8a:f1:55:8d:
3f:fb:e5:ad:4a:8a:ab:5a:c3:c2:d9:e3:7f:78:14:10:f5:84:
cf:90:78:bb:12:10:be:48:bb:9c:f9:9d:74:f8:37:85:8e:2b:
be:2c:65:1f:22:8f:af:48:c8:1e:34:4e:36:53:2a:69:be:de:
6d:27:f5:2c:1c:43:7b:c6:ae:58:4e:f7:cd:9c:0e:c8:21:d7:
30:08:f4:68:8e:dc:5b:10:4d:9f:ca:03:d0:31:3f:71:91:7e:
33:17:46:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDF+/MhXRVPbwAIELmI8WYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDU1YTM5MzliYWNiYWE1OTE4YzdlZGQ1NDY0ZTExYmEx
YzhjZGQwHhcNMjYwOTIxMjIwMDE4WhcNMjYwOTIyMjIwMDE4WjAzMTEwLwYDVQQD
Eyg1ZDJlMjk3MGRhY2JjMWM2NDI4M2Q3MzQ3OWFkOTlkOTA2MzBkZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96V1qpbP7wc15Gy0NWG5XPEeUGaZ
d8wuVVxaMUCFRy/a5PyWkfm0YHRsvZpH+lJEHcP05C9US0mb8v7BO2Pu8wdrlfvC
TjYx2iPagPt0eEfobCw0E7ZKF8+WlcoCCIhhG9fCrqGyR7PXP/hbfQWSfBKSUzPy
n667IPNRsMWwF6RYN+1tJZ5QBkK1RivO5FS5jRaRjeGH5QxrOk8vMnD2//8dRCb3
5xdRYCTNP/4EUCAgLZ5XbvQmWaL5rpUvfdg48aVT9e1GdAsdzrLJp7kp4F/mWhTz
WFnPKpHSSbastWyp53aNKYUOrmS0t+8j9OCCz8L+5GVZzEZhXGH14OlgKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0uKXDay8HGQoPXNHmtmdkGMN4VMB8GA1UdIwQY
MBaAFGhFWjk5usuqWRjH7dVGThG6HIzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAt
YTI2Y2I2NDI5NDg2LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8zOTBlODAtMzIxNC00YWM1LWJiNTAtYTI2Y2I2NDI5NDg2
LzEvYUVWYU9UbTZ5NnBaR01mdDFVWk9FYm9jak4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPZNP5KB
GSJIHU4sjPOQP+SrIJqfhVw2uCIecs5XGvGqF/SL+s7ZTKnQW/aVkIdF7F0iQ7fk
pMuu+RZiS687oxTVeZaSt9hKuSHqHgdY3JrFw1Q6RVdMPXZ5wz0TySXcdzxd8jFk
ybCvKWXtL5miJ8SOMvEC5nM8xULdDMvrGMxyPDyLFeIQc1E0tXMkj/9URxyn5aII
8/Y7F33gSo+K8VWNP/vlrUqKq1rDwtnjf3gUEPWEz5B4uxIQvki7nPmddPg3hY4r
vixlHyKPr0jIHjRONlMqab7ebSf1LBxDe8auWE73zZwOyCHXMAj0aI7cWxBNn8oD
0DE/cZF+MxdGtQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:27:24 2026 by rpki-client