Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: vtU8OoYKfAC2cyT3baHImaK9n2tWehZGnbzuMVuz0jU=
Subject key identifier: D5:8A:AB:B8:CF:A4:47:D6:F9:81:92:44:C4:17:AE:77:00:19:32:B4
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 019F12D366C79A52BDF616BBB803AF8F6B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0E73
Signing time: Mon 29 Jun 2026 10:01:11 +0000
Manifest this update: Mon 29 Jun 2026 10:01:11 +0000
Manifest next update: Tue 30 Jun 2026 10:01:11 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: gLaWVUa4P1HKKC+SevvTPLtT/FaUREao5hvR3pnBHbU=)
2: LeeGxV3aui0l0n7ETElrzjtkaBM.roa (hash: x9kGMWMqzmAXuxI1yI2+L97xSU+hOS0N8TvmEpk9p+8=)
3: PnPWJPaN1J8VHCmd-cuKDdUlk-8.roa (hash: CY12XUm+AEqiMLUbPWTD3nb0Oh/ZFdT0y2oAmQ6wgqo=)
4: juGRjVgVnqyn2IfNNBQ4TSNQu6E.roa (hash: VIgqhWO0oKBC7QCsJgCWGXtpzD429zt0KWfdntl4lZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:66:c7:9a:52:bd:f6:16:bb:b8:03:af:8f:6b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Jun 29 10:01:11 2026 GMT
Not After : Jun 30 10:01:11 2026 GMT
Subject: CN=d58aabb8cfa447d6f9819244c417ae77001932b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:c4:ef:19:b7:97:8f:bb:ff:a4:3c:eb:11:
76:59:15:88:ab:ed:30:69:17:d6:1f:be:c0:46:62:
a3:28:3c:88:ec:b1:a3:4a:d9:2c:c3:d5:e0:39:9b:
cc:38:77:2e:4d:8e:8c:18:9f:6c:a2:e4:0c:32:c7:
75:37:ee:e5:2c:da:e8:f9:62:c6:56:93:b2:a2:bb:
19:e8:27:f2:0c:14:ff:d1:56:c4:f9:aa:b6:58:43:
d9:c6:9d:52:08:d7:4a:ba:ff:81:74:e3:71:8d:84:
46:b3:e2:51:d8:34:05:5d:55:fe:b9:a7:aa:20:01:
e2:30:49:8e:31:27:66:d1:6f:90:85:84:5e:65:51:
fe:4c:4f:70:01:b7:e6:9e:80:05:f3:39:90:43:04:
d3:69:7c:aa:0e:d5:b3:bc:24:16:c9:0f:02:d8:05:
a2:eb:b8:79:2c:ce:f5:20:a8:69:16:d2:47:ad:00:
5d:2d:04:c2:4d:67:43:56:76:d2:59:61:85:44:ea:
cb:e2:98:55:61:35:84:87:8e:ad:7f:6b:c6:02:35:
cd:91:36:e0:6c:78:fe:3a:3c:73:af:50:5c:1e:9e:
08:e2:10:5b:0c:6b:84:cb:80:39:1a:36:27:93:f0:
ff:0e:ad:6b:d2:8d:41:66:6b:e6:09:62:ea:5c:b6:
2b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8A:AB:B8:CF:A4:47:D6:F9:81:92:44:C4:17:AE:77:00:19:32:B4
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:91:58:5f:03:26:89:1b:30:82:68:c4:28:b5:82:21:ae:c8:
16:76:20:72:75:83:67:fa:c4:ef:f4:6e:e9:17:fb:51:d8:9d:
9b:32:b7:04:e0:40:7a:0b:c2:d3:71:59:b4:e8:89:a1:bd:2a:
9c:f1:a8:db:40:3a:08:a6:4d:d1:23:2e:8c:f2:9c:bd:69:bb:
1c:90:6e:03:44:12:86:9b:28:52:ce:03:fa:d5:fa:c5:6e:a5:
f1:8e:b6:54:6c:dd:ef:c7:e6:58:fa:03:0b:18:5b:8f:f6:23:
ce:73:36:f3:d9:83:1a:6b:0d:a5:b9:fe:30:ce:c0:b0:fc:9b:
60:65:82:e2:68:4d:d2:28:6f:de:6b:6f:1a:86:7e:e6:01:4b:
f4:1b:51:d6:89:d9:66:c6:de:37:97:ae:2d:e8:51:08:9d:36:
a3:c5:61:af:4d:77:a1:d7:b1:1b:b7:ec:ee:9f:ef:74:dc:dc:
fe:5c:7e:ca:b0:f4:9a:ee:50:9a:a2:3a:7a:de:62:b3:f5:95:
3e:54:0b:be:b5:2d:67:39:6b:cb:a8:94:58:db:a2:50:1c:80:
ea:9e:71:fc:85:71:16:2b:50:94:a5:c7:ce:2a:a0:df:fb:1c:
10:df:a4:3b:eb:0e:53:8f:1d:7d:ab:01:3d:b4:f2:71:af:b9:
30:31:b2:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8S02bHmlK99ha7uAOvj2sGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1
OWJmNDYwHhcNMjYwNjI5MTAwMTExWhcNMjYwNjMwMTAwMTExWjAzMTEwLwYDVQQD
EyhkNThhYWJiOGNmYTQ0N2Q2Zjk4MTkyNDRjNDE3YWU3NzAwMTkzMmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJjE7xm3l4+7/6Q86xF2WRWIq+0w
aRfWH77ARmKjKDyI7LGjStksw9XgOZvMOHcuTY6MGJ9souQMMsd1N+7lLNro+WLG
VpOyorsZ6CfyDBT/0VbE+aq2WEPZxp1SCNdKuv+BdONxjYRGs+JR2DQFXVX+uaeq
IAHiMEmOMSdm0W+QhYReZVH+TE9wAbfmnoAF8zmQQwTTaXyqDtWzvCQWyQ8C2AWi
67h5LM71IKhpFtJHrQBdLQTCTWdDVnbSWWGFROrL4phVYTWEh46tf2vGAjXNkTbg
bHj+Ojxzr1BcHp4I4hBbDGuEy4A5GjYnk/D/Dq1r0o1BZmvmCWLqXLYrJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWKq7jPpEfW+YGSRMQXrncAGTK0MB8GA1UdIwQY
MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt
ZjY2MTM4MDY2MzU4LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4
LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJFYXwMm
iRswgmjEKLWCIa7IFnYgcnWDZ/rE7/Ru6Rf7UdidmzK3BOBAegvC03FZtOiJob0q
nPGo20A6CKZN0SMujPKcvWm7HJBuA0QShpsoUs4D+tX6xW6l8Y62VGzd78fmWPoD
Cxhbj/YjznM289mDGmsNpbn+MM7AsPybYGWC4mhN0ihv3mtvGoZ+5gFL9BtR1onZ
ZsbeN5euLehRCJ02o8Vhr013odexG7fs7p/vdNzc/lx+yrD0mu5QmqI6et5is/WV
PlQLvrUtZzlry6iUWNuiUByA6p5x/IVxFitQlKXHziqg3/scEN+kO+sOU48dfasB
PbTyca+5MDGyww==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:49:50 2026 by rpki-client