Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier: 1V+q3nFhlxIxrsnjxbF3nntX81VaqVNLklFPlRyWx98=
Subject key identifier: 94:4B:86:C2:EB:BE:04:17:2B:1C:01:12:DF:A1:DD:34:7A:76:04:EA
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 01A0EC9CD4E675690B31CE9AAE3FBBDFDB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number: 1A12
Signing time: Tue 29 Sep 2026 10:01:36 +0000
Manifest this update: Tue 29 Sep 2026 10:01:36 +0000
Manifest next update: Wed 30 Sep 2026 10:01:36 +0000
Files and hashes: 1: 0ekA97_3VRQ08hV0uz6EOhaN0DE.roa (hash: rD08lKhny8O0yJf+dMzirJji6WJRCtgenWrivGjxIr0=)
2: M0FebHks1Tk00ImEHu7-wxSlw5A.roa (hash: Sg2vhVuTi3aBjV3j+isdRvJjSOlEy1Bgzf6/w0UQUzQ=)
3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: KwWQXDjJ8kj43m/hCjye+/j3IJpM28iRsJlrIgcUmbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9c:d4:e6:75:69:0b:31:ce:9a:ae:3f:bb:df:db:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Sep 29 10:01:36 2026 GMT
Not After : Sep 30 10:01:36 2026 GMT
Subject: CN=944b86c2ebbe04172b1c0112dfa1dd347a7604ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:cf:19:85:c4:30:05:8b:d6:f1:c3:31:01:
49:b4:99:55:d8:71:de:95:1a:4f:76:dd:44:99:bc:
28:b9:cc:fd:71:a7:9c:ed:07:8f:fc:7c:10:78:05:
cf:1d:56:37:ea:b4:c2:c1:d8:2a:e5:f0:88:ff:de:
c5:df:96:d1:03:e0:89:62:81:ce:70:64:b4:e9:4b:
87:ae:3a:d9:4b:d9:bb:d4:68:6f:9e:0c:17:9a:eb:
4d:63:04:13:e4:20:a6:26:92:d4:2a:ec:ad:42:d1:
2b:73:2e:34:59:44:c8:e4:79:e1:7a:5a:5c:1f:7b:
92:07:81:8b:1d:2b:32:7d:e2:ce:e9:8b:5e:1c:b9:
c4:a8:b4:9f:b8:6e:5a:5d:18:47:cd:16:8a:12:c7:
fb:8d:a1:c3:30:73:5f:40:65:5b:d8:98:81:c4:ad:
84:dd:fd:24:f1:3f:54:8b:04:19:c5:c2:a8:00:c1:
f6:28:59:9d:47:45:dc:57:af:2a:0d:f1:32:d5:89:
c6:f8:3c:6e:b0:55:29:fa:9a:af:ef:a7:42:d6:b5:
ea:a4:66:95:8e:23:5a:93:02:43:16:cb:4f:72:b9:
ee:2a:04:a1:75:23:92:58:77:e0:8c:f1:f4:6a:17:
6b:70:a4:ad:06:bb:35:a7:77:ad:6b:19:e3:fa:e8:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:86:C2:EB:BE:04:17:2B:1C:01:12:DF:A1:DD:34:7A:76:04:EA
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:dc:e1:d3:c3:35:4e:2d:1b:ba:75:63:a7:4f:ed:ee:47:70:
4a:e6:9e:b7:70:bd:0b:74:64:79:77:da:cd:44:4f:10:56:d7:
d8:27:fb:d0:bc:90:1c:30:26:ca:c9:4a:94:86:30:de:e7:e8:
3c:da:17:17:4f:d6:06:f3:87:c9:80:55:18:d3:98:42:03:5e:
0e:8e:2f:aa:1e:40:5a:62:80:97:7a:d7:bb:63:cf:fc:02:1b:
03:d4:18:79:cb:aa:b1:f1:d9:2d:1b:cb:ce:e1:d8:9b:70:78:
5b:c2:80:34:d9:c0:53:81:d5:f6:0e:69:2b:e3:a9:85:3d:2f:
25:71:c7:84:70:c0:49:8e:db:66:66:32:96:7b:6b:90:12:9f:
06:9b:65:23:48:c1:8e:74:c3:3a:c0:78:86:00:43:82:49:0e:
4d:e9:ef:8d:4b:64:a6:30:78:61:f4:2e:1f:6f:d1:58:fd:03:
b7:23:27:0a:fc:a3:a8:55:46:3a:e1:e2:3f:23:79:28:e3:97:
22:b7:80:b5:a0:73:23:74:68:a1:8b:f1:44:eb:f8:a2:a7:63:
3e:b8:ba:6f:cd:7e:f0:9e:8e:62:67:8a:87:27:41:d7:6b:c6:
d6:fc:14:2d:9c:37:f4:71:94:2b:1f:c7:12:df:c0:93:7b:7a:
58:31:3e:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsnNTmdWkLMc6arj+739stMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzAzMTU4YWVkODExNjFkNGY1N2MxNzQyZDQ2MDgzNDE3
M2E3OWUwHhcNMjYwOTI5MTAwMTM2WhcNMjYwOTMwMTAwMTM2WjAzMTEwLwYDVQQD
Eyg5NDRiODZjMmViYmUwNDE3MmIxYzAxMTJkZmExZGQzNDdhNzYwNGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJfPGYXEMAWL1vHDMQFJtJlV2HHe
lRpPdt1Embwoucz9caec7QeP/HwQeAXPHVY36rTCwdgq5fCI/97F35bRA+CJYoHO
cGS06UuHrjrZS9m71GhvngwXmutNYwQT5CCmJpLUKuytQtErcy40WUTI5Hnhelpc
H3uSB4GLHSsyfeLO6YteHLnEqLSfuG5aXRhHzRaKEsf7jaHDMHNfQGVb2JiBxK2E
3f0k8T9UiwQZxcKoAMH2KFmdR0XcV68qDfEy1YnG+DxusFUp+pqv76dC1rXqpGaV
jiNakwJDFstPcrnuKgShdSOSWHfgjPH0ahdrcKStBrs1p3etaxnj+uhnswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRLhsLrvgQXKxwBEt+h3TR6dgTqMB8GA1UdIwQY
MBaAFKPAMViu2BFh1PV8F0LUYINBc6eeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iNjY0MjktNGYyMC00YjkwLWE2Yjgt
NGMxMGUzMzYwNTc3LzEvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iNjY0MjktNGYyMC00YjkwLWE2YjgtNGMxMGUzMzYwNTc3
LzEvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtzh08M1
Ti0bunVjp0/t7kdwSuaet3C9C3RkeXfazURPEFbX2Cf70LyQHDAmyslKlIYw3ufo
PNoXF0/WBvOHyYBVGNOYQgNeDo4vqh5AWmKAl3rXu2PP/AIbA9QYecuqsfHZLRvL
zuHYm3B4W8KANNnAU4HV9g5pK+OphT0vJXHHhHDASY7bZmYylntrkBKfBptlI0jB
jnTDOsB4hgBDgkkOTenvjUtkpjB4YfQuH2/RWP0DtyMnCvyjqFVGOuHiPyN5KOOX
IreAtaBzI3RooYvxROv4oqdjPri6b81+8J6OYmeKhydB12vG1vwULZw39HGUKx/H
Et/Ak3t6WDE+bA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 17:52:47 2026 by rpki-client