Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: Aso+6j2/8kxL7J/L+cNUBAUC+z8YknAiwBgzcsq8Hw8=
Subject key identifier: 2A:60:7F:01:47:7F:8C:6F:85:FC:82:AE:35:E8:0B:25:D8:12:2A:0A
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 01A0DD97002CB3C12803BFB1CCA5B00F78B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 0A1E
Signing time: Sat 26 Sep 2026 12:00:55 +0000
Manifest this update: Sat 26 Sep 2026 12:00:55 +0000
Manifest next update: Sun 27 Sep 2026 12:00:55 +0000
Files and hashes: 1: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (hash: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: NL16J3Kh1IW6d7GU7j37IAp2lDGGL03XtLNB32X289U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:00:2c:b3:c1:28:03:bf:b1:cc:a5:b0:0f:78:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Sep 26 12:00:55 2026 GMT
Not After : Sep 27 12:00:55 2026 GMT
Subject: CN=2a607f01477f8c6f85fc82ae35e80b25d8122a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:97:68:2d:85:9b:99:74:2e:d3:16:64:06:
9f:b6:6e:aa:73:5a:bd:1d:06:3e:1b:3a:6b:2e:e6:
e2:65:4b:01:d7:9e:5b:b2:60:2e:36:90:60:f5:c0:
c2:4c:e7:2d:90:8f:c0:83:a3:c3:98:34:9a:3c:32:
83:a8:e6:cc:3e:d8:00:52:30:fd:99:e0:19:8d:8d:
0d:5f:dd:d1:02:dd:9a:a6:0c:fb:dc:f3:14:c1:b1:
dd:09:b0:8e:92:7f:f2:4b:7e:18:59:d6:a4:df:da:
ac:27:d3:90:4a:c8:4e:7c:54:cf:38:f2:fb:6b:5a:
50:b3:99:88:4c:b6:d5:78:73:9b:09:62:6e:b2:b9:
fd:e0:e3:82:55:eb:e9:90:ea:54:a4:4c:64:a0:8d:
2f:d4:a7:6a:4e:23:9f:7d:d5:04:f5:6c:1d:1d:42:
59:32:9f:82:64:9b:1e:2d:01:4d:62:c3:d4:ae:65:
74:ab:78:e0:fb:a2:7a:86:0e:b0:fe:d1:0d:af:dc:
d0:c0:fa:b8:0b:d5:77:9f:3b:70:d9:87:57:1d:a9:
0d:8b:a5:34:71:3d:ef:3d:77:ee:37:08:68:44:e1:
df:8e:15:87:75:a8:5b:27:ab:4d:4f:e7:fe:91:95:
17:ba:ee:e4:1f:77:28:bd:81:b1:6c:00:4f:41:2b:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:60:7F:01:47:7F:8C:6F:85:FC:82:AE:35:E8:0B:25:D8:12:2A:0A
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e1:04:95:13:d5:ea:7b:58:78:80:3f:35:00:61:08:34:b8:
7c:ce:aa:a6:da:14:69:b1:c7:50:d9:11:e2:65:f6:86:7f:36:
a0:68:e8:4b:29:25:ad:62:78:c7:b3:90:a7:0d:6e:c5:d3:5f:
9e:28:34:cf:e6:2d:18:82:4c:ee:50:ec:ca:1e:7e:e7:84:4b:
00:74:ad:6b:a9:61:c6:1c:1f:0e:32:4c:f9:a8:19:4e:64:d8:
72:de:2d:b3:a7:34:fb:6c:c5:95:0b:67:c4:2a:ee:31:f6:fa:
6a:aa:2f:5e:a3:11:fa:13:44:2d:a6:32:58:77:aa:c1:fa:a5:
16:23:94:30:37:d9:6d:f1:53:9c:bf:b4:05:21:c2:12:45:68:
84:6e:4f:dc:50:1b:9b:5a:49:4a:15:27:c9:c6:2a:69:ea:03:
16:63:f7:eb:17:37:b2:d4:46:07:bf:c2:ed:5e:35:50:bd:cb:
83:8d:db:07:38:e7:da:5c:d7:a4:91:62:77:c6:39:ca:d7:75:
5f:8d:aa:3c:06:78:df:30:20:ee:39:48:4b:5e:a5:7d:55:db:
4b:34:fc:19:9b:fa:92:b8:74:d8:f1:58:77:d8:cf:0b:60:7f:
ec:33:25:00:39:7f:c5:fb:ab:ca:62:9f:ab:1c:26:55:e2:d6:
21:ac:92:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdlwAss8EoA7+xzKWwD3i4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2IxMjA0NWIxYWYwOWFjZjk2NjJlZTM1YmEyY2Q3ZTFj
ODViYWQwHhcNMjYwOTI2MTIwMDU1WhcNMjYwOTI3MTIwMDU1WjAzMTEwLwYDVQQD
EygyYTYwN2YwMTQ3N2Y4YzZmODVmYzgyYWUzNWU4MGIyNWQ4MTIyYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/6XaC2Fm5l0LtMWZAaftm6qc1q9
HQY+GzprLubiZUsB155bsmAuNpBg9cDCTOctkI/Ag6PDmDSaPDKDqObMPtgAUjD9
meAZjY0NX93RAt2apgz73PMUwbHdCbCOkn/yS34YWdak39qsJ9OQSshOfFTPOPL7
a1pQs5mITLbVeHObCWJusrn94OOCVevpkOpUpExkoI0v1KdqTiOffdUE9WwdHUJZ
Mp+CZJseLQFNYsPUrmV0q3jg+6J6hg6w/tENr9zQwPq4C9V3nztw2YdXHakNi6U0
cT3vPXfuNwhoROHfjhWHdahbJ6tNT+f+kZUXuu7kH3covYGxbABPQSue/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpgfwFHf4xvhfyCrjXoCyXYEioKMB8GA1UdIwQY
MBaAFGt7EgRbGvCaz5Zi7jW6LNfhyFutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84NjhhOWMtZmUyNS00YjU5LWEzMjkt
MTg0MDFkYTQzNTYzLzEvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84NjhhOWMtZmUyNS00YjU5LWEzMjktMTg0MDFkYTQzNTYz
LzEvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOEElRPV
6ntYeIA/NQBhCDS4fM6qptoUabHHUNkR4mX2hn82oGjoSyklrWJ4x7OQpw1uxdNf
nig0z+YtGIJM7lDsyh5+54RLAHSta6lhxhwfDjJM+agZTmTYct4ts6c0+2zFlQtn
xCruMfb6aqovXqMR+hNELaYyWHeqwfqlFiOUMDfZbfFTnL+0BSHCEkVohG5P3FAb
m1pJShUnycYqaeoDFmP36xc3stRGB7/C7V41UL3Lg43bBzjn2lzXpJFid8Y5ytd1
X42qPAZ43zAg7jlIS16lfVXbSzT8GZv6krh02PFYd9jPC2B/7DMlADl/xfurymKf
qxwmVeLWIayS+Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:52:15 2026 by rpki-client