Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
File: Cad0S6nE8QGkiT5HlnacSRNRBns.mft (raw, json)
Hash identifier: /pT6BGanA7cyL5vic3URuPC382vSLZKxK9vseQVD7T4=
Subject key identifier: 30:C8:D7:9B:A4:75:5C:36:4E:7D:0E:C5:00:B0:41:86:EC:A6:1E:19
Authority key identifier: 09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
Certificate issuer: /CN=09a7744ba9c4f101a4893e4796769c491351067b
Certificate serial: 01A03D4E320EB245E8B54C1F9B41DCC363BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
Manifest number: 011F
Signing time: Wed 26 Aug 2026 09:02:09 +0000
Manifest this update: Wed 26 Aug 2026 09:02:09 +0000
Manifest next update: Thu 27 Aug 2026 09:02:09 +0000
Files and hashes: 1: 6ktBmS6SHlobAW5cvJeOvutHtZs.asa (hash: 7DpGNlMiGk8A1TQJ6XbwsyG1xZX9cAbn/j2aQrzkLSo=)
2: Cad0S6nE8QGkiT5HlnacSRNRBns.crl (hash: 6kkf2k+/KPX2DVkTRV9SUv850aoH/GpzIxBkWR6g4UI=)
3: P4cDGWr4IUzLM9lVW7E5k2o6h84.roa (hash: vGdbqg/8XvG5GvERHecgi5UEllssjDGD9X9pB1AdTEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:4e:32:0e:b2:45:e8:b5:4c:1f:9b:41:dc:c3:63:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a7744ba9c4f101a4893e4796769c491351067b
Validity
Not Before: Aug 26 09:02:09 2026 GMT
Not After : Aug 27 09:02:09 2026 GMT
Subject: CN=30c8d79ba4755c364e7d0ec500b04186eca61e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:f0:1f:05:fc:78:0f:87:62:48:8c:bd:d2:
57:08:92:fa:01:85:ff:20:5f:9e:7c:ca:07:58:95:
d8:81:40:ba:c1:6b:80:08:a2:bf:ff:45:24:e0:90:
77:a0:9c:18:71:90:00:1f:28:d1:36:59:5e:5d:a8:
c9:d8:c9:00:fd:00:71:ab:3a:d6:95:5c:3c:86:75:
f4:c8:55:d4:2c:0d:42:6e:73:a4:44:7e:47:18:88:
d7:f0:1c:f9:71:54:fa:e6:1f:e7:a3:fd:90:ea:2c:
60:94:bd:4f:18:57:b5:b4:08:ec:f4:44:e5:a9:63:
e9:0c:1e:6c:dd:f2:87:d9:06:b0:6f:f2:f3:f5:ed:
94:f4:0b:9b:e7:38:bb:cc:79:25:24:7e:a8:01:80:
b1:7b:26:65:0b:c9:1f:0b:e5:c9:d2:4c:06:87:fc:
ff:23:e2:d4:3f:ec:1d:fa:46:bf:94:f3:9a:eb:1d:
c5:e7:b6:ae:33:e1:72:09:ac:29:2a:27:61:98:87:
f0:05:76:2a:c8:11:77:79:d1:41:f6:49:83:01:51:
da:6b:b3:09:32:54:0a:bf:4b:08:29:31:60:f7:0b:
61:79:b0:b4:fc:08:a6:02:f5:3e:6c:e6:61:70:6b:
1f:7a:8c:ca:f6:e2:fd:51:d5:64:1c:16:59:9a:d4:
27:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C8:D7:9B:A4:75:5C:36:4E:7D:0E:C5:00:B0:41:86:EC:A6:1E:19
X509v3 Authority Key Identifier:
keyid:09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:6f:d8:ef:0c:9d:be:13:ad:65:63:ab:8e:4c:bd:93:d3:91:
