Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
File: 0bS-sKan4ShKv0OFNIz0hhALn4A.mft (raw, json)
Hash identifier: Gryt1o0wTqZJxd1Y89k925n8oRJFwVb6A6G84utH4pg=
Subject key identifier: DF:44:D0:CC:4A:2B:27:1C:6F:4B:59:7A:3F:03:65:31:C7:90:84:44
Authority key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
Certificate issuer: /CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Certificate serial: 01A001381665CF5D3EFE045E2E9E63B100DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
Manifest number: 1201
Signing time: Fri 14 Aug 2026 17:00:47 +0000
Manifest this update: Fri 14 Aug 2026 17:00:47 +0000
Manifest next update: Sat 15 Aug 2026 17:00:47 +0000
Files and hashes: 1: 0bS-sKan4ShKv0OFNIz0hhALn4A.crl (hash: B1e6VTtBokwDAA/oyoFExwFS/9E6Gt1mu7wy/QKNvTM=)
2: BBKAblizkGIJV_f06RIh70XLtr0.roa (hash: EDuWd1ayZXpmIRskDvDc511OzhDthWRGsbu0u3My31o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:16:65:cf:5d:3e:fe:04:5e:2e:9e:63:b1:00:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Validity
Not Before: Aug 14 17:00:47 2026 GMT
Not After : Aug 15 17:00:47 2026 GMT
Subject: CN=df44d0cc4a2b271c6f4b597a3f036531c7908444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:fb:74:35:47:07:9b:b0:5e:b9:45:2f:fc:
7d:18:44:76:70:77:48:17:80:2e:bc:d0:4a:7d:8f:
86:33:40:e1:3f:c6:53:7e:23:c0:2e:fa:dd:67:a1:
cb:7e:17:93:36:a8:59:fb:1d:7c:ab:b9:55:dc:83:
5a:b7:01:f2:de:ee:85:4e:c8:4e:c1:36:9f:e4:ae:
8b:f3:de:f8:e8:62:73:c7:b5:5c:5b:ee:70:a7:dd:
16:4b:41:f7:38:90:d6:2f:be:61:fb:03:1e:6d:b9:
be:5c:b2:ea:89:30:f1:2e:91:6e:5b:54:25:34:9a:
ff:b9:e3:57:a8:17:dc:c5:eb:b8:8b:1c:d5:a1:e6:
0d:47:fd:24:41:7f:7f:e0:0d:8c:07:3f:2d:b6:7b:
3d:5d:71:8f:6b:83:92:7a:36:6e:36:e2:b7:19:40:
c9:b4:78:8f:8b:39:7a:ab:56:88:37:57:4e:32:ac:
0d:bc:1c:57:7d:1e:ce:a9:80:ad:1e:59:93:e5:bb:
08:59:5c:45:64:07:d8:a7:4c:32:fb:22:b4:d2:2d:
50:be:fb:5d:55:75:d1:cf:db:61:cf:0b:0c:26:8c:
d2:a0:ac:54:83:55:fe:b7:14:cb:b2:f7:b3:44:8f:
de:79:67:a9:0b:7c:bf:82:39:4c:ab:5e:81:20:da:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:44:D0:CC:4A:2B:27:1C:6F:4B:59:7A:3F:03:65:31:C7:90:84:44
X509v3 Authority Key Identifier:
keyid:D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:dc:4f:fd:a7:57:72:f5:6f:dd:09:0a:47:8b:99:a0:d0:ae:
c7:69:e1:ea:9d:7d:f6:f8:3e:7d:a9:94:c6:63:7a:69:86:71:
96:69:31:16:80:d0:b4:83:f3:08:28:c7:06:cd:e1:9a:24:91:
98:51:eb:d1:1a:81:cc:96:df:db:94:d8:ad:f2:0d:38:7a:ef:
54:72:96:02:db:65:ad:29:bb:1c:0a:5e:55:8f:1f:7c:60:4b:
f8:f0:41:d9:b9:a2:45:84:5c:40:46:cd:f1:ed:1c:75:b1:bc:
78:a9:e7:bf:ae:cf:8d:2e:69:3b:46:f7:70:1f:b6:3c:37:1b:
94:bc:3d:c7:c6:77:37:ad:b4:0b:da:b0:0b:c0:3a:bc:57:d3:
ed:dd:14:8a:2a:61:5e:95:4d:7b:e6:ee:b3:6a:85:1d:d4:c8:
25:25:19:01:1d:2c:80:0b:ec:c8:fc:5a:90:5e:f6:0e:a7:dc:
da:50:20:92:3f:65:7a:4b:8e:24:b7:dc:62:e9:2c:53:9d:3b:
f7:fb:f4:4c:e4:60:71:fa:11:cb:18:aa:62:62:2e:1c:57:7d:
cf:c0:09:1c:39:ce:62:26:d9:fb:02:76:8b:3f:db:53:43:71:
f6:9a:81:8d:8d:b2:35:68:a2:9e:ec:d2:57:38:69:30:3d:1e:
12:ef:05:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOBZlz10+/gReLp5jsQDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYjRiZWIwYTZhN2UxMjg0YWJmNDM4NTM0OGNmNDg2MTAw
YjlmODAwHhcNMjYwODE0MTcwMDQ3WhcNMjYwODE1MTcwMDQ3WjAzMTEwLwYDVQQD
EyhkZjQ0ZDBjYzRhMmIyNzFjNmY0YjU5N2EzZjAzNjUzMWM3OTA4NDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRb7dDVHB5uwXrlFL/x9GER2cHdI
F4AuvNBKfY+GM0DhP8ZTfiPALvrdZ6HLfheTNqhZ+x18q7lV3INatwHy3u6FTshO
wTaf5K6L89746GJzx7VcW+5wp90WS0H3OJDWL75h+wMebbm+XLLqiTDxLpFuW1Ql
NJr/ueNXqBfcxeu4ixzVoeYNR/0kQX9/4A2MBz8ttns9XXGPa4OSejZuNuK3GUDJ
tHiPizl6q1aIN1dOMqwNvBxXfR7OqYCtHlmT5bsIWVxFZAfYp0wy+yK00i1Qvvtd
VXXRz9thzwsMJozSoKxUg1X+txTLsvezRI/eeWepC3y/gjlMq16BINr08QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9E0MxKKyccb0tZej8DZTHHkIREMB8GA1UdIwQY
MBaAFNG0vrCmp+EoSr9DhTSM9IYQC5+AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGJTLXNLYW40U2hLdjBPRk5JejBoaEFMbjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mOGQ5OGQtMWZmZS00NjM5LWIzNzMt
OWJhMTE3MmE2OGMwLzEvMGJTLXNLYW40U2hLdjBPRk5JejBoaEFMbjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mOGQ5OGQtMWZmZS00NjM5LWIzNzMtOWJhMTE3MmE2OGMw
LzEvMGJTLXNLYW40U2hLdjBPRk5JejBoaEFMbjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNxP/adX
cvVv3QkKR4uZoNCux2nh6p199vg+famUxmN6aYZxlmkxFoDQtIPzCCjHBs3hmiSR
mFHr0RqBzJbf25TYrfINOHrvVHKWAttlrSm7HApeVY8ffGBL+PBB2bmiRYRcQEbN
8e0cdbG8eKnnv67PjS5pO0b3cB+2PDcblLw9x8Z3N620C9qwC8A6vFfT7d0Uiiph
XpVNe+bus2qFHdTIJSUZAR0sgAvsyPxakF72Dqfc2lAgkj9lekuOJLfcYuksU507
9/v0TORgcfoRyxiqYmIuHFd9z8AJHDnOYibZ+wJ2iz/bU0Nx9pqBjY2yNWiinuzS
VzhpMD0eEu8FoA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:33:02 2026 by rpki-client