Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: E1iBNLjZqgxo2p3eJghMfzY8KJA95/Zg7GCvLKSc0S0=
Subject key identifier: C8:30:11:3D:53:B8:2E:C0:97:D4:3B:63:8D:FB:BE:13:BF:88:7B:89
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 019E29265B67CE89F605BFF2AB101026404A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0DFA
Signing time: Fri 15 May 2026 01:00:39 +0000
Manifest this update: Fri 15 May 2026 01:00:39 +0000
Manifest next update: Sat 16 May 2026 01:00:39 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: 03VYe3EwblBbQ3YsA4MKIaxSKMv2LpuIRQSoaVZLn1M=)
2: LeeGxV3aui0l0n7ETElrzjtkaBM.roa (hash: x9kGMWMqzmAXuxI1yI2+L97xSU+hOS0N8TvmEpk9p+8=)
3: PnPWJPaN1J8VHCmd-cuKDdUlk-8.roa (hash: CY12XUm+AEqiMLUbPWTD3nb0Oh/ZFdT0y2oAmQ6wgqo=)
4: juGRjVgVnqyn2IfNNBQ4TSNQu6E.roa (hash: VIgqhWO0oKBC7QCsJgCWGXtpzD429zt0KWfdntl4lZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:5b:67:ce:89:f6:05:bf:f2:ab:10:10:26:40:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: May 15 01:00:39 2026 GMT
Not After : May 16 01:00:39 2026 GMT
Subject: CN=c830113d53b82ec097d43b638dfbbe13bf887b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:00:e3:1c:06:63:5d:1d:c7:c4:31:e7:00:5d:
30:7c:a1:f7:6a:c9:39:e8:49:24:35:bc:9f:51:a4:
15:3c:5d:6b:8c:f6:2f:2f:3a:69:ff:e9:82:9d:e3:
36:f3:b8:1f:7a:91:b4:85:b1:2a:3a:6f:6b:ad:09:
57:44:04:65:e2:e3:1d:71:7e:cc:ea:d3:1d:d0:00:
d4:de:2c:d7:d4:c5:e6:45:27:91:8a:65:b6:15:f2:
a0:e5:3f:8d:b5:e9:93:66:36:da:33:64:ee:93:57:
de:70:a3:45:85:60:95:19:28:a6:72:56:f2:52:5e:
75:09:d3:cc:7c:3e:78:d7:98:a2:0c:ec:3b:20:07:
39:e8:2f:dc:00:f1:72:17:bc:37:59:70:79:e9:cb:
04:42:f3:f6:d3:fa:27:00:f7:b8:45:81:2d:08:5a:
dc:f5:ee:c4:33:b4:69:6d:0e:d2:9a:a8:b1:b6:3d:
59:1c:71:66:38:de:fb:8a:c1:b8:9c:64:b2:dc:f3:
f9:8a:a1:ed:85:7a:dd:50:3e:c5:43:45:cd:fb:60:
02:25:29:69:37:16:50:7c:5c:a0:d3:04:68:5f:ee:
cb:17:2a:ad:b9:1f:f6:7b:4c:29:90:03:af:a0:df:
31:5f:6b:06:e5:db:02:15:83:d3:0a:9c:32:73:67:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:30:11:3D:53:B8:2E:C0:97:D4:3B:63:8D:FB:BE:13:BF:88:7B:89
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cd:15:95:6e:91:a9:85:9d:ba:29:78:3b:81:8a:54:a5:a6:
69:d2:32:07:46:58:0a:f7:21:a8:04:e1:39:5e:f2:2c:0a:3b:
70:f6:df:71:8c:c0:a7:78:68:b4:47:2e:b1:3e:0e:97:05:5c:
7e:7a:38:6b:3b:51:01:6c:62:8e:9f:b5:be:37:5f:87:4b:8b:
e3:65:d3:95:03:7c:ff:af:b2:67:d3:8a:3c:f5:c1:37:7f:41:
77:27:87:9f:92:7f:8c:c3:b4:45:f1:ec:da:66:d3:f8:77:a8:
40:29:09:54:a4:d4:99:c3:6e:a6:7c:7a:79:7d:d1:47:49:4b:
fa:72:74:87:1f:ea:83:d7:9e:92:df:20:b2:b2:c6:37:29:86:
f3:b8:d0:91:47:55:45:a7:bd:05:69:52:b5:43:87:60:29:cc:
16:d9:f2:4e:0e:5b:c5:1c:51:e7:4f:f7:f4:ed:5f:d5:f6:97:
a0:e1:5d:e3:ac:22:05:37:2e:79:05:72:6b:7c:d1:6c:36:71:
7e:e7:76:d7:0b:e8:26:7a:6b:78:36:e1:68:51:5f:0e:78:cc:
ef:d5:02:06:47:11:f3:93:7c:64:40:26:93:19:cb:c9:6d:8e:
c5:23:bb:f0:07:9e:54:0e:a5:e0:0e:c7:c4:1d:4c:6e:38:36:
26:94:5e:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pJltnzon2Bb/yqxAQJkBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzY2JkYjA1OTVmYzQ4OTAyOTM4YTc4ZjQyYzFlYWYwYTE1
OWJmNDYwHhcNMjYwNTE1MDEwMDM5WhcNMjYwNTE2MDEwMDM5WjAzMTEwLwYDVQQD
EyhjODMwMTEzZDUzYjgyZWMwOTdkNDNiNjM4ZGZiYmUxM2JmODg3Yjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ADjHAZjXR3HxDHnAF0wfKH3ask5
6EkkNbyfUaQVPF1rjPYvLzpp/+mCneM287gfepG0hbEqOm9rrQlXRARl4uMdcX7M
6tMd0ADU3izX1MXmRSeRimW2FfKg5T+NtemTZjbaM2Tuk1fecKNFhWCVGSimclby
Ul51CdPMfD5415iiDOw7IAc56C/cAPFyF7w3WXB56csEQvP20/onAPe4RYEtCFrc
9e7EM7RpbQ7Smqixtj1ZHHFmON77isG4nGSy3PP5iqHthXrdUD7FQ0XN+2ACJSlp
NxZQfFyg0wRoX+7LFyqtuR/2e0wpkAOvoN8xX2sG5dsCFYPTCpwyc2cI2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgwET1TuC7Al9Q7Y437vhO/iHuJMB8GA1UdIwQY
MBaAFAPL2wWV/EiQKTinj0LB6vChWb9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYt
ZjY2MTM4MDY2MzU4LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My80YTdkN2YtODg2ZC00YmRmLTgzZDYtZjY2MTM4MDY2MzU4
LzEvQTh2YkJaWDhTSkFwT0tlUFFzSHE4S0ZadjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN80VlW6R
qYWduil4O4GKVKWmadIyB0ZYCvchqAThOV7yLAo7cPbfcYzAp3hotEcusT4OlwVc
fno4aztRAWxijp+1vjdfh0uL42XTlQN8/6+yZ9OKPPXBN39BdyeHn5J/jMO0RfHs
2mbT+HeoQCkJVKTUmcNupnx6eX3RR0lL+nJ0hx/qg9eekt8gsrLGNymG87jQkUdV
Rae9BWlStUOHYCnMFtnyTg5bxRxR50/39O1f1faXoOFd46wiBTcueQVya3zRbDZx
fud21wvoJnpreDbhaFFfDnjM79UCBkcR85N8ZEAmkxnLyW2OxSO78AeeVA6l4A7H
xB1Mbjg2JpRemA==
-----END CERTIFICATE-----
Generated at Fri May 15 07:39:14 2026 by rpki-client