Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: B+b8z9K3AhD7fhnnDw1UfFMZ9eHkFAP+fhBYIvivaTs=
Subject key identifier: C5:E6:8F:E9:13:11:EF:E0:71:A1:E8:0B:03:0E:9B:56:02:C7:3F:B2
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 019DECA3CE1662326A726A2E9AC63CD1E454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 1375
Signing time: Sun 03 May 2026 07:00:51 +0000
Manifest this update: Sun 03 May 2026 07:00:51 +0000
Manifest next update: Mon 04 May 2026 07:00:51 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: BETPH0bpR4TNdwBlqe/UNY33Gn/X/HaQINFuaInThSs=)
2: lcX_BfSjVldf0AWvAKj1fHUxC84.roa (hash: EI6Mzu5z6YSWUkBvK1kxjCqRN5l7TNUNJw5p8ATCsOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:a3:ce:16:62:32:6a:72:6a:2e:9a:c6:3c:d1:e4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: May 3 07:00:51 2026 GMT
Not After : May 4 07:00:51 2026 GMT
Subject: CN=c5e68fe91311efe071a1e80b030e9b5602c73fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:7e:90:2b:2d:6d:22:d0:eb:e2:ab:6f:1d:
a5:cb:73:82:f4:c9:f7:d1:d8:ef:a6:69:0c:b8:0d:
e0:c2:f3:f4:ca:7f:a5:30:01:df:27:ae:6a:54:00:
2e:8d:fa:9f:ec:ec:14:f8:6d:cf:dd:fc:4d:45:fb:
c5:df:3f:14:41:fa:a9:50:39:20:45:83:f8:24:fd:
75:51:28:3f:63:30:8a:51:e5:a4:75:ea:53:54:f8:
1c:ab:d1:da:26:26:10:ce:02:74:a7:a8:1b:88:a9:
d2:8a:1c:a3:7b:9c:19:e6:95:58:d7:24:c2:3f:23:
ba:97:30:2b:7f:1f:61:09:b2:16:12:78:d0:03:a5:
50:65:87:12:a5:d4:6e:2a:10:9f:d2:3a:0f:4f:0c:
a7:c6:86:a0:0f:b8:c2:e4:fd:86:3e:92:a3:f1:7b:
ad:cc:aa:7d:4f:92:49:5e:c0:b9:2d:f9:a3:de:f9:
60:69:4c:a7:ac:c4:52:75:c7:31:0e:db:86:7a:15:
d8:76:00:cd:58:0c:24:12:2d:4f:1a:25:08:61:c7:
ca:5f:e3:30:3a:82:fd:dc:21:97:29:24:38:49:c8:
69:f4:de:99:c5:f0:44:cb:de:d2:46:e9:bf:fe:81:
d7:fa:58:ed:ac:3c:e8:46:c2:9c:1a:14:2a:29:5b:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E6:8F:E9:13:11:EF:E0:71:A1:E8:0B:03:0E:9B:56:02:C7:3F:B2
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:cd:2a:3d:ab:b7:02:24:c9:41:a9:53:08:a6:97:e7:50:36:
27:13:6a:2a:f7:87:73:0b:5d:e9:74:38:3e:91:3a:26:1e:c1:
e1:fe:fd:bd:cd:5f:9a:1d:bc:c1:86:1b:51:38:3c:14:a1:33:
08:4c:8d:0e:72:fc:9a:02:cf:74:7a:62:23:1b:d8:ca:be:ce:
2c:f6:f6:fd:ac:23:b5:ff:a2:62:ce:c3:d6:78:ed:1a:83:44:
7e:f8:31:2a:46:7e:d1:01:25:77:a0:6d:03:89:f8:29:ad:96:
5d:5c:32:4d:cf:ef:b7:91:2f:08:74:68:cc:8c:27:3d:22:3c:
b2:b5:b4:4f:f4:4b:3f:fe:71:96:64:10:5e:bb:d2:c7:7a:fc:
13:05:27:c0:38:4a:e5:91:5f:a5:81:03:a3:5e:99:1a:c9:91:
72:12:54:2c:43:8d:4d:2f:f0:7b:33:bf:cd:b7:24:f0:f5:89:
2c:12:ca:b3:67:d4:78:35:18:7e:28:92:36:b7:65:21:9f:f6:
55:f3:8b:8e:67:82:88:f4:26:bd:5f:82:85:8e:b2:76:fc:f7:
94:5b:d9:60:9c:ed:5f:42:de:1a:61:3b:89:c6:65:15:94:50:
8d:96:54:8d:92:f2:0b:43:be:77:3f:8e:ee:e9:c7:9a:23:70:
1f:bd:79:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3so84WYjJqcmoumsY80eRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzZjZWEyYTgwMjIwMzYxMjMxYjZhZmJiYzhjOGNkYWE0
ZmQ1MTcwHhcNMjYwNTAzMDcwMDUxWhcNMjYwNTA0MDcwMDUxWjAzMTEwLwYDVQQD
EyhjNWU2OGZlOTEzMTFlZmUwNzFhMWU4MGIwMzBlOWI1NjAyYzczZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr65+kCstbSLQ6+Krbx2ly3OC9Mn3
0djvpmkMuA3gwvP0yn+lMAHfJ65qVAAujfqf7OwU+G3P3fxNRfvF3z8UQfqpUDkg
RYP4JP11USg/YzCKUeWkdepTVPgcq9HaJiYQzgJ0p6gbiKnSihyje5wZ5pVY1yTC
PyO6lzArfx9hCbIWEnjQA6VQZYcSpdRuKhCf0joPTwynxoagD7jC5P2GPpKj8Xut
zKp9T5JJXsC5Lfmj3vlgaUynrMRSdccxDtuGehXYdgDNWAwkEi1PGiUIYcfKX+Mw
OoL93CGXKSQ4Schp9N6ZxfBEy97SRum//oHX+ljtrDzoRsKcGhQqKVuMmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXmj+kTEe/gcaHoCwMOm1YCxz+yMB8GA1UdIwQY
MBaAFAPGzqKoAiA2EjG2r7vIyM2qT9UXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQt
ZjQ2ZDZhYjNkMzI2LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQtZjQ2ZDZhYjNkMzI2
LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtM0qPau3
AiTJQalTCKaX51A2JxNqKveHcwtd6XQ4PpE6Jh7B4f79vc1fmh28wYYbUTg8FKEz
CEyNDnL8mgLPdHpiIxvYyr7OLPb2/awjtf+iYs7D1njtGoNEfvgxKkZ+0QEld6Bt
A4n4Ka2WXVwyTc/vt5EvCHRozIwnPSI8srW0T/RLP/5xlmQQXrvSx3r8EwUnwDhK
5ZFfpYEDo16ZGsmRchJULEONTS/wezO/zbck8PWJLBLKs2fUeDUYfiiSNrdlIZ/2
VfOLjmeCiPQmvV+ChY6ydvz3lFvZYJztX0LeGmE7icZlFZRQjZZUjZLyC0O+dz+O
7unHmiNwH715pA==
-----END CERTIFICATE-----
Generated at Sun May 3 15:34:58 2026 by rpki-client