Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: HHrWdk0LTwYGeCPoGZ82+mrxkjqyIsWNUKs+xFbcT6Y=
Subject key identifier: 3F:FA:8F:72:5C:70:A9:D7:0B:7C:0A:F0:D1:53:9D:C4:E0:32:A3:6E
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 019E1CEB5F15631B25A6A7804E1D157901CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 16:00:47 +0000
Manifest this update: Tue 12 May 2026 16:00:47 +0000
Manifest next update: Wed 13 May 2026 16:00:47 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: qqFMt84pwYcGuRNR/qv8K0OFwlwKAI7WyUIbG1PFxiM=)
2: AnjhFMrWNEvE6l4HScTxK_j27SU.roa (hash: q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=)
3: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (hash: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8=)
4: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (hash: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:5f:15:63:1b:25:a6:a7:80:4e:1d:15:79:01:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: May 12 16:00:47 2026 GMT
Not After : May 13 16:00:47 2026 GMT
Subject: CN=3ffa8f725c70a9d70b7c0af0d1539dc4e032a36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:ce:3d:f5:f0:64:57:de:d6:40:e4:b2:5a:
c0:5f:98:50:fd:43:62:11:38:a5:88:03:66:e3:ee:
12:ef:85:96:a3:16:eb:3f:45:a4:e5:b2:1a:92:6c:
30:73:00:06:25:40:bc:e2:b6:9c:55:e2:6f:28:60:
b0:c3:a9:42:c0:00:6b:83:0a:cc:be:25:01:73:4d:
d9:c0:3a:e6:45:29:a7:42:ab:25:77:96:c7:cb:9a:
c7:4b:a9:e7:d7:6e:1c:fb:a4:95:bb:84:7c:94:1c:
a6:f5:08:61:5d:d3:27:63:09:92:f7:d3:3b:03:42:
09:f3:bc:d9:dd:3e:18:a7:74:05:b2:35:d5:00:3a:
01:80:23:49:87:18:a5:f6:9c:93:5b:81:70:b3:74:
54:43:0c:f6:f7:20:f2:27:f3:ef:d8:db:dd:ca:a5:
b2:2f:93:82:cb:b7:0c:fb:03:a2:7a:dc:05:ea:ac:
98:1d:69:25:ef:61:d6:87:1c:cf:c1:13:b6:49:4f:
75:58:c2:01:30:61:bf:4d:74:ea:3c:a5:63:67:9f:
aa:ec:88:a8:f6:e6:38:33:9d:f4:0b:11:a1:16:41:
9f:e4:63:82:4a:f4:f3:22:76:4b:a1:d5:84:bb:32:
ac:8f:7d:55:c8:54:c5:16:e3:28:b8:49:61:17:d4:
1a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FA:8F:72:5C:70:A9:D7:0B:7C:0A:F0:D1:53:9D:C4:E0:32:A3:6E
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:26:be:1d:04:c6:d6:64:a6:29:df:df:f9:2a:da:6f:03:97:
37:ba:2b:82:0c:4b:f8:7e:15:4e:2f:24:61:2a:70:ea:f4:24:
16:d3:95:e0:82:60:6c:f2:9c:b6:f7:c6:fc:4f:49:b2:7f:22:
98:0e:01:fd:82:45:5d:95:fd:5e:c1:1b:4b:ec:0b:a4:a3:d1:
10:b8:f4:3e:06:51:07:00:f2:0e:25:88:d4:28:38:e5:41:23:
7f:93:ec:51:4b:eb:a0:69:7f:e9:82:47:eb:86:e4:55:42:35:
2f:80:ca:72:68:53:aa:cc:00:e2:75:ca:dc:31:0a:16:ea:7f:
d6:c5:c3:02:ed:f6:e2:88:a5:02:7a:80:36:b3:4f:26:9f:3e:
51:cb:f6:3e:0f:cc:58:ee:3b:67:e6:de:a0:91:ed:30:20:21:
79:9b:97:c1:ec:d9:0c:72:2f:c8:22:97:be:b4:c6:10:41:28:
01:cc:20:79:4a:6e:35:a2:92:42:55:db:b4:f5:7f:1e:99:e8:
2f:97:a0:cb:f7:0a:52:c6:a6:52:61:0b:4a:22:a3:15:d5:4d:
3a:31:b4:af:91:81:54:63:78:69:4f:b9:27:47:df:e8:69:ab:
e3:55:c2:b2:45:2b:64:32:71:9f:6a:0e:e7:ed:59:93:6b:d1:
97:e8:8f:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c618VYxslpqeATh0VeQHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNGIwZWVkMmM1YTc4N2FkODdmYjQ5ZjA0ZDNmZGYzZDBm
NDlkNGMwHhcNMjYwNTEyMTYwMDQ3WhcNMjYwNTEzMTYwMDQ3WjAzMTEwLwYDVQQD
EygzZmZhOGY3MjVjNzBhOWQ3MGI3YzBhZjBkMTUzOWRjNGUwMzJhMzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7bOPfXwZFfe1kDkslrAX5hQ/UNi
ETiliANm4+4S74WWoxbrP0Wk5bIakmwwcwAGJUC84racVeJvKGCww6lCwABrgwrM
viUBc03ZwDrmRSmnQqsld5bHy5rHS6nn124c+6SVu4R8lBym9QhhXdMnYwmS99M7
A0IJ87zZ3T4Yp3QFsjXVADoBgCNJhxil9pyTW4Fws3RUQwz29yDyJ/Pv2NvdyqWy
L5OCy7cM+wOietwF6qyYHWkl72HWhxzPwRO2SU91WMIBMGG/TXTqPKVjZ5+q7Iio
9uY4M530CxGhFkGf5GOCSvTzInZLodWEuzKsj31VyFTFFuMouElhF9QaUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/6j3JccKnXC3wK8NFTncTgMqNuMB8GA1UdIwQY
MBaAFANLDu0sWnh62H+0nwTT/fPQ9J1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZDc4M2EtMWNiYy00MGQ0LWIwMTEt
ZTA4NTI3NWFhMzY0LzEvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yZDc4M2EtMWNiYy00MGQ0LWIwMTEtZTA4NTI3NWFhMzY0
LzEvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCa+HQTG
1mSmKd/f+SrabwOXN7orggxL+H4VTi8kYSpw6vQkFtOV4IJgbPKctvfG/E9Jsn8i
mA4B/YJFXZX9XsEbS+wLpKPRELj0PgZRBwDyDiWI1Cg45UEjf5PsUUvroGl/6YJH
64bkVUI1L4DKcmhTqswA4nXK3DEKFup/1sXDAu324oilAnqANrNPJp8+Ucv2Pg/M
WO47Z+beoJHtMCAheZuXwezZDHIvyCKXvrTGEEEoAcwgeUpuNaKSQlXbtPV/Hpno
L5egy/cKUsamUmELSiKjFdVNOjG0r5GBVGN4aU+5J0ff6Gmr41XCskUrZDJxn2oO
5+1Zk2vRl+iPzA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:27:16 2026 by rpki-client