Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
File: aCMaUAoKgQjcekNYsQArH9vweZU.mft (raw, json)
Hash identifier: sv7uhrsjFdwwNySJmPY7D3RyfWVMDNiovCr0rbRYHnk=
Subject key identifier: 2F:20:55:90:99:0E:01:33:65:BB:12:71:02:47:C2:BB:76:03:86:1E
Authority key identifier: 68:23:1A:50:0A:0A:81:08:DC:7A:43:58:B1:00:2B:1F:DB:F0:79:95
Certificate issuer: /CN=68231a500a0a8108dc7a4358b1002b1fdbf07995
Certificate serial: 01A1317D53FCFA983E44C2633D99802668B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
Manifest number: 1A9F
Signing time: Mon 12 Oct 2026 19:00:59 +0000
Manifest this update: Mon 12 Oct 2026 19:00:59 +0000
Manifest next update: Tue 13 Oct 2026 19:00:59 +0000
Files and hashes: 1: aCMaUAoKgQjcekNYsQArH9vweZU.crl (hash: bY08j1rvFV2ynPf4xFs3hqfBS/UAX3hZdgVlSxIgCTs=)
2: hnuU_eck5x_jb8etQeMJYN7agCw.roa (hash: WjEdC6KQw2C4VlNncqPImg4Zkitm7oOt+PVE/RuPsE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:7d:53:fc:fa:98:3e:44:c2:63:3d:99:80:26:68:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68231a500a0a8108dc7a4358b1002b1fdbf07995
Validity
Not Before: Oct 12 19:00:59 2026 GMT
Not After : Oct 13 19:00:59 2026 GMT
Subject: CN=2f205590990e013365bb12710247c2bb7603861e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:cc:4c:b1:b4:86:87:ac:d6:57:1d:78:8b:
8b:a2:ab:7b:54:f2:d0:e7:26:69:00:84:6e:63:2d:
46:a0:3a:10:81:93:60:62:c7:60:84:8b:bd:88:57:
9b:72:36:8e:4b:8d:a4:12:dd:a9:ae:8a:35:72:4e:
77:5f:3d:a3:2a:d7:19:0e:62:e9:2e:4a:bf:32:89:
47:6f:f2:5c:28:89:20:2c:7e:a7:32:93:09:62:7b:
8c:02:85:df:34:4e:29:c6:f7:d6:5d:46:21:96:51:
22:0f:77:95:ae:95:eb:3d:88:9c:91:a3:a8:e0:ff:
a0:7d:b9:08:dc:68:8d:f8:41:22:6e:c8:4c:e5:64:
9c:8d:fc:bc:4f:31:df:52:14:ec:12:b2:f9:5f:c5:
2b:81:c1:af:47:d9:30:00:10:0a:f8:6e:ea:a4:9f:
a0:06:5a:4c:6c:01:92:d5:07:e2:bc:9b:5e:7b:c7:
14:32:34:9e:99:de:51:7d:cc:df:a7:31:7a:ce:af:
c1:6a:85:e0:08:e0:1b:d7:09:2b:55:b0:87:f9:46:
04:4e:f5:59:d2:0d:b4:b6:3f:a8:c2:b1:13:bc:44:
f6:2c:a7:91:f8:9e:63:8c:cb:b0:9b:0b:d4:b4:14:
31:66:7e:dd:02:b5:c6:05:fd:bd:66:ec:cb:18:28:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:20:55:90:99:0E:01:33:65:BB:12:71:02:47:C2:BB:76:03:86:1E
X509v3 Authority Key Identifier:
keyid:68:23:1A:50:0A:0A:81:08:DC:7A:43:58:B1:00:2B:1F:DB:F0:79:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7e:a0:d7:db:0c:b5:a6:e6:54:26:22:0d:00:40:a9:52:13:
