Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: O/XWfZhDoDYri4bG9FxgA+FqiqcBRUu3Cd0Mx5ijsvY=
Subject key identifier: 46:95:89:1F:36:E3:4F:56:91:13:DB:C6:83:B3:6F:61:66:20:B6:B7
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 019D39416D03ED478536A66D57B73B34436A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 049E
Signing time: Sun 29 Mar 2026 11:01:22 +0000
Manifest this update: Sun 29 Mar 2026 11:01:22 +0000
Manifest next update: Mon 30 Mar 2026 11:01:22 +0000
Files and hashes: 1: 4vob8D5i4e8yxUzOgD_ndBkImWg.roa (hash: 8D0W8BBjVRTsnLo388gZyiwxnGWuD1QilZO3INgNv28=)
2: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: PKrhuts87wbdJ+9iiDbFXYiIdFEAWZxDXsWsLH45QwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:6d:03:ed:47:85:36:a6:6d:57:b7:3b:34:43:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: Mar 29 11:01:22 2026 GMT
Not After : Mar 30 11:01:22 2026 GMT
Subject: CN=4695891f36e34f569113dbc683b36f616620b6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:63:82:50:f7:5b:e9:a0:8d:0e:6d:78:40:
a2:1f:89:75:09:14:a5:b3:6e:d6:7c:34:5a:29:33:
25:11:53:a1:3f:11:99:59:9d:13:6e:6d:7b:54:6e:
7d:40:83:22:95:11:a7:30:08:ef:64:de:8f:84:62:
b4:f5:07:89:cd:c3:d0:a6:d6:61:65:02:84:e7:10:
8e:b5:0b:7d:e2:57:fc:99:6b:65:0f:ad:2d:10:29:
43:19:d1:37:28:d4:1d:5b:dd:fb:78:89:e2:5d:99:
ba:7c:63:b9:76:e8:49:7f:5e:92:b1:92:55:f0:3f:
6e:a9:a8:e4:fd:81:df:e2:08:ec:db:51:2c:1a:25:
87:e0:07:47:88:78:e8:56:bd:0b:a5:3d:67:3c:49:
0d:4c:ff:84:9a:ce:37:1c:f4:85:79:25:01:f5:f6:
9b:3c:66:ea:25:20:9b:d2:55:a7:b9:95:cb:a9:8d:
4e:4e:81:eb:73:b9:03:41:eb:61:09:a8:06:dc:e6:
0e:38:87:ef:75:cc:c6:2f:3c:88:e4:7b:db:38:3d:
c1:c4:97:48:8d:e5:7c:78:21:1a:ae:02:c9:cc:8f:
99:5c:e5:20:df:95:a2:de:25:dd:b7:eb:74:aa:31:
dd:3f:02:04:7d:d4:25:dd:1e:5a:48:2e:29:fb:e9:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:95:89:1F:36:E3:4F:56:91:13:DB:C6:83:B3:6F:61:66:20:B6:B7
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4f:e4:e1:5d:5e:27:0e:92:5d:f2:e5:a0:83:e5:e8:80:18:
c7:65:ac:3b:28:55:70:db:07:d6:03:31:fe:45:67:ea:07:0e:
7c:d7:05:93:5d:2b:32:8b:7f:97:9d:5c:e1:9c:70:0e:b6:3e:
af:59:e0:37:a6:4d:5a:22:bd:e7:5b:f0:42:12:64:ef:9d:bb:
b7:4a:77:66:3f:82:34:e8:5f:1b:8a:6d:02:66:3d:c0:30:49:
d5:76:62:71:ec:bf:d8:c4:a4:b8:7c:42:85:ec:80:93:f2:e4:
46:d5:f2:55:10:b6:33:89:19:67:6d:8a:2b:fe:87:97:ba:89:
95:28:c6:d6:0e:3a:59:41:43:87:f6:31:11:f4:56:f0:d5:05:
c6:8e:d1:b8:43:a3:17:9e:70:2d:a8:f3:eb:e2:e3:86:a5:fa:
bf:bc:bc:4a:31:87:aa:25:76:fa:45:f0:38:37:0f:9c:1d:50:
2a:28:cc:76:b6:a2:c3:8d:f7:ef:a7:51:8e:b3:f7:37:a9:49:
e5:a2:4a:17:8a:93:22:82:02:8f:02:6e:e6:f6:28:44:3e:2d:
19:fc:2f:09:b5:06:1e:4e:0d:1e:57:26:47:7e:b8:eb:5a:64:
f3:35:24:93:57:8d:45:ea:2e:fd:3d:b7:c7:bd:71:24:1d:65:
cd:48:6d:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QW0D7UeFNqZtV7c7NENqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzllYTRmOTY1ODhiMTZiZDRmY2EzOGQ0YzFkZGY2NWMx
YWJmZGEwHhcNMjYwMzI5MTEwMTIyWhcNMjYwMzMwMTEwMTIyWjAzMTEwLwYDVQQD
Eyg0Njk1ODkxZjM2ZTM0ZjU2OTExM2RiYzY4M2IzNmY2MTY2MjBiNmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKFjglD3W+mgjQ5teECiH4l1CRSl
s27WfDRaKTMlEVOhPxGZWZ0Tbm17VG59QIMilRGnMAjvZN6PhGK09QeJzcPQptZh
ZQKE5xCOtQt94lf8mWtlD60tEClDGdE3KNQdW937eIniXZm6fGO5duhJf16SsZJV
8D9uqajk/YHf4gjs21EsGiWH4AdHiHjoVr0LpT1nPEkNTP+Ems43HPSFeSUB9fab
PGbqJSCb0lWnuZXLqY1OToHrc7kDQethCagG3OYOOIfvdczGLzyI5HvbOD3BxJdI
jeV8eCEargLJzI+ZXOUg35Wi3iXdt+t0qjHdPwIEfdQl3R5aSC4p++ltsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaViR82409WkRPbxoOzb2FmILa3MB8GA1UdIwQY
MBaAFAPJ6k+WWIsWvU/KONTB3fZcGr/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2Nzct
MWNkMzNjNjJjNDVjLzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2NzctMWNkMzNjNjJjNDVj
LzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhE/k4V1e
Jw6SXfLloIPl6IAYx2WsOyhVcNsH1gMx/kVn6gcOfNcFk10rMot/l51c4ZxwDrY+
r1ngN6ZNWiK951vwQhJk7527t0p3Zj+CNOhfG4ptAmY9wDBJ1XZicey/2MSkuHxC
heyAk/LkRtXyVRC2M4kZZ22KK/6Hl7qJlSjG1g46WUFDh/YxEfRW8NUFxo7RuEOj
F55wLajz6+LjhqX6v7y8SjGHqiV2+kXwODcPnB1QKijMdraiw43376dRjrP3N6lJ
5aJKF4qTIoICjwJu5vYoRD4tGfwvCbUGHk4NHlcmR36461pk8zUkk1eNReou/T23
x71xJB1lzUhtig==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:03 2026 by rpki-client