Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: eqnUmDuiBzJ/l2hZ4BLwygwV2XwdoEmYnlovRkLnAAw=
Subject key identifier: EE:02:19:84:12:50:B4:27:A1:A9:AE:6F:5D:03:DF:ED:14:7C:D3:1D
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 01A13DB7CCDCFF1BB3B30045D333E4FEA6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0BBC
Signing time: Thu 15 Oct 2026 04:00:17 +0000
Manifest this update: Thu 15 Oct 2026 04:00:17 +0000
Manifest next update: Fri 16 Oct 2026 04:00:17 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: IgDnXk2nOmWLPilrn/KLCn8hZAh7HTT1dzPtmNIARw0=)
2: D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa (hash: JQkmlm3wSiHNU9bdVvmkiiM/K5jDVTyxbR5FyQCgkBg=)
3: c-3D-JWEMNYpFr0OkfWw6Z5_0l4.asa (hash: 7Gsn7n6A+iYMiklATJ7+ozuNVLrMFidaVQkY6zW8H1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:cc:dc:ff:1b:b3:b3:00:45:d3:33:e4:fe:a6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Oct 15 04:00:17 2026 GMT
Not After : Oct 16 04:00:17 2026 GMT
Subject: CN=ee0219841250b427a1a9ae6f5d03dfed147cd31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:75:2e:d9:d9:7e:cf:1c:9f:f8:bb:07:65:0b:
9a:33:72:16:57:77:81:4b:57:50:c3:98:ed:df:42:
cc:ab:f8:ab:cb:2c:32:75:32:86:d9:f2:7b:f4:84:
f9:da:d7:08:07:91:5c:25:32:a0:0f:9e:28:18:6c:
03:f1:8a:2e:27:6a:45:56:75:07:57:0c:75:ec:f5:
2c:0c:d2:a5:63:21:53:96:40:5d:05:c2:1b:1f:8e:
11:0b:b0:27:a2:fc:a8:2a:ea:79:7d:0f:42:aa:ce:
7a:41:61:4e:b9:ee:0f:1e:6c:aa:69:6a:86:33:bd:
fc:e9:93:ee:a8:65:3b:7c:ee:63:23:d8:b4:82:5c:
09:7d:5e:20:13:5f:b3:b3:8f:17:47:f0:d7:71:ec:
e8:83:76:45:16:f4:e5:98:4f:88:db:7f:85:a9:20:
0b:66:b7:a7:82:10:18:f4:47:66:06:97:25:00:2f:
4e:7b:4f:35:ab:9b:81:22:0f:0a:a5:a9:87:ad:14:
65:d4:65:bb:2f:21:ef:08:45:ab:b0:42:be:be:90:
f0:f6:21:41:6a:57:3f:5d:26:bf:2d:be:68:7b:a7:
96:2e:17:ce:a0:68:7b:91:96:f4:88:0c:3f:c7:d4:
26:56:1c:e9:0f:c7:3b:e0:15:39:b6:f8:3d:d5:2e:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:02:19:84:12:50:B4:27:A1:A9:AE:6F:5D:03:DF:ED:14:7C:D3:1D
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:19:ab:78:b8:8c:12:b7:fa:5e:68:0b:41:8f:4e:d9:10:c5:
64:59:b7:a4:90:2d:8a:ee:41:be:f5:87:56:c0:41:86:36:17:
61:b3:b7:f9:4d:38:fd:e0:7c:27:7b:41:75:ff:a1:bc:83:69:
33:5d:34:8e:6f:94:8c:52:f1:4f:0a:2e:e2:a4:b6:0d:af:29:
8d:eb:6a:a8:d3:8c:30:2f:8a:69:0c:75:dd:e5:ae:1d:4f:44:
f0:0c:7b:7e:fc:25:d5:89:23:da:46:db:1b:b8:c6:fc:89:ee:
63:59:5c:13:23:5f:5c:00:f6:a7:59:32:64:2e:dc:66:1a:c4:
8d:e7:1e:6a:3f:75:95:a1:ab:76:0d:64:84:a1:33:c1:8f:b6:
25:ca:36:12:e2:7b:cc:42:65:82:25:c7:a5:3d:ac:1f:37:0e:
b0:a7:66:6a:f2:a7:82:12:86:21:d8:f1:8c:19:89:3f:0a:74:
91:da:ef:3e:e6:c0:87:20:21:72:c1:b7:a5:61:22:dd:67:66:
bf:fc:62:38:9e:fc:70:8a:83:21:da:bc:39:70:88:41:7b:e7:
05:d7:60:cc:12:ad:d9:52:8d:3a:c1:97:7a:9d:8b:7e:76:c0:
18:47:78:45:9c:56:d4:7a:bd:15:2f:e2:71:38:82:44:17:87:
69:12:20:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9t8zc/xuzswBF0zPk/qa/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzE2OGVjNTk3YTNhMzc3NDJjYjRkZWQ3ODM1NmYxNDU0
ZjJiYWQwHhcNMjYxMDE1MDQwMDE3WhcNMjYxMDE2MDQwMDE3WjAzMTEwLwYDVQQD
EyhlZTAyMTk4NDEyNTBiNDI3YTFhOWFlNmY1ZDAzZGZlZDE0N2NkMzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnUu2dl+zxyf+LsHZQuaM3IWV3eB
S1dQw5jt30LMq/iryywydTKG2fJ79IT52tcIB5FcJTKgD54oGGwD8YouJ2pFVnUH
Vwx17PUsDNKlYyFTlkBdBcIbH44RC7AnovyoKup5fQ9Cqs56QWFOue4PHmyqaWqG
M7386ZPuqGU7fO5jI9i0glwJfV4gE1+zs48XR/DXcezog3ZFFvTlmE+I23+FqSAL
ZrenghAY9EdmBpclAC9Oe081q5uBIg8KpamHrRRl1GW7LyHvCEWrsEK+vpDw9iFB
alc/XSa/Lb5oe6eWLhfOoGh7kZb0iAw/x9QmVhzpD8c74BU5tvg91S5gTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4CGYQSULQnoamub10D3+0UfNMdMB8GA1UdIwQY
MBaAFALBaOxZejo3dCy03teDVvFFTyutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDIt
NjFkNTc1MjQxYzFmLzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDItNjFkNTc1MjQxYzFm
LzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRmreLiM
Erf6XmgLQY9O2RDFZFm3pJAtiu5BvvWHVsBBhjYXYbO3+U04/eB8J3tBdf+hvINp
M100jm+UjFLxTwou4qS2Da8pjetqqNOMMC+KaQx13eWuHU9E8Ax7fvwl1Ykj2kbb
G7jG/InuY1lcEyNfXAD2p1kyZC7cZhrEjeceaj91laGrdg1khKEzwY+2Jco2EuJ7
zEJlgiXHpT2sHzcOsKdmavKnghKGIdjxjBmJPwp0kdrvPubAhyAhcsG3pWEi3Wdm
v/xiOJ78cIqDIdq8OXCIQXvnBddgzBKt2VKNOsGXep2LfnbAGEd4RZxW1Hq9FS/i
cTiCRBeHaRIgDQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:03 2026 by rpki-client