79:54:0a:61:4a:8c:f7:fe:43:41:a3:b6:4b:18:9b:22:e6:48:
5f:5f:f7:88:87:98:bb:cb:76:97:82:14:f2:30:ac:1d:18:94:
49:9b:6e:a6:af:a2:03:e0:51:36:e3:9d:79:70:88:e7:d9:57:
07:46:54:f3:03:94:9f:d9:03:a2:e4:9c:e1:6c:5c:b9:1b:a4:
f3:a4:ea:1a:cb:4d:10:8d:ed:cb:01:91:e2:7d:db:c9:48:06:
11:d1:a4:f1:0e:d0:56:ca:fc:14:ea:9e:d4:1a:b3:79:ee:1d:
2d:19:c6:b5:e4:c8:88:d9:25:c3:c4:da:71:85:ec:43:32:9a:
bf:33:54:3c:a6:12:3d:3f:7e:e1:51:dd:24:db:35:98:7b:e7:
39:85:f8:2d:aa:75:11:c3:ca:28:27:c6:4a:89:4d:20:68:e6:
45:8f:84:44:87:90:63:c5:5d:cf:f5:c1:a9:40:62:69:95:65:
d5:4e:4d:36:eb:a3:86:1d:8b:c8:ab:f3:3c:bf:ac:fd:d1:66:
f2:82:05:b3:2c:7a:9f:e4:cb:c6:68:e0:db:1b:3b:a6:3a:cb:
82:92:84:3f:1b:aa:8b:90:4d:05:7b:8e:0e:cb:9c:ab:fa:7a:
ba:75:3c:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaExfVP8+pg+RMJjPZmAJmi5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MjMxYTUwMGEwYTgxMDhkYzdhNDM1OGIxMDAyYjFmZGJm
MDc5OTUwHhcNMjYxMDEyMTkwMDU5WhcNMjYxMDEzMTkwMDU5WjAzMTEwLwYDVQQD
EygyZjIwNTU5MDk5MGUwMTMzNjViYjEyNzEwMjQ3YzJiYjc2MDM4NjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH3MTLG0hoes1lcdeIuLoqt7VPLQ
5yZpAIRuYy1GoDoQgZNgYsdghIu9iFebcjaOS42kEt2proo1ck53Xz2jKtcZDmLp
Lkq/MolHb/JcKIkgLH6nMpMJYnuMAoXfNE4pxvfWXUYhllEiD3eVrpXrPYickaOo
4P+gfbkI3GiN+EEibshM5WScjfy8TzHfUhTsErL5X8UrgcGvR9kwABAK+G7qpJ+g
BlpMbAGS1QfivJtee8cUMjSemd5RfczfpzF6zq/BaoXgCOAb1wkrVbCH+UYETvVZ
0g20tj+owrETvET2LKeR+J5jjMuwmwvUtBQxZn7dArXGBf29ZuzLGCjBhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8gVZCZDgEzZbsScQJHwrt2A4YeMB8GA1UdIwQY
MBaAFGgjGlAKCoEI3HpDWLEAKx/b8HmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUNNYVVBb0tnUWpjZWtOWXNRQXJIOXZ3ZVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wMGIwODUtOTk2Ni00Mjc1LWE1MmIt
N2YyM2IzNDY4NmMyLzEvYUNNYVVBb0tnUWpjZWtOWXNRQXJIOXZ3ZVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8wMGIwODUtOTk2Ni00Mjc1LWE1MmItN2YyM2IzNDY4NmMy
LzEvYUNNYVVBb0tnUWpjZWtOWXNRQXJIOXZ3ZVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB36g19sM
tabmVCYiDQBAqVITeVQKYUqM9/5DQaO2SxibIuZIX1/3iIeYu8t2l4IU8jCsHRiU
SZtupq+iA+BRNuOdeXCI59lXB0ZU8wOUn9kDouSc4WxcuRuk86TqGstNEI3tywGR
4n3byUgGEdGk8Q7QVsr8FOqe1Bqzee4dLRnGteTIiNklw8TacYXsQzKavzNUPKYS
PT9+4VHdJNs1mHvnOYX4Lap1EcPKKCfGSolNIGjmRY+ERIeQY8Vdz/XBqUBiaZVl
1U5NNuujhh2LyKvzPL+s/dFm8oIFsyx6n+TLxmjg2xs7pjrLgpKEPxuqi5BNBXuO
Dsucq/p6unU8Gg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 00:52:30 2026 by rpki-client