
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: x5Bpacr272A2E7+WQVejYYnCzAKeGzIEzO7m4c5dVsM=
Subject key identifier: 14:6B:4E:DD:14:25:87:68:00:42:FC:99:2A:CA:1A:79:E0:79:B5:E3
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 01A0DA28B90EA511546F94C4F943CE6CA17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 0E69
Signing time: Fri 25 Sep 2026 20:01:36 +0000
Manifest this update: Fri 25 Sep 2026 20:01:36 +0000
Manifest next update: Sat 26 Sep 2026 20:01:36 +0000
Files and hashes: 1: MPB9CkoghVUPFrXOQKAmKQU_wx8.roa (hash: SBYmHn0Lh08hIxRKwJZvwv+ggtONWPJMq80oRcsft2g=)
2: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: S4EXqlQcOyyls9CW+jqHd9XqsIN3uvjTW5977n/TDBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:b9:0e:a5:11:54:6f:94:c4:f9:43:ce:6c:a1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: Sep 25 20:01:36 2026 GMT
Not After : Sep 26 20:01:36 2026 GMT
Subject: CN=146b4edd142587680042fc992aca1a79e079b5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:fa:c4:54:97:2f:5d:0c:0d:03:7a:8d:dd:
22:f6:55:86:c3:84:d7:f9:12:be:37:b3:93:69:dd:
97:d3:af:85:f2:57:50:a9:1b:18:14:b7:1c:8b:1d:
f2:92:95:85:ce:d1:fd:42:d3:c1:52:6b:4e:7a:24:
cf:fb:81:28:38:09:53:26:35:1d:71:c8:7b:d1:45:
92:3d:30:4a:b1:fa:14:b5:a5:72:8a:d2:43:f1:d0:
96:9c:ee:dd:2d:c6:8d:aa:2c:7a:a8:78:03:fa:79:
b7:57:f6:22:f2:b9:32:e2:45:be:de:d6:c7:d2:29:
fc:78:39:95:29:89:83:ea:00:5a:59:e7:97:56:5a:
0b:7e:93:3f:46:4e:4d:1d:89:ae:66:e9:2d:fd:10:
15:f7:e0:53:98:88:fc:f0:0e:33:d2:17:f9:ea:89:
2c:1d:d3:43:ac:f3:2e:a8:f4:e5:fe:63:54:51:2b:
66:92:95:61:13:0d:2b:35:06:b7:9e:69:c0:40:68:
cb:a9:f1:47:db:b2:22:42:85:ca:3a:b7:ae:1e:ed:
39:5f:71:d3:13:e5:8e:d6:96:92:72:20:55:c8:bb:
a3:69:d1:52:af:80:4b:0d:b4:3e:a4:0d:9d:db:de:
81:d8:ae:8d:a3:ba:fe:a1:f6:f0:6d:25:6c:a2:b8:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6B:4E:DD:14:25:87:68:00:42:FC:99:2A:CA:1A:79:E0:79:B5:E3
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f4:18:ec:6d:bf:84:aa:54:29:9e:eb:05:54:f1:28:fe:03:
ae:0d:60:d9:5c:bd:1c:37:25:17:18:c4:aa:6e:be:63:79:9b:
e6:74:31:5e:96:db:90:5a:41:67:07:79:b9:50:69:91:2f:93:
b0:58:20:5d:2e:0a:26:6f:a9:06:a8:b2:3c:f7:10:16:3c:65:
6e:6d:1f:b6:5c:d0:60:a0:6c:d1:ff:ea:76:41:5a:7b:e2:cc:
22:49:e8:59:97:1a:64:b4:15:7e:b8:66:b2:6a:0d:5e:90:c4:
e0:ae:67:7d:6d:ad:b9:b8:41:1a:6d:1f:24:9a:8e:9f:51:f1:
e9:bf:a7:b2:1b:15:72:f8:7b:55:e0:f0:90:71:a8:f4:ef:5c:
53:01:dc:89:a1:82:bf:29:22:60:22:8d:1a:43:ec:a9:5b:21:
c4:f5:24:1c:9f:19:e3:68:d7:55:ba:9a:98:12:68:62:9c:72:
c3:d3:8b:6c:2f:6e:43:d0:3d:aa:d1:20:d8:43:6e:9d:21:59:
10:d8:92:5c:46:c4:66:59:98:6a:92:21:01:c8:8b:7a:69:59:
7f:6e:26:58:9a:54:65:c7:16:97:63:9a:bb:35:61:be:1c:43:
b5:52:38:af:12:12:78:c0:ff:1a:6c:1b:0c:2b:0c:a1:49:0a:
15:b7:19:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKLkOpRFUb5TE+UPObKF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MGUyMGNjZmIyZDU4OThjMjE2MjkwMGQxNDY4MDcwYTcw
MjQ5NTYwHhcNMjYwOTI1MjAwMTM2WhcNMjYwOTI2MjAwMTM2WjAzMTEwLwYDVQQD
EygxNDZiNGVkZDE0MjU4NzY4MDA0MmZjOTkyYWNhMWE3OWUwNzliNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl36xFSXL10MDQN6jd0i9lWGw4TX
+RK+N7OTad2X06+F8ldQqRsYFLccix3ykpWFztH9QtPBUmtOeiTP+4EoOAlTJjUd
cch70UWSPTBKsfoUtaVyitJD8dCWnO7dLcaNqix6qHgD+nm3V/Yi8rky4kW+3tbH
0in8eDmVKYmD6gBaWeeXVloLfpM/Rk5NHYmuZukt/RAV9+BTmIj88A4z0hf56oks
HdNDrPMuqPTl/mNUUStmkpVhEw0rNQa3nmnAQGjLqfFH27IiQoXKOreuHu05X3HT
E+WO1paSciBVyLujadFSr4BLDbQ+pA2d296B2K6No7r+ofbwbSVsorhhuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRrTt0UJYdoAEL8mSrKGnngebXjMB8GA1UdIwQY
MBaAFGgOIMz7LViYwhYpANFGgHCnAklWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmIt
MDM1NDFkMjMxNTc0LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmItMDM1NDFkMjMxNTc0
LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfQY7G2/
hKpUKZ7rBVTxKP4Drg1g2Vy9HDclFxjEqm6+Y3mb5nQxXpbbkFpBZwd5uVBpkS+T
sFggXS4KJm+pBqiyPPcQFjxlbm0ftlzQYKBs0f/qdkFae+LMIknoWZcaZLQVfrhm
smoNXpDE4K5nfW2tubhBGm0fJJqOn1Hx6b+nshsVcvh7VeDwkHGo9O9cUwHciaGC
vykiYCKNGkPsqVshxPUkHJ8Z42jXVbqamBJoYpxyw9OLbC9uQ9A9qtEg2ENunSFZ
ENiSXEbEZlmYapIhAciLemlZf24mWJpUZccWl2OauzVhvhxDtVI4rxISeMD/Gmwb
DCsMoUkKFbcZwQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:03:16 2026 by rpki-client