Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
File: 0aVkCYrHZdC-2EkYgJFvYba48Y0.mft (raw, json)
Hash identifier: 74xVkGIYoFsmx8GHiGAwe1VEtQCb6ZKGn7E4ayoym4U=
Subject key identifier: CA:52:26:47:E8:D5:69:88:69:9C:97:C0:B3:F7:6B:60:07:E0:98:8E
Authority key identifier: D1:A5:64:09:8A:C7:65:D0:BE:D8:49:18:80:91:6F:61:B6:B8:F1:8D
Certificate issuer: /CN=d1a564098ac765d0bed8491880916f61b6b8f18d
Certificate serial: 01A0DC4D7D0C7C174ECD85BF075E5F575032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
Manifest number: 0251
Signing time: Sat 26 Sep 2026 06:01:00 +0000
Manifest this update: Sat 26 Sep 2026 06:01:00 +0000
Manifest next update: Sun 27 Sep 2026 06:01:00 +0000
Files and hashes: 1: 0aVkCYrHZdC-2EkYgJFvYba48Y0.crl (hash: Un0J2SjONm3g6F0EDsJH38iLsIfYoTXdpp7Q8Q+nlUU=)
2: 0fBOVPEVt_Vn70y4H7R92SYVH6A.roa (hash: AXH0b2vzi3eJ8ZGHrdb03qMvGfl3ImnFJSUpRqXJVtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:7d:0c:7c:17:4e:cd:85:bf:07:5e:5f:57:50:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a564098ac765d0bed8491880916f61b6b8f18d
Validity
Not Before: Sep 26 06:01:00 2026 GMT
Not After : Sep 27 06:01:00 2026 GMT
Subject: CN=ca522647e8d56988699c97c0b3f76b6007e0988e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:b1:e0:03:10:31:87:11:d8:47:b9:86:2a:
43:c6:7d:fb:11:71:f8:2c:73:78:90:6f:a8:c3:fe:
18:3c:64:bd:9f:1f:e7:ac:f8:fb:d2:8e:6d:69:c7:
01:2e:3d:7d:5c:9e:1a:9e:5f:5d:bf:56:31:a6:5a:
cf:1e:5c:16:29:2d:7f:f6:5d:3b:43:72:66:6d:85:
02:2d:80:fd:b1:0c:f3:c7:c3:23:8e:9b:8d:13:f4:
8f:69:90:70:98:1b:db:76:ea:b3:65:56:b7:94:42:
f0:c5:59:e0:c8:f0:82:93:24:5c:8f:5b:20:7e:91:
f0:c7:2f:8e:0f:9a:3c:3b:dc:4f:ed:46:2d:20:62:
4d:2d:aa:f7:92:b9:f3:17:7e:99:9d:10:c5:48:a3:
ee:92:1d:f2:3d:03:df:73:90:3e:ef:97:1d:84:5f:
e3:d2:f9:9a:ea:05:a0:20:45:f3:c6:18:fc:09:92:
24:6f:f8:fd:bf:72:f5:0d:15:73:05:81:b5:58:f3:
a3:1b:fb:e5:6c:68:dd:9e:5d:7a:59:d6:d1:95:b4:
a1:cd:ee:54:97:cc:c1:48:6c:54:3b:f1:00:1c:46:
64:90:a8:b5:f0:88:ec:10:3b:67:a5:24:bf:87:aa:
ef:df:ff:f4:68:91:ce:a6:d9:f1:82:09:57:dd:7e:
f1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:52:26:47:E8:D5:69:88:69:9C:97:C0:B3:F7:6B:60:07:E0:98:8E
X509v3 Authority Key Identifier:
keyid:D1:A5:64:09:8A:C7:65:D0:BE:D8:49:18:80:91:6F:61:B6:B8:F1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:69:1d:47:c6:9a:56:76:b1:f2:e4:34:04:4f:78:24:df:f1:
