Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: CCNiT7DwYZzo4beprgjEQGdPAhkiTAx46z8oTJxausg=
Subject key identifier: C3:91:2B:E0:05:A6:A9:E8:CC:5A:A2:F8:01:80:C5:BC:28:C1:71:80
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 01A1AB27A0141D5659E3706692FF103CA367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 1ADE
Signing time: Thu 05 Nov 2026 10:01:03 +0000
Manifest this update: Thu 05 Nov 2026 10:01:03 +0000
Manifest next update: Fri 06 Nov 2026 10:01:03 +0000
Files and hashes: 1: 3wUwuQwTXV5aCQTU82rWSfa5LEM.roa (hash: ZLeq9/wF1aUOdaHthHWe1UDHIfSGZmqtBr5YatoHrhk=)
2: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: /vrXSiPnNeP90+YdHp4Iyq3qKhIw3vO6+rrqauQcGKY=)
3: t4a_vp8lFfYuPnrFd74HGQFrjpA.roa (hash: 1yVWZO4hYvbD4qGSevogaiCjdCYYHYrdz/g3xPGLVFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:27:a0:14:1d:56:59:e3:70:66:92:ff:10:3c:a3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Nov 5 10:01:03 2026 GMT
Not After : Nov 6 10:01:03 2026 GMT
Subject: CN=c3912be005a6a9e8cc5aa2f80180c5bc28c17180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:82:c6:cd:21:96:f6:a4:c1:5f:af:25:fb:
09:e1:8e:be:18:e3:45:f8:91:96:d4:7e:85:b7:aa:
76:2a:61:ac:1b:7f:38:3d:3d:4b:64:13:63:86:07:
9e:64:01:2e:b6:3e:39:9c:29:0e:cd:bb:94:5b:1f:
2d:0e:a6:1e:77:b8:0f:62:b5:d8:73:1d:de:84:82:
ae:f5:6a:96:3d:73:60:b7:e5:62:57:4b:6d:65:16:
a6:10:61:c5:a9:31:47:9e:c9:5a:36:91:85:d7:37:
28:90:3d:af:6c:17:8a:57:3c:fe:05:41:32:b3:2e:
9a:8d:14:f8:81:99:37:4e:26:0d:58:72:2b:07:7f:
d8:52:b2:5e:09:a6:9c:9b:c1:2e:20:27:0e:73:a3:
86:41:9e:b1:b7:f8:fc:73:2c:68:af:ae:00:c0:3c:
45:ca:cf:2e:af:9f:5e:81:f5:cc:3e:24:52:cb:18:
db:07:0b:50:20:fc:cf:ed:c8:da:4b:42:0b:e6:cc:
10:df:53:8b:95:97:fb:22:5d:32:e5:c0:66:85:8e:
2c:39:07:89:03:5a:31:1d:27:d1:2a:6a:94:3f:9b:
0a:82:69:e3:7e:a8:e3:72:6d:c2:58:ec:9a:82:ca:
49:8b:e8:ca:80:0d:f2:67:cd:8a:09:2c:8e:36:86:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:91:2B:E0:05:A6:A9:E8:CC:5A:A2:F8:01:80:C5:BC:28:C1:71:80
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:52:69:d4:ae:73:c5:e1:53:f9:37:ed:12:d5:40:5d:a6:e3:
41:cd:b9:a1:62:af:66:24:95:90:c0:31:45:fb:2c:ac:a9:af:
00:db:59:8a:32:39:6c:2e:86:bf:44:a7:59:20:d9:2d:28:3c:
2b:c4:19:41:bc:f1:4c:0c:01:31:e6:44:a5:d0:3a:82:5a:73:
fc:3d:24:9c:74:2f:58:7a:95:31:40:3b:a8:99:6f:49:fe:3a:
c7:cf:ff:65:39:05:c2:e5:20:f7:a4:57:d1:ed:3c:c6:52:0e:
db:ba:f1:46:81:0d:bd:a7:dd:0e:36:2e:2d:88:5f:1f:cc:2a:
9d:ab:ad:a5:bc:a7:79:d2:54:74:75:e0:69:31:c8:52:b9:45:
4e:2d:1c:fc:d5:9d:b2:38:7d:9b:f3:69:4c:02:eb:0f:5b:d4:
c2:dd:6d:6a:ec:57:6f:a7:a1:6c:0c:fa:29:f7:09:3e:97:43:
50:96:6b:67:6e:fd:e7:f3:33:90:33:75:f1:e5:1c:b9:a7:28:
5d:4e:4c:8a:5f:2c:67:35:4b:bf:1b:72:c6:aa:1b:7c:96:de:
73:f0:ab:7d:d9:79:c7:9b:90:f2:0d:60:97:26:e7:bc:a1:00:
8f:70:8e:82:ce:ec:fd:5a:a1:7f:9c:bd:1b:ec:55:ff:bd:1e:
a5:3a:91:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGrJ6AUHVZZ43Bmkv8QPKNnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OWM1ODFhZmYzZDBhOTAxNzhjZmFiNTY1YTM4OGNjZDli
YzAxY2UwHhcNMjYxMTA1MTAwMTAzWhcNMjYxMTA2MTAwMTAzWjAzMTEwLwYDVQQD
EyhjMzkxMmJlMDA1YTZhOWU4Y2M1YWEyZjgwMTgwYzViYzI4YzE3MTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF2Cxs0hlvakwV+vJfsJ4Y6+GONF
+JGW1H6Ft6p2KmGsG384PT1LZBNjhgeeZAEutj45nCkOzbuUWx8tDqYed7gPYrXY
cx3ehIKu9WqWPXNgt+ViV0ttZRamEGHFqTFHnslaNpGF1zcokD2vbBeKVzz+BUEy
sy6ajRT4gZk3TiYNWHIrB3/YUrJeCaacm8EuICcOc6OGQZ6xt/j8cyxor64AwDxF
ys8ur59egfXMPiRSyxjbBwtQIPzP7cjaS0IL5swQ31OLlZf7Il0y5cBmhY4sOQeJ
A1oxHSfRKmqUP5sKgmnjfqjjcm3CWOyagspJi+jKgA3yZ82KCSyONobyBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMORK+AFpqnozFqi+AGAxbwowXGAMB8GA1UdIwQY
MBaAFGmcWBr/PQqQF4z6tWWjiMzZvAHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUt
ZTVkZGQyYmI1MWM1LzEvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUtZTVkZGQyYmI1MWM1
LzEvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1Jp1K5z
xeFT+TftEtVAXabjQc25oWKvZiSVkMAxRfssrKmvANtZijI5bC6Gv0SnWSDZLSg8
K8QZQbzxTAwBMeZEpdA6glpz/D0knHQvWHqVMUA7qJlvSf46x8//ZTkFwuUg96RX
0e08xlIO27rxRoENvafdDjYuLYhfH8wqnautpbynedJUdHXgaTHIUrlFTi0c/NWd
sjh9m/NpTALrD1vUwt1tauxXb6ehbAz6KfcJPpdDUJZrZ2795/MzkDN18eUcuaco
XU5Mil8sZzVLvxtyxqobfJbec/Crfdl5x5uQ8g1glybnvKEAj3COgs7s/Vqhf5y9
G+xV/70epTqRRQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:30:09 2026 by rpki-client