Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: J2bJA98sJaWQFLn0edW9+iI8hjognAWBTkJgTlSTN/8=
Subject key identifier: 68:A7:BC:81:31:41:BF:55:99:82:10:7C:95:D4:29:67:CC:D1:0A:AE
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 019E20C8066C30D1B5D05AE3ED769398124C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 1390
Signing time: Wed 13 May 2026 10:00:40 +0000
Manifest this update: Wed 13 May 2026 10:00:40 +0000
Manifest next update: Thu 14 May 2026 10:00:40 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: b9rxVMv/XlC80mDYJPxwgNzkiO0nnMzbuDRJIjmONWg=)
2: lcX_BfSjVldf0AWvAKj1fHUxC84.roa (hash: EI6Mzu5z6YSWUkBvK1kxjCqRN5l7TNUNJw5p8ATCsOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:06:6c:30:d1:b5:d0:5a:e3:ed:76:93:98:12:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: May 13 10:00:40 2026 GMT
Not After : May 14 10:00:40 2026 GMT
Subject: CN=68a7bc813141bf559982107c95d42967ccd10aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:a6:e4:84:24:41:32:67:73:45:eb:e4:f6:
e3:24:0a:5d:a1:ac:76:48:41:63:39:89:c9:58:e6:
66:70:ba:d7:0d:f0:97:e2:7f:a0:c7:7b:d2:9f:0d:
0f:41:0d:b7:25:4f:0f:c3:20:60:ad:29:bb:8e:97:
a0:31:85:6e:3f:e7:44:c1:c2:01:ab:99:80:b0:ef:
c2:5b:6d:9c:1a:c5:a5:09:d9:37:1d:26:3b:ad:f1:
f3:64:bc:66:75:13:b9:9f:1d:06:ee:68:01:b2:6b:
5a:dd:4f:f4:3c:f9:7e:fd:d1:f7:42:7f:5d:90:38:
40:85:30:49:0e:dc:4e:93:e8:92:28:ee:c0:d9:8d:
c0:d4:63:39:1a:15:7a:5f:e1:a2:e1:11:24:9e:e8:
e3:80:06:ea:96:47:4d:5e:bf:87:f3:c2:2f:8a:f9:
8c:4e:23:8a:ad:23:e5:66:48:9f:33:71:ee:0e:19:
8a:80:eb:6a:31:72:98:cf:be:83:10:40:ea:b1:b4:
cf:b3:d3:1a:21:c4:3f:2c:d2:11:71:67:8f:27:08:
86:47:49:70:d8:b7:7c:21:f1:db:39:83:09:e1:05:
41:9f:9e:4d:31:1d:08:56:ff:7d:1a:8e:b7:27:da:
b8:28:03:02:02:32:b7:71:42:7b:45:68:88:80:ca:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A7:BC:81:31:41:BF:55:99:82:10:7C:95:D4:29:67:CC:D1:0A:AE
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:57:52:e9:2c:33:f9:91:06:75:79:f5:f5:6d:7c:8b:41:b2:
af:54:4a:8f:03:64:15:84:bd:7e:b4:4e:be:6d:ee:63:b1:0c:
b8:a7:8a:3d:e3:0b:65:2c:0f:fe:9b:9a:01:dd:31:eb:7f:59:
f7:42:7c:5b:9a:8f:61:aa:9f:c8:49:69:52:ed:8d:f0:6f:38:
7b:97:e2:f8:4b:e7:fa:a7:c2:41:4d:54:4a:86:52:23:2d:8d:
ef:f0:d0:4b:fc:1b:be:fd:60:c8:4e:40:85:4f:f8:42:8c:f6:
d1:b5:43:20:ea:99:07:f6:7a:51:08:31:31:44:ea:12:51:2b:
09:ae:5f:e9:45:9e:bf:b3:f5:05:e7:ec:c0:26:c9:6b:1f:a0:
aa:0f:75:63:2e:5d:24:dc:1d:8c:96:69:cc:63:8f:03:f3:3c:
4a:a7:f1:f3:d4:24:66:d6:5c:c8:21:26:f1:46:12:ce:a1:e1:
95:fa:39:b4:a7:d6:30:e8:85:48:4e:a5:be:ca:06:6f:a9:da:
cd:ac:96:28:7b:a6:82:1d:4a:04:f6:a8:9a:bb:a8:8a:f3:4a:
5d:a1:07:73:f9:f4:61:45:0e:fc:6c:b0:9c:d5:1c:a1:e4:bb:
19:80:ec:34:b1:43:06:c5:7c:5e:bb:62:a0:18:13:e3:5a:f2:
50:46:2f:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyAZsMNG10Frj7XaTmBJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzZjZWEyYTgwMjIwMzYxMjMxYjZhZmJiYzhjOGNkYWE0
ZmQ1MTcwHhcNMjYwNTEzMTAwMDQwWhcNMjYwNTE0MTAwMDQwWjAzMTEwLwYDVQQD
Eyg2OGE3YmM4MTMxNDFiZjU1OTk4MjEwN2M5NWQ0Mjk2N2NjZDEwYWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDGm5IQkQTJnc0Xr5PbjJApdoax2
SEFjOYnJWOZmcLrXDfCX4n+gx3vSnw0PQQ23JU8PwyBgrSm7jpegMYVuP+dEwcIB
q5mAsO/CW22cGsWlCdk3HSY7rfHzZLxmdRO5nx0G7mgBsmta3U/0PPl+/dH3Qn9d
kDhAhTBJDtxOk+iSKO7A2Y3A1GM5GhV6X+Gi4REknujjgAbqlkdNXr+H88IvivmM
TiOKrSPlZkifM3HuDhmKgOtqMXKYz76DEEDqsbTPs9MaIcQ/LNIRcWePJwiGR0lw
2Ld8IfHbOYMJ4QVBn55NMR0IVv99Go63J9q4KAMCAjK3cUJ7RWiIgMqFPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGinvIExQb9VmYIQfJXUKWfM0QquMB8GA1UdIwQY
MBaAFAPGzqKoAiA2EjG2r7vIyM2qT9UXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQt
ZjQ2ZDZhYjNkMzI2LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQtZjQ2ZDZhYjNkMzI2
LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFdS6Swz
+ZEGdXn19W18i0Gyr1RKjwNkFYS9frROvm3uY7EMuKeKPeMLZSwP/puaAd0x639Z
90J8W5qPYaqfyElpUu2N8G84e5fi+Evn+qfCQU1USoZSIy2N7/DQS/wbvv1gyE5A
hU/4Qoz20bVDIOqZB/Z6UQgxMUTqElErCa5f6UWev7P1BefswCbJax+gqg91Yy5d
JNwdjJZpzGOPA/M8Sqfx89QkZtZcyCEm8UYSzqHhlfo5tKfWMOiFSE6lvsoGb6na
zayWKHumgh1KBPaomruoivNKXaEHc/n0YUUO/GywnNUcoeS7GYDsNLFDBsV8Xrti
oBgT41ryUEYvCQ==
-----END CERTIFICATE-----
Generated at Wed May 13 15:16:11 2026 by rpki-client