Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: fdIsN7hGOaNopY+7stbA/sLhGN1fcO9Z2gNIURte+zQ=
Subject key identifier: 5D:C3:15:0B:E5:9A:38:8C:B9:EC:8F:0E:11:DF:13:DE:8B:75:96:78
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 01A0D5A6BFACF2312FD3D4D9A74CA6B5D584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 1969
Signing time: Thu 24 Sep 2026 23:01:10 +0000
Manifest this update: Thu 24 Sep 2026 23:01:10 +0000
Manifest next update: Fri 25 Sep 2026 23:01:10 +0000
Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=)
2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: fLMw74taXZPa06x6uRrMFm+GxvrkWojYBmwXpy08aes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:bf:ac:f2:31:2f:d3:d4:d9:a7:4c:a6:b5:d5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Sep 24 23:01:10 2026 GMT
Not After : Sep 25 23:01:10 2026 GMT
Subject: CN=5dc3150be59a388cb9ec8f0e11df13de8b759678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:05:d1:fd:8a:c4:87:14:dd:cd:55:04:34:
13:1d:e4:51:35:c3:72:61:43:bc:2b:44:2d:9c:78:
65:c9:b7:ef:a1:e4:87:9b:41:b2:9c:5d:8b:08:fb:
c6:16:38:48:dc:43:1d:97:3e:0b:68:17:ed:2c:38:
d3:b2:74:2b:fa:13:d0:95:f1:81:77:05:7a:37:d4:
0e:a6:33:b8:fe:70:c9:20:7a:42:59:3c:aa:3c:e4:
ea:e0:1e:5f:57:23:4c:3b:95:13:d8:b6:17:71:6f:
3e:af:18:3b:89:4c:16:ea:0d:1f:15:fd:cf:b0:76:
5f:ff:e6:94:14:43:14:b6:4e:f6:3a:8f:08:8d:4e:
d1:bf:eb:b5:e4:28:42:dd:16:4b:86:35:f1:1c:91:
4b:a1:f1:10:7a:69:92:ab:49:97:d1:bd:45:2b:52:
45:0d:6b:8c:ce:e1:66:4b:e7:bc:8e:45:9c:2b:79:
65:95:9c:08:e4:f9:8f:41:dd:24:2f:08:be:85:46:
0c:c1:26:d8:33:87:ff:86:72:69:54:3d:b0:f8:99:
70:96:8e:1e:55:af:0a:da:c3:ed:24:37:3f:15:67:
8f:75:4d:3a:b7:5f:82:27:4b:1b:a6:d5:f2:f8:a3:
12:4e:2c:67:ca:ac:7f:a8:54:34:ee:19:95:7e:53:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C3:15:0B:E5:9A:38:8C:B9:EC:8F:0E:11:DF:13:DE:8B:75:96:78
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:79:89:9b:4f:2c:d3:06:f5:26:5e:5f:a5:63:2b:8c:06:9c:
bd:7a:34:a5:44:33:46:16:f6:97:7e:6e:b6:59:3a:b4:c4:11:
86:1d:23:b4:f8:05:ec:f7:af:af:11:e6:7b:75:32:7a:3f:a2:
b8:ca:53:8e:d5:3d:e1:82:0b:d8:df:f1:b1:fa:ca:42:35:24:
b6:f0:a8:8f:92:99:84:ad:8d:fc:65:e3:19:a4:96:d4:61:38:
93:4b:84:30:4b:b3:15:c6:d0:ff:c3:f6:bd:ca:f8:50:25:5b:
ac:f4:99:01:6e:c1:67:73:0b:46:fb:0d:b9:02:99:ae:46:71:
68:64:58:ca:b7:20:0b:d2:ad:34:f2:31:29:f5:0d:08:ec:bb:
87:e5:ae:ac:ce:44:3d:b5:6c:1c:5d:d8:64:2d:36:70:5f:bb:
65:70:ec:d2:86:81:70:62:02:8d:fb:4f:e5:0c:95:23:e6:52:
f8:8e:fc:a9:71:1e:e3:0e:88:e3:d4:58:5e:c0:30:6a:46:f9:
39:64:13:e7:94:61:09:0f:80:d7:ee:49:35:c0:72:c3:a6:fd:
d0:17:8e:83:57:b9:a8:86:5c:99:1a:f7:be:1a:e3:c0:5e:f0:
a5:cc:e7:92:a4:2a:2e:8f:e6:a0:90:5d:46:cc:88:16:5c:22:
03:2f:0c:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVpr+s8jEv09TZp0ymtdWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiY2JkYjZmZDM5ZTc2ZjAwNDg0MDEyZTEzMTQ2YjIxODc1
NWMzZmIwHhcNMjYwOTI0MjMwMTEwWhcNMjYwOTI1MjMwMTEwWjAzMTEwLwYDVQQD
Eyg1ZGMzMTUwYmU1OWEzODhjYjllYzhmMGUxMWRmMTNkZThiNzU5Njc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY4F0f2KxIcU3c1VBDQTHeRRNcNy
YUO8K0QtnHhlybfvoeSHm0GynF2LCPvGFjhI3EMdlz4LaBftLDjTsnQr+hPQlfGB
dwV6N9QOpjO4/nDJIHpCWTyqPOTq4B5fVyNMO5UT2LYXcW8+rxg7iUwW6g0fFf3P
sHZf/+aUFEMUtk72Oo8IjU7Rv+u15ChC3RZLhjXxHJFLofEQemmSq0mX0b1FK1JF
DWuMzuFmS+e8jkWcK3lllZwI5PmPQd0kLwi+hUYMwSbYM4f/hnJpVD2w+Jlwlo4e
Va8K2sPtJDc/FWePdU06t1+CJ0sbptXy+KMSTixnyqx/qFQ07hmVflMeYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3DFQvlmjiMueyPDhHfE96LdZZ4MB8GA1UdIwQY
MBaAFGvL22/TnnbwBIQBLhMUayGHVcP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTIt
YzlkYTAzMGFmMzI2LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTItYzlkYTAzMGFmMzI2
LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHmJm08s
0wb1Jl5fpWMrjAacvXo0pUQzRhb2l35utlk6tMQRhh0jtPgF7PevrxHme3Uyej+i
uMpTjtU94YIL2N/xsfrKQjUktvCoj5KZhK2N/GXjGaSW1GE4k0uEMEuzFcbQ/8P2
vcr4UCVbrPSZAW7BZ3MLRvsNuQKZrkZxaGRYyrcgC9KtNPIxKfUNCOy7h+WurM5E
PbVsHF3YZC02cF+7ZXDs0oaBcGICjftP5QyVI+ZS+I78qXEe4w6I49RYXsAwakb5
OWQT55RhCQ+A1+5JNcByw6b90BeOg1e5qIZcmRr3vhrjwF7wpcznkqQqLo/moJBd
RsyIFlwiAy8MaQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:36:38 2026 by rpki-client