Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: 66NRz0oHtsREIx4gPzNZqTr4c8eaPWIy/qjtEIHRAeA=
Subject key identifier: 30:4E:07:7D:CB:DD:F4:D5:62:96:C1:C9:E3:87:C6:A2:08:52:30:8F
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 01A0B6C049E2C9BEEFCFE6FEBBD4F919D714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 139A
Signing time: Fri 18 Sep 2026 23:00:50 +0000
Manifest this update: Fri 18 Sep 2026 23:00:50 +0000
Manifest next update: Sat 19 Sep 2026 23:00:50 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: zmGx27TG0ErtQNmbNn12vSbIh1LMjwiQhfbjWgdo88A=)
2: 2f5dXJrT7zuKxhEnBTwrq6ei-_s.roa (hash: RkvyHwjfWKAPyzciHocJpPKvG0Wkaxk6iDB72eKrEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:c0:49:e2:c9:be:ef:cf:e6:fe:bb:d4:f9:19:d7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Sep 18 23:00:50 2026 GMT
Not After : Sep 19 23:00:50 2026 GMT
Subject: CN=304e077dcbddf4d56296c1c9e387c6a20852308f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0c:70:08:0d:53:7b:46:67:b9:7e:47:50:b5:
6b:65:62:1d:4c:14:cb:33:84:42:a8:05:0f:88:d4:
69:1f:4d:26:fc:b5:75:2d:bf:99:9e:9a:00:6a:2b:
dd:d6:c3:58:f0:a5:b4:a1:4a:fd:82:64:09:66:8e:
9c:ed:b8:62:20:12:8a:b6:84:c3:2a:e7:09:4d:e8:
95:fb:8c:ce:cd:52:29:32:b0:a9:51:86:12:a3:3b:
03:b3:b4:bf:f6:8b:0e:6c:f0:ee:e9:50:64:7a:af:
31:f7:10:63:0b:24:e5:ca:05:7a:3d:2e:54:9f:a7:
6a:ce:d9:da:c5:31:1b:b7:6a:d9:d9:80:8e:d0:84:
e2:ba:95:d5:85:4f:f1:47:4b:9c:02:78:8d:a0:98:
fb:c5:69:a6:c9:d7:80:bf:77:80:37:fa:6b:94:01:
85:61:b4:78:71:16:a3:39:0a:4a:3c:46:9a:d3:49:
63:92:e1:80:6c:84:1f:2b:1f:86:e9:7f:0f:06:84:
10:2b:fe:48:92:29:b0:04:df:14:92:fb:25:e8:ab:
a6:2f:48:ee:7e:72:a8:fe:a2:b7:79:0e:4d:6f:e3:
f5:b8:1d:2d:60:f6:ce:79:49:3d:16:79:fe:80:82:
9a:ec:2b:02:4f:c3:dd:8e:8b:d1:68:05:24:2c:82:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4E:07:7D:CB:DD:F4:D5:62:96:C1:C9:E3:87:C6:A2:08:52:30:8F
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9c:db:4d:3a:bc:f6:fe:91:db:ca:71:40:55:08:8f:d1:89:
ef:e6:6d:be:82:a6:c8:55:64:a9:4e:38:40:46:39:03:45:b7:
5c:10:56:62:f5:30:f9:89:06:05:6d:1c:24:b3:92:5d:ed:ff:
46:09:de:63:83:dd:30:c0:39:b2:99:18:a9:65:3b:a4:2c:76:
bd:db:62:8a:86:40:f2:14:7b:10:9d:7e:6a:93:11:80:02:be:
f8:ad:92:06:43:d4:0b:ed:ac:c1:8a:96:c5:87:cb:37:7d:57:
c5:79:1a:5e:77:3c:d7:e3:c0:ba:88:74:7b:c4:49:38:f7:e6:
cc:05:32:f3:33:16:c3:9d:d4:c0:63:06:42:ba:b1:99:b8:12:
4c:cb:ae:c3:54:19:e4:3c:d5:01:7f:49:f1:b6:33:01:d8:36:
fe:59:2d:fe:56:07:eb:30:25:44:f0:f4:18:77:92:12:06:6f:
fd:79:ee:98:91:93:82:ca:45:51:d6:43:97:6f:af:e7:37:a8:
6e:92:86:b7:5b:76:a3:8f:94:81:a3:45:40:86:58:56:84:42:
95:14:9c:f9:3e:cb:10:cb:ee:c0:e3:d7:71:68:8c:85:63:2c:
fb:6c:d5:41:f6:28:c4:a8:67:69:09:10:85:43:41:b2:b3:21:
c6:30:64:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC2wEniyb7vz+b+u9T5GdcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDEyYmY4ZjU3MjQ4NGE2ZjYwNjg1NjJjYTk5MTljNmRh
NTQ0NmYwHhcNMjYwOTE4MjMwMDUwWhcNMjYwOTE5MjMwMDUwWjAzMTEwLwYDVQQD
EygzMDRlMDc3ZGNiZGRmNGQ1NjI5NmMxYzllMzg3YzZhMjA4NTIzMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgxwCA1Te0ZnuX5HULVrZWIdTBTL
M4RCqAUPiNRpH00m/LV1Lb+ZnpoAaivd1sNY8KW0oUr9gmQJZo6c7bhiIBKKtoTD
KucJTeiV+4zOzVIpMrCpUYYSozsDs7S/9osObPDu6VBkeq8x9xBjCyTlygV6PS5U
n6dqztnaxTEbt2rZ2YCO0ITiupXVhU/xR0ucAniNoJj7xWmmydeAv3eAN/prlAGF
YbR4cRajOQpKPEaa00ljkuGAbIQfKx+G6X8PBoQQK/5IkimwBN8Ukvsl6KumL0ju
fnKo/qK3eQ5Nb+P1uB0tYPbOeUk9Fnn+gIKa7CsCT8PdjovRaAUkLIJoGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBOB33L3fTVYpbByeOHxqIIUjCPMB8GA1UdIwQY
MBaAFNABK/j1ckhKb2BoViypkZxtpURvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQt
ODQ3N2I2NjM4ZjMxLzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQtODQ3N2I2NjM4ZjMx
LzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZzbTTq8
9v6R28pxQFUIj9GJ7+ZtvoKmyFVkqU44QEY5A0W3XBBWYvUw+YkGBW0cJLOSXe3/
RgneY4PdMMA5spkYqWU7pCx2vdtiioZA8hR7EJ1+apMRgAK++K2SBkPUC+2swYqW
xYfLN31XxXkaXnc81+PAuoh0e8RJOPfmzAUy8zMWw53UwGMGQrqxmbgSTMuuw1QZ
5DzVAX9J8bYzAdg2/lkt/lYH6zAlRPD0GHeSEgZv/XnumJGTgspFUdZDl2+v5zeo
bpKGt1t2o4+UgaNFQIZYVoRClRSc+T7LEMvuwOPXcWiMhWMs+2zVQfYoxKhnaQkQ
hUNBsrMhxjBk1A==
-----END CERTIFICATE-----
Generated at Sat Sep 19 03:42:24 2026 by rpki-client