Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: EdP/WkjPgYzrnSKWxnsu4FhzzAlap4Yjg2DQU7Z+8E8=
Subject key identifier: 8D:9B:B1:32:F9:B9:50:8E:E8:86:FA:DC:22:3E:0E:0F:EB:07:02:FF
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 019E1F10FFDF6E2819D6547B76321253C55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 0CFF
Signing time: Wed 13 May 2026 02:01:08 +0000
Manifest this update: Wed 13 May 2026 02:01:08 +0000
Manifest next update: Thu 14 May 2026 02:01:08 +0000
Files and hashes: 1: MPB9CkoghVUPFrXOQKAmKQU_wx8.roa (hash: SBYmHn0Lh08hIxRKwJZvwv+ggtONWPJMq80oRcsft2g=)
2: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: iOs05baghJ9wlo+3c6l68VCZRZ0frcK11wvWLiaDzhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:ff:df:6e:28:19:d6:54:7b:76:32:12:53:c5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: May 13 02:01:08 2026 GMT
Not After : May 14 02:01:08 2026 GMT
Subject: CN=8d9bb132f9b9508ee886fadc223e0e0feb0702ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:87:e2:dd:b3:e1:f3:cb:22:ed:77:4a:4c:
af:f7:84:44:1d:cb:d2:ca:89:66:6f:3a:bf:fa:b4:
70:6a:d5:c9:8c:1c:13:71:0c:56:5b:f2:95:60:4d:
f4:1d:4b:78:1d:82:0c:42:a0:f8:fa:52:56:24:95:
67:73:df:c5:14:04:00:33:89:41:b8:1d:b2:65:17:
6e:5e:f3:23:8c:d6:cc:9a:5e:1b:f5:ab:dc:bf:9b:
d9:15:4a:2a:fc:63:07:4a:b1:68:82:23:ac:46:20:
45:f8:90:2b:99:6e:9a:f9:44:10:ff:45:3d:43:fc:
90:d7:19:a1:a3:d2:be:82:af:4c:fb:f6:02:30:bb:
7a:d9:e9:2b:42:0f:59:2e:53:97:70:6b:c2:c8:07:
7b:a2:9b:a3:8e:8d:51:35:15:df:8c:25:bc:cc:5b:
95:8e:7a:ce:67:68:a8:0d:82:c2:40:be:29:8b:56:
73:6c:91:7b:29:d7:92:ec:48:9c:80:77:62:90:50:
38:da:39:71:a0:b4:c4:c0:83:f2:40:f7:85:24:59:
cf:1e:7b:9e:bb:23:1b:57:d1:77:ad:79:65:7e:fa:
6b:31:01:3d:0b:55:db:a8:d0:56:4d:46:03:32:b7:
9d:65:5a:3e:34:04:98:1c:31:d6:a7:7d:e0:9b:08:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9B:B1:32:F9:B9:50:8E:E8:86:FA:DC:22:3E:0E:0F:EB:07:02:FF
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:58:41:ac:f7:d1:06:07:7f:e5:0c:4e:24:59:f0:19:bc:62:
42:0e:73:83:e5:24:72:7e:fe:b2:ef:e6:a1:15:c2:3f:59:74:
42:d5:08:9e:25:09:d2:6e:d6:2e:0d:d2:ac:00:d9:f5:cc:ff:
88:f1:9a:08:d5:fd:22:23:56:bb:36:57:4c:e8:98:66:78:df:
49:38:24:72:0c:a1:9e:10:3a:86:a0:5d:59:21:d3:a9:29:55:
8f:bf:e4:89:98:c8:54:14:5d:79:75:d2:24:94:03:fa:24:44:
78:97:07:f8:f0:96:73:6e:3c:05:f5:b5:cf:2d:41:cb:47:6c:
47:14:b4:53:e7:aa:28:88:b8:a0:3a:79:78:71:8f:53:c9:60:
2f:61:7d:7a:ad:42:ce:e5:30:54:3a:7b:de:b6:45:48:87:a3:
3f:99:a1:9a:da:af:3a:a1:07:37:b3:e6:1b:91:01:15:50:85:
16:8a:f6:fe:c0:1f:6c:71:42:95:b3:45:38:bd:c4:c4:c5:67:
f1:36:1e:65:9f:82:68:a4:3e:98:41:17:48:36:c4:49:51:cd:
49:90:d9:cd:e8:0f:f7:52:2c:a9:27:59:f7:37:3f:37:67:31:
34:3b:1c:4a:33:2c:49:a9:15:61:e4:2a:f5:8c:f3:9b:a7:e1:
c2:7f:80:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEP/fbigZ1lR7djISU8VcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MGUyMGNjZmIyZDU4OThjMjE2MjkwMGQxNDY4MDcwYTcw
MjQ5NTYwHhcNMjYwNTEzMDIwMTA4WhcNMjYwNTE0MDIwMTA4WjAzMTEwLwYDVQQD
Eyg4ZDliYjEzMmY5Yjk1MDhlZTg4NmZhZGMyMjNlMGUwZmViMDcwMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnmH4t2z4fPLIu13Skyv94REHcvS
yolmbzq/+rRwatXJjBwTcQxWW/KVYE30HUt4HYIMQqD4+lJWJJVnc9/FFAQAM4lB
uB2yZRduXvMjjNbMml4b9avcv5vZFUoq/GMHSrFogiOsRiBF+JArmW6a+UQQ/0U9
Q/yQ1xmho9K+gq9M+/YCMLt62ekrQg9ZLlOXcGvCyAd7opujjo1RNRXfjCW8zFuV
jnrOZ2ioDYLCQL4pi1ZzbJF7KdeS7EicgHdikFA42jlxoLTEwIPyQPeFJFnPHnue
uyMbV9F3rXllfvprMQE9C1XbqNBWTUYDMredZVo+NASYHDHWp33gmwjkHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2bsTL5uVCO6Ib63CI+Dg/rBwL/MB8GA1UdIwQY
MBaAFGgOIMz7LViYwhYpANFGgHCnAklWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmIt
MDM1NDFkMjMxNTc0LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmItMDM1NDFkMjMxNTc0
LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1hBrPfR
Bgd/5QxOJFnwGbxiQg5zg+Ukcn7+su/moRXCP1l0QtUIniUJ0m7WLg3SrADZ9cz/
iPGaCNX9IiNWuzZXTOiYZnjfSTgkcgyhnhA6hqBdWSHTqSlVj7/kiZjIVBRdeXXS
JJQD+iREeJcH+PCWc248BfW1zy1By0dsRxS0U+eqKIi4oDp5eHGPU8lgL2F9eq1C
zuUwVDp73rZFSIejP5mhmtqvOqEHN7PmG5EBFVCFFor2/sAfbHFClbNFOL3ExMVn
8TYeZZ+CaKQ+mEEXSDbESVHNSZDZzegP91IsqSdZ9zc/N2cxNDscSjMsSakVYeQq
9Yzzm6fhwn+AiA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:18:22 2026 by rpki-client