Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json)
Hash identifier: iJKKlESvJySNYh30QW01zbCaHG2Dijv3MnxYPOc/jAA=
Subject key identifier: C8:8B:A4:ED:8C:A7:59:40:6D:07:7B:92:0F:30:62:71:D2:E5:13:76
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial: 01A13DB8DFF673852FF434D4908DB49AD343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
Manifest number: 0E38
Signing time: Thu 15 Oct 2026 04:01:28 +0000
Manifest this update: Thu 15 Oct 2026 04:01:28 +0000
Manifest next update: Fri 16 Oct 2026 04:01:28 +0000
Files and hashes: 1: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: PyETiyCc0gjPPxdn03P1kMNP5ItBNNmEAZOTJf4JYJQ=)
2: VjXNqFR-k-RE3bGhNFiBb6fGRIo.roa (hash: 3g7GHBy2J5M65ZKj6UpQWjQ6sqNGGq3QnOtwBXdJZgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:df:f6:73:85:2f:f4:34:d4:90:8d:b4:9a:d3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
Validity
Not Before: Oct 15 04:01:28 2026 GMT
Not After : Oct 16 04:01:28 2026 GMT
Subject: CN=c88ba4ed8ca759406d077b920f306271d2e51376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4a:5d:fb:6c:da:59:8d:6e:a3:80:fe:dc:7c:
7a:94:62:b0:53:09:c8:bb:e2:4f:cb:3a:ef:81:ce:
12:6f:65:94:f2:e7:1c:1b:86:40:55:84:70:e2:9b:
e7:c3:b8:1b:0e:59:1c:0e:01:80:03:43:df:a4:0c:
52:c5:4c:86:4e:3c:09:e9:92:ff:39:db:60:61:e0:
43:9c:57:62:16:4d:aa:b5:e9:66:e7:b6:02:aa:e3:
2e:37:3a:de:58:54:73:13:79:ef:2d:91:91:dd:c5:
56:6d:29:3b:b6:61:6f:05:69:ea:4e:13:69:4f:d9:
41:9d:8a:f2:49:52:f8:76:64:a1:b4:33:2d:56:3b:
47:cf:60:35:b0:ed:7b:3c:91:b3:a6:b9:30:bd:0a:
20:dc:03:50:4b:b8:88:ef:1f:db:28:a1:e0:cb:4d:
f7:7c:44:e5:cb:46:ec:5b:94:48:23:f0:09:1d:b8:
3b:cd:8e:2f:ba:f9:5f:3c:6d:af:b6:56:ca:55:77:
c8:a1:8b:84:f7:bd:c4:1e:1e:9f:68:9b:74:3a:97:
37:7f:5d:22:81:ad:c1:d4:1a:77:50:5b:93:a9:f3:
e9:64:05:f7:a0:c9:bf:3d:9d:67:da:32:5e:5c:70:
1d:8b:9d:04:c5:ad:e1:95:bf:82:e0:fc:d4:7c:35:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8B:A4:ED:8C:A7:59:40:6D:07:7B:92:0F:30:62:71:D2:E5:13:76
X509v3 Authority Key Identifier:
keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:bf:b5:61:00:71:e6:8c:e6:b5:4a:af:ca:2d:2a:a4:89:26:
4f:86:18:dc:9a:30:48:25:3e:07:a8:e0:01:71:50:df:f3:c1:
e6:7e:d8:3a:a5:6b:7e:5a:13:89:70:be:a0:b4:0c:d4:8f:2a:
8e:e6:8b:41:54:1b:a3:31:65:ec:8f:a2:c6:63:2b:08:1e:8c:
22:07:6d:6a:cd:6b:54:9c:98:2c:a9:48:8a:6b:21:05:90:b1:
2d:12:94:f3:43:01:7a:a4:ec:3d:22:d4:1e:60:71:26:49:fa:
0e:45:bb:e9:da:ce:13:42:08:94:99:20:4a:6e:27:a2:e6:7b:
21:2d:77:7c:09:8d:c3:bb:81:de:d1:72:48:c0:69:48:df:12:
af:bc:12:42:b7:bc:29:ba:b7:b3:f8:d9:e0:83:4d:7f:8b:bd:
98:51:be:8a:92:dd:90:c0:21:52:60:cf:52:20:5f:ee:b5:2c:
19:cc:39:3a:ec:2c:89:29:37:d4:c5:cb:d3:da:68:57:1d:01:
3d:b4:1e:91:5c:2b:4d:8f:8a:73:6c:fe:c4:82:42:e6:38:b3:
bf:b6:82:71:eb:2a:dd:e1:54:d6:4b:a3:ac:c4:12:95:1e:3a:
a4:6d:e3:e7:11:9c:80:7c:63:df:d3:56:8d:0e:b1:bf:15:46:
c2:5f:ab:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uN/2c4Uv9DTUkI20mtNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjAzYzZlZmY5ZTc0MjI2MDMwOTNmODNlNjIxMWRhOThj
NzU4MjkwHhcNMjYxMDE1MDQwMTI4WhcNMjYxMDE2MDQwMTI4WjAzMTEwLwYDVQQD
EyhjODhiYTRlZDhjYTc1OTQwNmQwNzdiOTIwZjMwNjI3MWQyZTUxMzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEpd+2zaWY1uo4D+3Hx6lGKwUwnI
u+JPyzrvgc4Sb2WU8uccG4ZAVYRw4pvnw7gbDlkcDgGAA0PfpAxSxUyGTjwJ6ZL/
OdtgYeBDnFdiFk2qtelm57YCquMuNzreWFRzE3nvLZGR3cVWbSk7tmFvBWnqThNp
T9lBnYrySVL4dmShtDMtVjtHz2A1sO17PJGzprkwvQog3ANQS7iI7x/bKKHgy033
fETly0bsW5RII/AJHbg7zY4vuvlfPG2vtlbKVXfIoYuE973EHh6faJt0Opc3f10i
ga3B1Bp3UFuTqfPpZAX3oMm/PZ1n2jJeXHAdi50Exa3hlb+C4PzUfDXGqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiLpO2Mp1lAbQd7kg8wYnHS5RN2MB8GA1UdIwQY
MBaAFAogPG7/nnQiYDCT+D5iEdqYx1gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83N2Y0ZGYtYzNiOS00ODU5LThiYjIt
MDg3NzRiNmM2YmIzLzEvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83N2Y0ZGYtYzNiOS00ODU5LThiYjItMDg3NzRiNmM2YmIz
LzEvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1L+1YQBx
5ozmtUqvyi0qpIkmT4YY3JowSCU+B6jgAXFQ3/PB5n7YOqVrfloTiXC+oLQM1I8q
juaLQVQbozFl7I+ixmMrCB6MIgdtas1rVJyYLKlIimshBZCxLRKU80MBeqTsPSLU
HmBxJkn6DkW76drOE0IIlJkgSm4nouZ7IS13fAmNw7uB3tFySMBpSN8Sr7wSQre8
Kbq3s/jZ4INNf4u9mFG+ipLdkMAhUmDPUiBf7rUsGcw5OuwsiSk31MXL09poVx0B
PbQekVwrTY+Kc2z+xIJC5jizv7aCcesq3eFU1kujrMQSlR46pG3j5xGcgHxj39NW
jQ6xvxVGwl+r2A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:21:10 2026 by rpki-client