Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
File: D5_AEbXohjvPO7cq12ldMZdCuEQ.mft (raw, json)
Hash identifier: IIZkuNVWxXBzmYfd4at0RG3/lgf63J6Lq7ZrwuZ3Vxg=
Subject key identifier: C8:72:1D:99:B2:7B:C8:E3:5A:89:14:8E:61:89:3B:35:8D:E5:7A:8C
Authority key identifier: 0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44
Certificate issuer: /CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844
Certificate serial: 01A03FA97603F1A9D603689FC5F8CEB98C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
Manifest number: 02C8
Signing time: Wed 26 Aug 2026 20:01:05 +0000
Manifest this update: Wed 26 Aug 2026 20:01:05 +0000
Manifest next update: Thu 27 Aug 2026 20:01:05 +0000
Files and hashes: 1: C2alc4W0qUaR_O2dT6t7YsOa3tU.roa (hash: XKnTKvL5wXPD8yEbAMnox+MgSzxyy4w+ZP5niGbD9/U=)
2: D5_AEbXohjvPO7cq12ldMZdCuEQ.crl (hash: IO5jQea6fPiB4kx8SP5JQ9T/KKxTh9VxF2nUH1xgU2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:76:03:f1:a9:d6:03:68:9f:c5:f8:ce:b9:8c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844
Validity
Not Before: Aug 26 20:01:05 2026 GMT
Not After : Aug 27 20:01:05 2026 GMT
Subject: CN=c8721d99b27bc8e35a89148e61893b358de57a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:9f:d4:68:f4:07:d6:e1:d4:e1:31:47:e6:
3b:55:47:b4:26:ae:e6:6c:09:54:1c:3f:04:97:3a:
c6:85:36:e7:cd:7c:dd:9e:47:4f:3a:d3:63:40:24:
7a:77:b7:89:8c:35:bf:0d:b0:e2:73:41:19:11:88:
79:35:81:02:e3:4b:18:ed:62:b5:96:e9:11:5d:ab:
78:c0:71:af:48:61:e5:79:9b:60:a3:86:83:c0:67:
5a:b6:55:f0:f2:00:de:74:7e:c1:bf:31:df:49:a6:
55:a5:62:9e:0f:31:1e:3c:8f:21:46:2f:4f:09:1b:
96:92:ad:86:98:e4:81:d9:14:cc:b9:a6:f2:6a:ca:
1d:e1:60:e1:30:ea:3c:47:e5:c2:87:0b:53:25:5c:
3d:60:1f:52:75:ea:51:67:a8:5b:c2:00:bc:2f:d1:
75:cd:9a:26:f8:1b:d6:51:a9:78:1b:84:2c:32:49:
10:09:55:05:af:66:78:3c:fd:97:4b:ff:fc:45:e0:
ff:c6:4c:40:7c:fc:d4:7a:e8:14:5b:aa:39:9c:d1:
2b:4d:f7:10:c3:ba:0f:e6:03:97:73:a8:97:b3:b4:
43:61:0e:1f:75:70:3d:9f:08:e1:d6:90:47:a3:bf:
14:d7:a3:c0:4f:66:52:8b:c5:ee:11:4c:02:a6:16:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:72:1D:99:B2:7B:C8:E3:5A:89:14:8E:61:89:3B:35:8D:E5:7A:8C
X509v3 Authority Key Identifier:
keyid:0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f8:c2:3b:8f:8d:e9:8e:76:f0:78:03:00:d8:c5:d8:3c:d3:
68:dc:90:36:bb:6f:b9:c5:52:f5:bb:dc:88:c2:ac:69:5f:e4:
9d:76:df:55:04:de:78:40:8e:05:12:c6:3c:91:ca:d3:7d:93:
10:77:7d:7a:27:18:21:c3:a0:50:e6:b4:f9:52:5f:5a:63:66:
6f:6d:ea:87:db:2d:f1:45:90:8d:e4:38:5f:8e:95:d3:21:6d:
79:49:44:27:4c:c4:3f:5a:a9:3c:bf:82:79:cd:30:49:1c:f9:
85:4d:89:f2:53:35:f8:a7:ed:a8:55:45:e7:d1:d4:b7:0c:d3:
c6:bb:52:d3:91:1e:db:b1:f9:03:b3:40:56:2e:6c:03:00:7f:
b6:73:68:15:4b:e7:31:0d:75:8d:9e:7b:8d:f9:5f:0c:cc:17:
a9:14:73:15:11:38:7a:6e:15:f6:db:8f:3e:74:2a:09:4f:ed:
41:5a:56:f6:8c:79:00:80:7e:76:2f:30:63:b6:1b:a1:c4:ba:
de:d1:5b:c5:d0:5e:d6:5e:27:a8:80:25:af:4a:8a:3f:34:9e:
c8:89:b7:e6:1b:e6:96:85:3a:23:1e:3b:ad:47:5e:57:92:80:
76:f9:2a:74:e3:ff:74:df:89:23:dc:a8:12:c0:c1:6c:17:96:
8e:56:33:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/qXYD8anWA2ifxfjOuYxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWZjMDExYjVlODg2M2JjZjNiYjcyYWQ3Njk1ZDMxOTc0
MmI4NDQwHhcNMjYwODI2MjAwMTA1WhcNMjYwODI3MjAwMTA1WjAzMTEwLwYDVQQD
EyhjODcyMWQ5OWIyN2JjOGUzNWE4OTE0OGU2MTg5M2IzNThkZTU3YThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMif1Gj0B9bh1OExR+Y7VUe0Jq7m
bAlUHD8ElzrGhTbnzXzdnkdPOtNjQCR6d7eJjDW/DbDic0EZEYh5NYEC40sY7WK1
lukRXat4wHGvSGHleZtgo4aDwGdatlXw8gDedH7BvzHfSaZVpWKeDzEePI8hRi9P
CRuWkq2GmOSB2RTMuabyasod4WDhMOo8R+XChwtTJVw9YB9SdepRZ6hbwgC8L9F1
zZom+BvWUal4G4QsMkkQCVUFr2Z4PP2XS//8ReD/xkxAfPzUeugUW6o5nNErTfcQ
w7oP5gOXc6iXs7RDYQ4fdXA9nwjh1pBHo78U16PAT2ZSi8XuEUwCphbSvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhyHZmye8jjWokUjmGJOzWN5XqMMB8GA1UdIwQY
MBaAFA+fwBG16IY7zzu3KtdpXTGXQrhEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYWJjNzQtYTg0Zi00YzZjLWFmMGQt
NzBjNTg5ZGQyMTcxLzEvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zYWJjNzQtYTg0Zi00YzZjLWFmMGQtNzBjNTg5ZGQyMTcx
LzEvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvjCO4+N
6Y528HgDANjF2DzTaNyQNrtvucVS9bvciMKsaV/knXbfVQTeeECOBRLGPJHK032T
EHd9eicYIcOgUOa0+VJfWmNmb23qh9st8UWQjeQ4X46V0yFteUlEJ0zEP1qpPL+C
ec0wSRz5hU2J8lM1+KftqFVF59HUtwzTxrtS05Ee27H5A7NAVi5sAwB/tnNoFUvn
MQ11jZ57jflfDMwXqRRzFRE4em4V9tuPPnQqCU/tQVpW9ox5AIB+di8wY7YbocS6
3tFbxdBe1l4nqIAlr0qKPzSeyIm35hvmloU6Ix47rUdeV5KAdvkqdOP/dN+JI9yo
EsDBbBeWjlYzxw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:39 2026 by rpki-client