5f:b7:32:54:6d:1d:7d:43:03:45:08:78:fd:2d:56:b2:dc:0d:
69:05:95:5f:60:c0:d5:3c:0a:a9:67:f1:1c:41:8a:ef:5c:9c:
25:67:d0:3a:4f:3c:b5:75:59:08:33:1f:b0:2d:0d:a3:e1:2c:
22:3c:07:d9:6a:77:a2:4d:76:b9:66:43:80:1c:5d:75:6b:7d:
13:3a:0d:30:82:66:72:0f:17:9a:5a:8a:4f:8c:f2:e6:76:94:
a8:21:88:50:b8:67:fd:58:1c:49:28:58:d7:3b:eb:f5:97:13:
67:3f:9a:04:de:2b:e2:af:18:4d:86:1b:e1:c9:a5:15:04:47:
c5:8b:ac:22:95:62:1a:53:49:ea:47:62:5e:d5:fd:74:bc:bd:
72:b3:f8:0a:c1:52:26:db:13:27:ea:dd:c6:7f:6b:fe:98:34:
63:f1:17:bb:0b:29:28:07:87:86:8d:fd:1c:9e:23:77:d3:41:
8c:ce:e4:4b:c6:02:4e:5c:dc:33:4a:aa:6a:1e:0b:b8:10:e5:
96:4b:a0:ed:b2:d1:50:b6:86:22:fd:9e:2d:d1:c1:32:76:28:
47:a7:3d:05:bb:74:ad:eb:c7:49:97:38:c0:f0:6c:5d:cf:ca:
7f:8d:11:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcTX0MfBdOzYW/B15fV1AyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYTU2NDA5OGFjNzY1ZDBiZWQ4NDkxODgwOTE2ZjYxYjZi
OGYxOGQwHhcNMjYwOTI2MDYwMTAwWhcNMjYwOTI3MDYwMTAwWjAzMTEwLwYDVQQD
EyhjYTUyMjY0N2U4ZDU2OTg4Njk5Yzk3YzBiM2Y3NmI2MDA3ZTA5ODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkWx4AMQMYcR2Ee5hipDxn37EXH4
LHN4kG+ow/4YPGS9nx/nrPj70o5taccBLj19XJ4anl9dv1YxplrPHlwWKS1/9l07
Q3JmbYUCLYD9sQzzx8MjjpuNE/SPaZBwmBvbduqzZVa3lELwxVngyPCCkyRcj1sg
fpHwxy+OD5o8O9xP7UYtIGJNLar3krnzF36ZnRDFSKPukh3yPQPfc5A+75cdhF/j
0vma6gWgIEXzxhj8CZIkb/j9v3L1DRVzBYG1WPOjG/vlbGjdnl16WdbRlbShze5U
l8zBSGxUO/EAHEZkkKi18IjsEDtnpSS/h6rv3//0aJHOptnxgglX3X7xwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpSJkfo1WmIaZyXwLP3a2AH4JiOMB8GA1UdIwQY
MBaAFNGlZAmKx2XQvthJGICRb2G2uPGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGFWa0NZckhaZEMtMkVrWWdKRnZZYmE0OFkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mNDlmOTUtYmI2Yy00NmMxLTg4ZTIt
MTIxNjVmMjcxNDJmLzEvMGFWa0NZckhaZEMtMkVrWWdKRnZZYmE0OFkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mNDlmOTUtYmI2Yy00NmMxLTg4ZTItMTIxNjVmMjcxNDJm
LzEvMGFWa0NZckhaZEMtMkVrWWdKRnZZYmE0OFkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2kdR8aa
Vnax8uQ0BE94JN/xX7cyVG0dfUMDRQh4/S1WstwNaQWVX2DA1TwKqWfxHEGK71yc
JWfQOk88tXVZCDMfsC0No+EsIjwH2Wp3ok12uWZDgBxddWt9EzoNMIJmcg8XmlqK
T4zy5naUqCGIULhn/VgcSShY1zvr9ZcTZz+aBN4r4q8YTYYb4cmlFQRHxYusIpVi
GlNJ6kdiXtX9dLy9crP4CsFSJtsTJ+rdxn9r/pg0Y/EXuwspKAeHho39HJ4jd9NB
jM7kS8YCTlzcM0qqah4LuBDllkug7bLRULaGIv2eLdHBMnYoR6c9Bbt0revHSZc4
wPBsXc/Kf40RVA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:47:45 2026 by rpki-client