Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.mft
File: acA7C-qHQIZh8Lc459C51ou9TkY.mft (raw, json)
Hash identifier: NLaLwRj/QCNz9gmbBs2uC2yKEKEpO9ccco40V67DjF8=
Subject key identifier: D0:A1:99:B7:3E:6C:EE:FE:DA:30:84:E7:20:B3:1A:6C:98:29:67:42
Authority key identifier: 69:C0:3B:0B:EA:87:40:86:61:F0:B7:38:E7:D0:B9:D6:8B:BD:4E:46
Certificate issuer: /CN=69c03b0bea87408661f0b738e7d0b9d68bbd4e46
Certificate serial: 01A0EE548121FA98053496681ADB42056CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acA7C-qHQIZh8Lc459C51ou9TkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.mft
Manifest number: CA
Signing time: Tue 29 Sep 2026 18:01:50 +0000
Manifest this update: Tue 29 Sep 2026 18:01:50 +0000
Manifest next update: Wed 30 Sep 2026 18:01:50 +0000
Files and hashes: 1: WP1pAPn1gT-3pBILANNDcC6Hht0.roa (hash: 4KjNR2kyaEteKZKlG9S1UesNiA2a4f31T3kLjP3m3Dg=)
2: acA7C-qHQIZh8Lc459C51ou9TkY.crl (hash: rH7fXLCuWw2RYsQ1OerTxbh2bR10S5tH7pmS5Soipno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/acA7C-qHQIZh8Lc459C51ou9TkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:54:81:21:fa:98:05:34:96:68:1a:db:42:05:6c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c03b0bea87408661f0b738e7d0b9d68bbd4e46
Validity
Not Before: Sep 29 18:01:50 2026 GMT
Not After : Sep 30 18:01:50 2026 GMT
Subject: CN=d0a199b73e6ceefeda3084e720b31a6c98296742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:db:18:14:a1:e1:fe:a7:20:3e:8b:9e:b3:11:
3c:76:8d:dd:02:ea:65:39:eb:96:87:e9:b0:f1:6c:
12:2e:10:f1:cd:b9:f1:26:9b:7b:8c:3e:5b:dc:9a:
aa:bb:34:d1:52:9e:89:d2:eb:93:67:7c:e1:3b:52:
23:e5:34:a3:50:c0:89:90:d2:44:fc:ab:28:23:1f:
22:92:fd:9d:03:d6:24:da:34:c4:46:7a:37:57:b6:
43:0d:e4:20:fb:e7:99:ef:f4:fa:03:c9:a4:d9:a9:
3e:47:fe:aa:97:f5:82:9e:a5:8d:07:df:22:57:89:
5b:a4:79:ca:1e:69:1b:0c:f3:6c:61:df:09:44:db:
60:61:db:c9:c6:c6:e4:56:28:b6:4a:d6:27:48:c6:
58:2f:17:25:0e:80:dc:e9:f7:bd:bc:2e:c7:b7:80:
d8:8a:7a:ba:da:5a:2f:65:9d:52:c3:12:79:8d:f4:
20:cd:21:3b:b2:34:e4:d2:2b:d6:f6:29:44:3e:9d:
2e:1c:d7:fb:87:3a:73:09:f0:64:c7:37:a3:91:02:
72:aa:bd:ab:de:33:c3:95:93:cd:09:78:d2:df:d8:
cc:79:b0:26:04:8a:73:df:4e:cb:7f:d9:ab:39:8f:
9a:5f:60:f1:41:0d:10:c8:6a:99:a9:43:3e:81:f8:
85:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A1:99:B7:3E:6C:EE:FE:DA:30:84:E7:20:B3:1A:6C:98:29:67:42
X509v3 Authority Key Identifier:
keyid:69:C0:3B:0B:EA:87:40:86:61:F0:B7:38:E7:D0:B9:D6:8B:BD:4E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acA7C-qHQIZh8Lc459C51ou9TkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f2:6e:90:49:75:8b:97:74:05:f7:aa:45:65:c6:8d:fd:9d:
d8:02:0c:d2:a4:0c:18:5a:7f:d6:e7:51:9d:02:eb:59:55:6a:
d2:a7:66:3d:c2:21:4d:1f:44:b8:b9:28:3e:4f:83:16:ed:31:
22:90:ad:50:e3:9f:c1:7e:c7:40:be:89:d6:73:ac:1c:92:6d:
64:71:a7:e7:e8:ff:9e:25:36:0d:49:e8:84:a2:61:ce:dc:94:
80:2f:6b:69:17:7d:26:bf:9a:6a:43:2c:99:e3:13:8f:19:bd:
45:7f:4f:aa:01:bb:3f:74:f0:68:7c:53:3f:a0:df:0e:08:96:
0d:b4:47:cd:69:62:cb:b0:bd:c9:0b:17:64:0e:58:ef:60:cd:
a0:c6:5e:b5:25:04:74:43:25:47:c5:34:4a:c0:c4:03:a5:49:
7c:a9:8a:a7:f2:4a:dc:58:2b:94:57:87:82:03:eb:fc:ff:f4:
06:52:54:ab:59:ce:42:c5:71:a4:34:7d:bb:ed:05:d4:0c:54:
07:75:b1:ce:65:73:fe:25:e2:45:a2:00:bc:bc:56:c8:2a:84:
c7:db:63:87:39:2f:b5:1c:3d:ab:73:66:2f:12:60:47:09:fd:
a9:9e:78:70:9b:16:ad:41:d3:4f:98:0d:dc:0e:96:86:79:83:
09:bf:8e:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDuVIEh+pgFNJZoGttCBWy6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YzAzYjBiZWE4NzQwODY2MWYwYjczOGU3ZDBiOWQ2OGJi
ZDRlNDYwHhcNMjYwOTI5MTgwMTUwWhcNMjYwOTMwMTgwMTUwWjAzMTEwLwYDVQQD
EyhkMGExOTliNzNlNmNlZWZlZGEzMDg0ZTcyMGIzMWE2Yzk4Mjk2NzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9sYFKHh/qcgPouesxE8do3dAupl
OeuWh+mw8WwSLhDxzbnxJpt7jD5b3JqquzTRUp6J0uuTZ3zhO1Ij5TSjUMCJkNJE
/KsoIx8ikv2dA9Yk2jTERno3V7ZDDeQg++eZ7/T6A8mk2ak+R/6ql/WCnqWNB98i
V4lbpHnKHmkbDPNsYd8JRNtgYdvJxsbkVii2StYnSMZYLxclDoDc6fe9vC7Ht4DY
inq62lovZZ1SwxJ5jfQgzSE7sjTk0ivW9ilEPp0uHNf7hzpzCfBkxzejkQJyqr2r
3jPDlZPNCXjS39jMebAmBIpz307Lf9mrOY+aX2DxQQ0QyGqZqUM+gfiFYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNChmbc+bO7+2jCE5yCzGmyYKWdCMB8GA1UdIwQY
MBaAFGnAOwvqh0CGYfC3OOfQudaLvU5GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNBN0MtcUhRSVpoOExjNDU5QzUxb3U5VGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kODk3YWItYWQxNy00OTk3LTk0OTAt
NDE3OTNkZTdjNDkxLzEvYWNBN0MtcUhRSVpoOExjNDU5QzUxb3U5VGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kODk3YWItYWQxNy00OTk3LTk0OTAtNDE3OTNkZTdjNDkx
LzEvYWNBN0MtcUhRSVpoOExjNDU5QzUxb3U5VGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPJukEl1
i5d0BfeqRWXGjf2d2AIM0qQMGFp/1udRnQLrWVVq0qdmPcIhTR9EuLkoPk+DFu0x
IpCtUOOfwX7HQL6J1nOsHJJtZHGn5+j/niU2DUnohKJhztyUgC9raRd9Jr+aakMs
meMTjxm9RX9PqgG7P3TwaHxTP6DfDgiWDbRHzWliy7C9yQsXZA5Y72DNoMZetSUE
dEMlR8U0SsDEA6VJfKmKp/JK3FgrlFeHggPr/P/0BlJUq1nOQsVxpDR9u+0F1AxU
B3WxzmVz/iXiRaIAvLxWyCqEx9tjhzkvtRw9q3NmLxJgRwn9qZ54cJsWrUHTT5gN
3A6WhnmDCb+Ojg==
-----END CERTIFICATE-----
Generated at Wed Sep 30 03:44:46 2026 by rpki-client