Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
File: aCMaUAoKgQjcekNYsQArH9vweZU.mft (raw, json)
Hash identifier: jblRCcYJwY4r/4epLPbEZz4i7PeytnD+8u0bX9o6AEU=
Subject key identifier: F6:F5:38:23:FC:61:3B:25:1A:2F:E5:E3:0F:DB:45:06:1F:BF:3B:0F
Authority key identifier: 68:23:1A:50:0A:0A:81:08:DC:7A:43:58:B1:00:2B:1F:DB:F0:79:95
Certificate issuer: /CN=68231a500a0a8108dc7a4358b1002b1fdbf07995
Certificate serial: 01A12F8EF283FB6E71B4D8DE178357CB1524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
Manifest number: 1A9E
Signing time: Mon 12 Oct 2026 10:00:59 +0000
Manifest this update: Mon 12 Oct 2026 10:00:59 +0000
Manifest next update: Tue 13 Oct 2026 10:00:59 +0000
Files and hashes: 1: aCMaUAoKgQjcekNYsQArH9vweZU.crl (hash: U0eFa+x8/weB+GalywRA6N61KapSe4tTXTVHCqD7owM=)
2: hnuU_eck5x_jb8etQeMJYN7agCw.roa (hash: WjEdC6KQw2C4VlNncqPImg4Zkitm7oOt+PVE/RuPsE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8e:f2:83:fb:6e:71:b4:d8:de:17:83:57:cb:15:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68231a500a0a8108dc7a4358b1002b1fdbf07995
Validity
Not Before: Oct 12 10:00:59 2026 GMT
Not After : Oct 13 10:00:59 2026 GMT
Subject: CN=f6f53823fc613b251a2fe5e30fdb45061fbf3b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6d:6f:29:1b:e0:e8:b6:f1:f4:dc:e7:6f:63:
ad:6b:e7:5b:da:c6:34:d3:9d:92:ca:76:3c:15:b4:
8a:9d:4b:9f:97:19:30:2b:aa:ad:5d:68:1a:1d:39:
b4:ae:c1:1d:51:3a:4b:b9:7e:36:8e:57:ef:41:3a:
b3:76:2a:86:38:f6:81:33:0c:3b:4c:40:a0:73:ee:
b1:b5:34:b3:fb:e5:46:d5:1f:68:fa:05:5c:d0:3c:
be:32:c7:91:9c:08:cd:58:0d:08:8e:2b:5c:f9:2c:
00:71:e6:1e:f2:43:10:1d:dc:6c:79:b1:c3:39:b2:
ff:be:5f:28:54:15:9e:3c:b6:13:77:e7:99:23:1d:
1d:77:b2:e4:66:bc:96:6f:40:ee:bc:ea:e1:7a:c9:
e0:a3:23:e6:4f:03:fb:4c:dc:bd:f3:62:d4:46:e8:
2b:c5:ef:c9:3c:4e:25:63:38:cb:1c:e5:a8:87:9f:
be:74:f7:40:19:b1:fe:8d:8c:02:a2:e0:85:17:de:
91:8b:d6:5f:5b:72:18:b6:43:0c:85:67:7a:27:f9:
94:f7:3f:c1:b7:f6:7c:2e:7f:32:67:0a:88:59:c4:
7d:bf:39:59:ec:33:86:5f:ba:52:72:80:7d:ef:c3:
61:70:50:0b:6f:e5:58:e2:de:bf:a5:03:c0:28:d5:
9d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F5:38:23:FC:61:3B:25:1A:2F:E5:E3:0F:DB:45:06:1F:BF:3B:0F
X509v3 Authority Key Identifier:
keyid:68:23:1A:50:0A:0A:81:08:DC:7A:43:58:B1:00:2B:1F:DB:F0:79:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c7:25:27:0e:c2:6e:28:e9:5b:d2:a0:d9:89:94:53:49:bc:
