Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft (raw, json)
Hash identifier: ecJonYqU0cDhlyfGCbv4uX4FX8OOhVkY8TpsrF9GOhc=
Subject key identifier: 54:31:F1:37:3F:F8:E6:52:E3:4A:57:6B:CE:6E:E8:A2:4E:2C:A1:2E
Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Certificate serial: 01A0CAEB5BCFD2DF71CA6186FC5259E86A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
Manifest number: 09D3
Signing time: Tue 22 Sep 2026 21:00:17 +0000
Manifest this update: Tue 22 Sep 2026 21:00:17 +0000
Manifest next update: Wed 23 Sep 2026 21:00:17 +0000
Files and hashes: 1: TxCuEKO4UFBws6tMJ89yfNDgvSA.roa (hash: ye0le9kc8j89F6B3VF5KOiTRqH3PrXwEdQjOQuRJ7Js=)
2: aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl (hash: K14vcBO0M2iY2MXFP0VgNoTrqJzhxK4m8zeTZIv6YZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:5b:cf:d2:df:71:ca:61:86:fc:52:59:e8:6a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Validity
Not Before: Sep 22 21:00:17 2026 GMT
Not After : Sep 23 21:00:17 2026 GMT
Subject: CN=5431f1373ff8e652e34a576bce6ee8a24e2ca12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:f4:0d:35:25:33:1f:5c:71:57:05:0f:61:
a9:82:65:9d:71:67:00:7c:29:46:e4:7a:2b:a3:ec:
8e:c2:f6:16:2b:3e:8e:55:99:ec:bb:00:fa:ae:a8:
63:3f:7d:4b:c1:54:a9:df:37:1d:7b:07:08:0e:5a:
2b:c8:4c:59:57:a4:58:80:fa:0a:de:45:73:ac:57:
a0:08:3f:9b:a7:48:74:a2:b6:32:6b:13:6a:1b:3c:
ca:cc:b0:36:a7:08:66:62:37:41:0c:6c:f5:40:6e:
5c:22:f6:df:fa:dd:bf:19:f0:09:49:19:e9:26:75:
4b:59:24:b6:28:f0:c4:0e:1f:a9:7f:e0:4e:bf:83:
0d:48:d6:4d:c7:db:f7:de:59:b2:3c:3f:fe:0d:03:
90:44:da:c1:4f:ea:c2:91:3c:0c:98:50:7e:b7:b9:
37:af:96:32:e0:56:3b:93:48:c5:d5:cc:78:d2:80:
54:84:b8:fc:1d:e4:95:40:05:8b:37:9e:09:29:71:
e7:43:65:74:3c:9a:86:84:cf:7c:83:ff:1f:98:d8:
34:07:ef:92:d2:63:5f:57:e5:d3:cf:48:6b:1c:cd:
41:9d:30:27:9f:75:8b:b5:ec:c9:ef:30:6c:17:60:
4f:54:cd:06:da:c3:99:d1:2d:a8:b9:c8:c5:6e:ea:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:31:F1:37:3F:F8:E6:52:E3:4A:57:6B:CE:6E:E8:A2:4E:2C:A1:2E
X509v3 Authority Key Identifier:
keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:fe:47:1d:fd:d2:55:55:99:28:90:dc:4a:38:49:8c:30:17:
1f:60:97:bc:8c:d1:5a:5c:8a:55:e6:af:04:12:b7:c4:76:e2:
68:1c:9d:83:c6:a4:ad:eb:a9:49:8b:46:5d:9b:e7:b3:fd:ae:
98:a9:0d:f1:8e:77:18:b0:82:b3:df:30:8b:07:5d:91:a9:f1:
8c:9f:5a:0b:95:5d:5f:60:6e:21:41:7b:d3:0b:6d:89:6a:0a:
6c:77:4c:d2:40:51:b4:aa:00:20:79:bf:73:a2:9d:2b:d1:0a:
b1:1c:43:78:f7:86:2d:5a:f6:31:f5:e2:09:05:d9:38:0e:77:
aa:dc:8d:52:f3:08:66:1a:a0:c4:2a:f4:df:b7:71:bf:cb:3d:
3a:5c:9a:62:13:de:ae:39:13:82:28:fb:5c:0d:2b:92:6e:e1:
bc:1d:05:be:3b:23:30:59:88:5a:a2:77:4d:1e:70:c7:c5:81:
e5:34:94:ca:8e:33:63:40:e4:37:20:c8:79:4e:f8:3e:3b:09:
7f:1c:aa:6c:a3:2f:8a:f2:59:ca:3a:fb:6d:5a:71:24:8e:e3:
1a:a6:f0:fc:98:4f:90:93:04:06:5a:0d:25:84:85:08:6d:bb:
43:f4:dd:86:f0:09:f6:a2:ef:58:c4:51:15:70:17:80:98:b8:
ec:9b:08:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDK61vP0t9xymGG/FJZ6GoxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4N2I5MWVkYTE2YjZmMWIxZmEwMTc1ZDY3Yzc5OTRmNjkx
ZDhlOTcwHhcNMjYwOTIyMjEwMDE3WhcNMjYwOTIzMjEwMDE3WjAzMTEwLwYDVQQD
Eyg1NDMxZjEzNzNmZjhlNjUyZTM0YTU3NmJjZTZlZThhMjRlMmNhMTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qn0DTUlMx9ccVcFD2GpgmWdcWcA
fClG5Horo+yOwvYWKz6OVZnsuwD6rqhjP31LwVSp3zcdewcIDloryExZV6RYgPoK
3kVzrFegCD+bp0h0orYyaxNqGzzKzLA2pwhmYjdBDGz1QG5cIvbf+t2/GfAJSRnp
JnVLWSS2KPDEDh+pf+BOv4MNSNZNx9v33lmyPD/+DQOQRNrBT+rCkTwMmFB+t7k3
r5Yy4FY7k0jF1cx40oBUhLj8HeSVQAWLN54JKXHnQ2V0PJqGhM98g/8fmNg0B++S
0mNfV+XTz0hrHM1BnTAnn3WLtezJ7zBsF2BPVM0G2sOZ0S2oucjFbuoP8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQx8Tc/+OZS40pXa85u6KJOLKEuMB8GA1UdIwQY
MBaAFGh7ke2ha28bH6AXXWfHmU9pHY6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZmI4ZGYtMGU0OC00NjY1LWE5OWIt
ZGZmZTU5MDIzZTg5LzEvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZmI4ZGYtMGU0OC00NjY1LWE5OWItZGZmZTU5MDIzZTg5
LzEvYUh1UjdhRnJieHNmb0JkZFo4ZVpUMmtkanBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJf5HHf3S
VVWZKJDcSjhJjDAXH2CXvIzRWlyKVeavBBK3xHbiaBydg8akreupSYtGXZvns/2u
mKkN8Y53GLCCs98wiwddkanxjJ9aC5VdX2BuIUF70wttiWoKbHdM0kBRtKoAIHm/
c6KdK9EKsRxDePeGLVr2MfXiCQXZOA53qtyNUvMIZhqgxCr037dxv8s9OlyaYhPe
rjkTgij7XA0rkm7hvB0FvjsjMFmIWqJ3TR5wx8WB5TSUyo4zY0DkNyDIeU74PjsJ
fxyqbKMvivJZyjr7bVpxJI7jGqbw/JhPkJMEBloNJYSFCG27Q/TdhvAJ9qLvWMRR
FXAXgJi47JsIzA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 03:26:12 2026 by rpki-client