Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: GelSjmEEotBrriIQAfC1vyntREpPARRvzZ0OhM7Yi78=
Subject key identifier: 97:50:08:A5:6C:61:F5:C7:40:9A:C5:AF:E7:1A:A4:F2:38:69:2C:57
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 01A1540957F11DFF7931D0396E8B02529548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 05D5
Signing time: Mon 19 Oct 2026 12:01:00 +0000
Manifest this update: Mon 19 Oct 2026 12:01:00 +0000
Manifest next update: Tue 20 Oct 2026 12:01:00 +0000
Files and hashes: 1: A9rhd59_7voAjZbMragLA3ftrbw.roa (hash: jQKHOIkJndimLRm6Iut1TREkFlVZwkrcXKBUSUJBxdk=)
2: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: vyH9Rwz4cJWbCariHR6MyhRE4GOSpu31zNunn87wOYk=)
3: ofJXmIsyK_jDudPiA8bDAQbKAlU.roa (hash: +olJpgKdSnPRSUcTlissuMFWoxiuQFVYufPs4uhUsXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:09:57:f1:1d:ff:79:31:d0:39:6e:8b:02:52:95:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Oct 19 12:01:00 2026 GMT
Not After : Oct 20 12:01:00 2026 GMT
Subject: CN=975008a56c61f5c7409ac5afe71aa4f238692c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:3b:51:fa:4d:53:60:38:22:9c:6c:cd:e5:
be:15:72:23:1a:1f:07:30:7d:d7:88:66:77:a9:a7:
71:b9:a2:7f:02:7f:3a:eb:b9:7d:d8:03:90:39:14:
aa:ea:ab:62:bf:bf:3d:5e:59:9d:90:df:c4:05:30:
a3:81:36:ac:00:88:18:a9:98:7f:9f:cc:ba:2a:05:
37:e0:1c:5f:c9:aa:30:fd:65:c1:ba:f7:e4:70:24:
15:dd:aa:29:d5:a8:56:a4:42:81:9c:d6:0e:85:28:
81:3a:97:c3:7b:9c:8a:88:cf:26:5e:ab:7c:10:26:
37:81:77:80:9e:55:bd:bc:02:5d:89:1c:d7:40:cc:
d7:e5:7f:4a:72:1b:94:00:da:26:41:9a:4d:33:3f:
b2:5c:e0:72:db:e9:86:31:e4:e1:5f:2f:aa:0c:69:
66:3c:dd:eb:91:a3:47:e4:0b:b3:e7:f2:43:28:53:
80:ec:87:fe:d2:0a:d0:8c:19:35:d9:6d:ac:64:16:
92:65:e8:0d:8c:73:c7:c1:50:5e:eb:b7:f7:de:8b:
3b:e8:4e:2c:cb:7c:36:6a:10:5d:20:72:58:7a:b3:
4b:3c:37:4a:e6:35:22:cb:35:29:a6:60:7d:53:3c:
f4:33:b5:65:81:8c:ef:11:2c:1d:5d:c1:c9:f7:89:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:50:08:A5:6C:61:F5:C7:40:9A:C5:AF:E7:1A:A4:F2:38:69:2C:57
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:22:4d:37:5c:6a:fb:71:27:02:9c:48:ae:59:f5:70:78:03:
6b:7f:7e:0c:84:4f:4d:a1:7c:a9:b4:46:32:90:3a:31:eb:dd:
03:1a:08:7b:55:ae:4c:aa:39:43:f2:14:b9:09:8b:f8:87:62:
7a:e0:be:aa:1e:00:6c:6a:02:95:a8:57:47:d5:37:aa:42:7f:
93:72:60:1d:2f:51:44:45:6e:95:9b:e8:b5:dd:c2:8b:ca:d8:
0b:b3:1b:2a:1f:ff:f1:bd:a4:4a:e0:4d:d9:97:8c:19:9a:33:
af:bc:ec:0f:21:da:31:3b:2f:b1:74:75:91:7d:8d:d5:60:46:
b7:55:de:14:00:f2:0e:13:c9:40:a5:9f:fd:22:54:c7:a8:5d:
77:7e:5c:58:5a:e7:ed:7f:ba:1e:06:79:89:02:ea:38:a4:07:
83:ba:65:18:89:e7:3e:9b:fa:5b:1a:1b:53:e4:fc:3e:f7:61:
db:74:21:24:f3:9a:3b:5d:59:61:97:e2:5b:ba:d4:20:1e:33:
be:a9:73:6d:38:21:cc:00:ff:24:23:66:3f:7c:ba:f5:93:ab:
47:9c:26:44:09:0e:80:38:e8:64:ee:2e:db:55:f5:30:c4:3e:
39:9d:62:e8:70:11:a6:93:6e:0b:15:e3:04:86:b5:05:f4:c9:
0c:fb:8b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFUCVfxHf95MdA5bosCUpVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWYwZTY2NWE5Yzc0MjIzYzRiZmUyNzBhMTY1OWFkZTRj
ZWYzMWYwHhcNMjYxMDE5MTIwMTAwWhcNMjYxMDIwMTIwMTAwWjAzMTEwLwYDVQQD
Eyg5NzUwMDhhNTZjNjFmNWM3NDA5YWM1YWZlNzFhYTRmMjM4NjkyYzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7I7UfpNU2A4IpxszeW+FXIjGh8H
MH3XiGZ3qadxuaJ/An8667l92AOQORSq6qtiv789XlmdkN/EBTCjgTasAIgYqZh/
n8y6KgU34Bxfyaow/WXBuvfkcCQV3aop1ahWpEKBnNYOhSiBOpfDe5yKiM8mXqt8
ECY3gXeAnlW9vAJdiRzXQMzX5X9KchuUANomQZpNMz+yXOBy2+mGMeThXy+qDGlm
PN3rkaNH5Auz5/JDKFOA7If+0grQjBk12W2sZBaSZegNjHPHwVBe67f33os76E4s
y3w2ahBdIHJYerNLPDdK5jUiyzUppmB9Uzz0M7VlgYzvESwdXcHJ94mgdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdQCKVsYfXHQJrFr+capPI4aSxXMB8GA1UdIwQY
MBaAFAFfDmZanHQiPEv+JwoWWa3kzvMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAt
ODY3N2IzZGQ4NzA3LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAtODY3N2IzZGQ4NzA3
LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCJNN1xq
+3EnApxIrln1cHgDa39+DIRPTaF8qbRGMpA6MevdAxoIe1WuTKo5Q/IUuQmL+Idi
euC+qh4AbGoClahXR9U3qkJ/k3JgHS9RREVulZvotd3Ci8rYC7MbKh//8b2kSuBN
2ZeMGZozr7zsDyHaMTsvsXR1kX2N1WBGt1XeFADyDhPJQKWf/SJUx6hdd35cWFrn
7X+6HgZ5iQLqOKQHg7plGInnPpv6WxobU+T8Pvdh23QhJPOaO11ZYZfiW7rUIB4z
vqlzbTghzAD/JCNmP3y69ZOrR5wmRAkOgDjoZO4u21X1MMQ+OZ1i6HARppNuCxXj
BIa1BfTJDPuLFg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:44:23 2026 by rpki-client