f8:6b:5a:c8:99:9e:93:a3:6b:d0:ee:cd:1c:b2:cb:b5:e1:57:
0d:ec:42:81:83:1b:82:0b:57:93:89:9f:a5:29:8d:12:1f:9e:
c5:d0:1e:17:ff:5e:64:94:bd:1a:09:eb:b4:06:57:a5:e6:35:
d8:b3:98:6f:99:f9:d3:9c:19:56:2a:4e:21:5e:9d:e1:c4:6c:
30:18:02:c3:bb:ad:81:15:7b:57:c2:30:a5:b9:e6:30:dd:1f:
25:41:82:61:ba:34:b5:65:9c:fc:c8:af:a2:d1:f3:d3:e2:b4:
71:54:dc:8d:14:38:09:94:53:8f:1c:6d:ef:a0:86:2c:f8:21:
64:88:a5:43:4b:83:55:ed:d2:1c:43:36:93:1c:21:63:1a:87:
28:53:8d:0a:6f:91:ee:87:a4:99:01:1c:37:6f:f8:06:40:34:
71:0d:3f:81:bf:d6:83:f2:f4:2a:2c:b7:6d:97:15:0f:9f:62:
02:50:24:bb:4b:77:6f:dd:8b:31:44:86:ab:4f:5e:ad:df:fb:
bc:91:88:a3:5c:03:73:75:ec:58:86:43:86:ba:12:bf:15:b1:
c4:40:1c:13:4d:e7:a2:b4:86:df:cc:be:6a:85:84:1a:37:eb:
8d:a4:4c:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEvjvKD+25xtNjeF4NXyxUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MjMxYTUwMGEwYTgxMDhkYzdhNDM1OGIxMDAyYjFmZGJm
MDc5OTUwHhcNMjYxMDEyMTAwMDU5WhcNMjYxMDEzMTAwMDU5WjAzMTEwLwYDVQQD
EyhmNmY1MzgyM2ZjNjEzYjI1MWEyZmU1ZTMwZmRiNDUwNjFmYmYzYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m1vKRvg6Lbx9Nznb2Ota+db2sY0
052SynY8FbSKnUuflxkwK6qtXWgaHTm0rsEdUTpLuX42jlfvQTqzdiqGOPaBMww7
TECgc+6xtTSz++VG1R9o+gVc0Dy+MseRnAjNWA0Ijitc+SwAceYe8kMQHdxsebHD
ObL/vl8oVBWePLYTd+eZIx0dd7LkZryWb0DuvOrhesngoyPmTwP7TNy982LURugr
xe/JPE4lYzjLHOWoh5++dPdAGbH+jYwCouCFF96Ri9ZfW3IYtkMMhWd6J/mU9z/B
t/Z8Ln8yZwqIWcR9vzlZ7DOGX7pScoB978NhcFALb+VY4t6/pQPAKNWdgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPb1OCP8YTslGi/l4w/bRQYfvzsPMB8GA1UdIwQY
MBaAFGgjGlAKCoEI3HpDWLEAKx/b8HmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUNNYVVBb0tnUWpjZWtOWXNRQXJIOXZ3ZVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wMGIwODUtOTk2Ni00Mjc1LWE1MmIt
N2YyM2IzNDY4NmMyLzEvYUNNYVVBb0tnUWpjZWtOWXNRQXJIOXZ3ZVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8wMGIwODUtOTk2Ni00Mjc1LWE1MmItN2YyM2IzNDY4NmMy
LzEvYUNNYVVBb0tnUWpjZWtOWXNRQXJIOXZ3ZVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8clJw7C
bijpW9Kg2YmUU0m8+GtayJmek6Nr0O7NHLLLteFXDexCgYMbggtXk4mfpSmNEh+e
xdAeF/9eZJS9GgnrtAZXpeY12LOYb5n505wZVipOIV6d4cRsMBgCw7utgRV7V8Iw
pbnmMN0fJUGCYbo0tWWc/MivotHz0+K0cVTcjRQ4CZRTjxxt76CGLPghZIilQ0uD
Ve3SHEM2kxwhYxqHKFONCm+R7oekmQEcN2/4BkA0cQ0/gb/Wg/L0Kiy3bZcVD59i
AlAku0t3b92LMUSGq09erd/7vJGIo1wDc3XsWIZDhroSvxWxxEAcE03norSG38y+
aoWEGjfrjaRMLg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 19:16:38 2026 by rpki-client