Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
File: a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft (raw, json)
Hash identifier: pe68hTKShXTVekrWBiS/CB62ESboT7DZO8HtIF3Z1yc=
Subject key identifier: EC:F4:14:AE:38:1A:14:2D:2E:FB:E6:CF:D7:AE:07:C7:C0:EE:2C:80
Authority key identifier: 6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
Certificate issuer: /CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Certificate serial: 019D37C0AF6D5201F10019A39271D181E78A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
Manifest number: 0FFC
Signing time: Sun 29 Mar 2026 04:01:07 +0000
Manifest this update: Sun 29 Mar 2026 04:01:07 +0000
Manifest next update: Mon 30 Mar 2026 04:01:07 +0000
Files and hashes: 1: CyxtWweyEqgpd8gBxUUhj5fN2MI.roa (hash: E3T6yiukB1U6Qm/DfmLG5nf8+AunKSeI83VF6XZj4IY=)
2: a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl (hash: v5+d75ogWm8Lk+E7o14hBXagLnxzmQvi3p3gsNpDmSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:af:6d:52:01:f1:00:19:a3:92:71:d1:81:e7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Validity
Not Before: Mar 29 04:01:07 2026 GMT
Not After : Mar 30 04:01:07 2026 GMT
Subject: CN=ecf414ae381a142d2efbe6cfd7ae07c7c0ee2c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:ec:ab:30:a7:f6:c3:c7:fe:66:c1:9b:00:
b1:aa:01:79:d2:b6:59:aa:85:2d:6e:1b:af:12:15:
ab:cd:10:db:76:94:de:6e:c4:3b:7f:fb:fb:62:d9:
87:00:63:6d:3e:d2:c2:72:ef:b9:4b:45:93:d1:e0:
8e:c4:99:e1:71:b4:94:85:92:2c:09:ea:7e:0c:7f:
a7:48:4d:b5:84:89:07:70:81:46:97:56:e1:ce:e7:
40:e7:6a:37:2e:c6:cb:12:81:75:7a:45:2b:f9:21:
cf:b7:d2:0a:59:be:8d:17:f4:38:ca:af:78:77:90:
52:6c:ea:a7:a4:51:fd:69:6e:74:92:da:c6:69:dc:
ee:4c:11:fe:e7:fa:a4:4f:3e:f8:3a:1f:0d:be:46:
01:dd:8c:99:dc:60:32:6e:33:4e:fe:62:c1:d8:0d:
d1:6a:62:0d:be:6e:95:34:9f:1a:cd:c2:6a:ea:c1:
ce:ac:be:72:50:65:7b:8b:76:fb:f8:69:4d:87:32:
ec:5b:55:8a:79:17:4b:9c:7d:ed:9b:85:95:49:4b:
92:26:59:4c:bf:7a:38:c5:0a:59:f9:fb:76:82:17:
18:3e:ca:04:32:a6:cc:7b:65:0e:89:3b:d1:77:d6:
72:a3:e4:d5:b5:e3:23:98:77:a6:70:34:70:98:5e:
51:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F4:14:AE:38:1A:14:2D:2E:FB:E6:CF:D7:AE:07:C7:C0:EE:2C:80
X509v3 Authority Key Identifier:
keyid:6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b4:88:fd:67:44:86:60:25:30:a9:e6:17:38:f2:3a:c9:0f:
96:c1:0d:fb:3e:e3:51:63:1f:01:c2:af:01:15:98:59:5f:b8:
a2:61:b5:4e:01:8e:70:7f:c3:24:c7:b3:c6:1c:5a:21:d9:10:
ea:52:f1:66:43:64:d9:6c:f0:d1:75:bc:d5:8c:40:08:dc:7b:
49:cb:12:d6:cc:56:37:1f:c5:8a:4c:59:0e:67:fb:e7:d7:60:
88:f5:4d:c6:2f:1a:db:5a:f8:67:42:37:83:ae:e8:de:5c:60:
de:c7:2a:c0:60:dc:0d:8a:45:d8:16:aa:1e:eb:6e:b2:17:d2:
c1:1f:05:f5:dc:a5:1a:37:db:ec:a9:16:b2:a0:87:c0:89:95:
b6:8d:58:bf:ff:63:12:19:1a:0e:16:dd:34:96:06:88:57:b9:
7f:8e:cf:de:39:aa:a5:7c:95:f4:4a:a5:00:57:6e:14:bd:a6:
c1:d8:eb:5a:5a:6b:78:cd:a9:b7:e5:3a:0c:ca:96:2d:99:a5:
78:86:f9:e9:38:00:64:90:2b:40:43:3e:34:4b:b0:b2:e2:9a:
5c:41:42:20:27:bd:73:7f:e8:93:40:1e:6a:57:2e:00:45:80:
c7:7d:5e:07:aa:da:f5:65:9e:21:82:65:93:4f:1e:1e:7e:90:
25:f5:a7:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wK9tUgHxABmjknHRgeeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWM0ZTI5YzY4NDljNWY4MDg0MjhlNjY4NThmNGYwZWNm
NGE2NTQwHhcNMjYwMzI5MDQwMTA3WhcNMjYwMzMwMDQwMTA3WjAzMTEwLwYDVQQD
EyhlY2Y0MTRhZTM4MWExNDJkMmVmYmU2Y2ZkN2FlMDdjN2MwZWUyYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4PsqzCn9sPH/mbBmwCxqgF50rZZ
qoUtbhuvEhWrzRDbdpTebsQ7f/v7YtmHAGNtPtLCcu+5S0WT0eCOxJnhcbSUhZIs
Cep+DH+nSE21hIkHcIFGl1bhzudA52o3LsbLEoF1ekUr+SHPt9IKWb6NF/Q4yq94
d5BSbOqnpFH9aW50ktrGadzuTBH+5/qkTz74Oh8NvkYB3YyZ3GAybjNO/mLB2A3R
amINvm6VNJ8azcJq6sHOrL5yUGV7i3b7+GlNhzLsW1WKeRdLnH3tm4WVSUuSJllM
v3o4xQpZ+ft2ghcYPsoEMqbMe2UOiTvRd9Zyo+TVteMjmHemcDRwmF5RTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOz0FK44GhQtLvvmz9euB8fA7iyAMB8GA1UdIwQY
MBaAFGvsTinGhJxfgIQo5mhY9PDs9KZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOGFjOTktMGVhYS00ZjUxLThkNTgt
ZGJmYWVjZGM3ZWEzLzEvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mOGFjOTktMGVhYS00ZjUxLThkNTgtZGJmYWVjZGM3ZWEz
LzEvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirSI/WdE
hmAlMKnmFzjyOskPlsEN+z7jUWMfAcKvARWYWV+4omG1TgGOcH/DJMezxhxaIdkQ
6lLxZkNk2Wzw0XW81YxACNx7ScsS1sxWNx/FikxZDmf759dgiPVNxi8a21r4Z0I3
g67o3lxg3scqwGDcDYpF2BaqHutushfSwR8F9dylGjfb7KkWsqCHwImVto1Yv/9j
EhkaDhbdNJYGiFe5f47P3jmqpXyV9EqlAFduFL2mwdjrWlpreM2pt+U6DMqWLZml
eIb56TgAZJArQEM+NEuwsuKaXEFCICe9c3/ok0AealcuAEWAx31eB6ra9WWeIYJl
k08eHn6QJfWneQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:28 2026 by rpki-client