49:2c:c9:fc:3f:2f:ee:4c:bd:e7:8f:8c:47:88:15:6f:77:bf:
43:69:7f:dd:8e:28:e6:48:8b:98:82:d2:0c:55:dd:0e:91:f7:
04:d5:20:08:57:26:4d:9d:58:3d:a5:d9:d3:9c:5e:11:cb:de:
64:e5:cb:00:ba:a9:54:93:6f:dc:b7:54:6e:f5:20:9c:a4:ee:
4a:16:3c:e4:aa:53:13:de:b1:df:04:ec:fb:d1:b4:e1:79:8a:
7b:3f:e7:8b:cb:a0:08:cd:2f:ea:61:6e:fd:54:b6:51:ae:61:
03:d7:a1:13:04:c0:ae:4d:c3:e6:ad:b2:cf:e2:8b:01:62:e1:
dd:23:c2:44:e3:f9:04:d2:26:27:38:9e:40:72:97:6c:e5:89:
e3:1b:aa:db:de:9a:ec:b1:bd:78:d9:bf:04:d8:05:9b:db:72:
21:f5:62:ed:de:cd:a3:b8:61:62:35:8f:7e:a7:b8:dc:bf:a2:
4d:28:23:9f:21:3a:56:51:8f:2a:2c:f4:82:58:a3:1f:8e:09:
cb:65:07:53:f3:1b:dc:22:58:0c:c5:a7:cf:9f:6d:47:b0:6c:
ca:41:88:bf:b0:6d:d9:e1:d7:f0:2c:bc:67:76:b8:1e:af:0d:
ba:b7:07:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA9TjIOskXotUwfm0Hcw2O8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTc3NDRiYTljNGYxMDFhNDg5M2U0Nzk2NzY5YzQ5MTM1
MTA2N2IwHhcNMjYwODI2MDkwMjA5WhcNMjYwODI3MDkwMjA5WjAzMTEwLwYDVQQD
EygzMGM4ZDc5YmE0NzU1YzM2NGU3ZDBlYzUwMGIwNDE4NmVjYTYxZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3XwHwX8eA+HYkiMvdJXCJL6AYX/
IF+efMoHWJXYgUC6wWuACKK//0Uk4JB3oJwYcZAAHyjRNlleXajJ2MkA/QBxqzrW
lVw8hnX0yFXULA1CbnOkRH5HGIjX8Bz5cVT65h/no/2Q6ixglL1PGFe1tAjs9ETl
qWPpDB5s3fKH2Qawb/Lz9e2U9Aub5zi7zHklJH6oAYCxeyZlC8kfC+XJ0kwGh/z/
I+LUP+wd+ka/lPOa6x3F57auM+FyCawpKidhmIfwBXYqyBF3edFB9kmDAVHaa7MJ
MlQKv0sIKTFg9wthebC0/AimAvU+bOZhcGsfeozK9uL9UdVkHBZZmtQnCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDI15ukdVw2Tn0OxQCwQYbsph4ZMB8GA1UdIwQY
MBaAFAmndEupxPEBpIk+R5Z2nEkTUQZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FkMFM2bkU4UUdraVQ1SGxuYWNTUk5SQm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NWExOTAtMDJhYS00M2JmLThlMDYt
OTcyNzgzNDFhNjFmLzEvQ2FkMFM2bkU4UUdraVQ1SGxuYWNTUk5SQm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NWExOTAtMDJhYS00M2JmLThlMDYtOTcyNzgzNDFhNjFm
LzEvQ2FkMFM2bkU4UUdraVQ1SGxuYWNTUk5SQm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwG/Y7wyd
vhOtZWOrjky9k9ORSSzJ/D8v7ky954+MR4gVb3e/Q2l/3Y4o5kiLmILSDFXdDpH3
BNUgCFcmTZ1YPaXZ05xeEcveZOXLALqpVJNv3LdUbvUgnKTuShY85KpTE96x3wTs
+9G04XmKez/ni8ugCM0v6mFu/VS2Ua5hA9ehEwTArk3D5q2yz+KLAWLh3SPCROP5
BNImJzieQHKXbOWJ4xuq296a7LG9eNm/BNgFm9tyIfVi7d7No7hhYjWPfqe43L+i
TSgjnyE6VlGPKiz0glijH44Jy2UHU/Mb3CJYDMWnz59tR7BsykGIv7Bt2eHX8Cy8
Z3a4Hq8NurcHyA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:08:17 2026 by rpki-client