Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
File: 0aJ0TmbValnwtKDjDNEUqusVJzM.mft (raw, json)
Hash identifier: J5UuVuR9I3Uop+YVGdxhuNkreD3/vfT96JHg5UXk0KE=
Subject key identifier: 8F:EF:69:12:74:A2:FD:65:ED:CF:AF:B6:54:B0:A8:F2:77:F4:C5:04
Authority key identifier: D1:A2:74:4E:66:D5:6A:59:F0:B4:A0:E3:0C:D1:14:AA:EB:15:27:33
Certificate issuer: /CN=d1a2744e66d56a59f0b4a0e30cd114aaeb152733
Certificate serial: 01A13E94E062130162422B00377F96ADDE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
Manifest number: F4
Signing time: Thu 15 Oct 2026 08:01:46 +0000
Manifest this update: Thu 15 Oct 2026 08:01:46 +0000
Manifest next update: Fri 16 Oct 2026 08:01:46 +0000
Files and hashes: 1: 0aJ0TmbValnwtKDjDNEUqusVJzM.crl (hash: 0wS6eISGJsDRliOik48AanFRwrkLPojYcBj2jYBODyo=)
2: ceyUVnmYWQ_dIwIKpX64k6Y4OLY.roa (hash: ptX3G2iVrVq3xSTlraGgIQKayhp9ftrtJBYKoRwKsRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:e0:62:13:01:62:42:2b:00:37:7f:96:ad:de:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a2744e66d56a59f0b4a0e30cd114aaeb152733
Validity
Not Before: Oct 15 08:01:46 2026 GMT
Not After : Oct 16 08:01:46 2026 GMT
Subject: CN=8fef691274a2fd65edcfafb654b0a8f277f4c504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:9c:7f:90:a0:63:a7:8a:ee:ee:3e:2a:55:
fe:bd:8c:27:f9:e3:32:8e:f7:4c:4c:35:17:7e:3e:
6a:23:02:4f:8f:d5:1d:fd:54:64:77:35:14:05:c9:
4f:b5:2d:d1:6b:a4:5f:8f:f0:82:7d:31:26:da:6b:
cd:aa:86:a9:c8:c2:a0:90:f7:11:47:23:48:8a:6d:
17:1c:5b:45:08:1d:80:ff:6b:bd:69:b5:3c:4a:0a:
59:59:a5:e9:c9:e8:08:e2:7c:2d:f1:ed:fe:08:09:
d1:71:5f:be:52:ca:61:59:49:65:5d:8b:a0:e7:bb:
47:33:36:75:33:3e:09:16:3d:f2:c1:06:8c:2f:3a:
c1:a6:14:ba:8a:c4:f4:e0:eb:ab:04:c8:5c:c4:33:
20:59:0b:8d:a8:c0:be:e3:cb:6a:52:78:aa:c7:c3:
59:82:fa:93:aa:09:fe:24:ff:5b:10:0b:1b:4a:06:
25:b7:f8:6d:16:7c:5f:0b:da:c9:ee:80:f7:f9:b5:
f7:2f:dd:58:5b:00:a4:4f:34:f8:b9:3e:29:8f:d1:
69:33:60:bf:06:54:d7:dd:30:11:a1:ef:1a:28:26:
5c:ee:a5:e3:05:70:08:55:0c:4a:88:ca:3c:04:d9:
ba:29:68:62:70:fd:75:fb:87:f2:6a:f8:07:bb:31:
cb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EF:69:12:74:A2:FD:65:ED:CF:AF:B6:54:B0:A8:F2:77:F4:C5:04
X509v3 Authority Key Identifier:
keyid:D1:A2:74:4E:66:D5:6A:59:F0:B4:A0:E3:0C:D1:14:AA:EB:15:27:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aJ0TmbValnwtKDjDNEUqusVJzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5dbfe1-e49f-421b-a755-a983866070cb/1/0aJ0TmbValnwtKDjDNEUqusVJzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1c:6c:54:65:4a:be:43:27:31:33:e3:28:ef:b9:f8:f0:10:
2f:8a:7c:4b:52:44:1f:57:cc:1e:ce:d5:0e:ee:80:2b:bd:a2:
4a:fc:46:6a:37:6a:2d:af:77:13:65:55:e1:b6:78:a0:36:aa:
43:30:8b:dc:06:0a:e9:53:07:b7:3e:e6:64:fa:af:52:05:ee:
5e:28:8a:36:0f:2a:75:61:26:70:f3:bb:9e:19:60:66:11:79:
b1:2a:bf:a6:7c:e7:73:f7:73:73:3c:7c:3c:ba:91:a1:8b:51:
da:61:d2:b3:27:ee:d8:9f:13:b6:ce:87:ed:ac:d5:b7:12:9b:
98:24:cf:9b:f8:4f:c0:0b:f6:33:0c:37:84:91:09:c0:e8:0b:
3e:e4:e2:ed:fb:6b:b4:29:9c:cd:76:08:6c:d4:d5:f8:17:ec:
a1:d8:25:07:ae:db:7d:9b:5d:25:b0:3f:2e:60:1a:31:29:6b:
74:cb:71:91:cb:52:90:5d:a1:97:bb:36:a3:3f:68:f8:9b:c4:
73:eb:e3:da:9a:b4:8f:60:4d:a4:34:c5:7a:ad:7f:eb:1a:9e:
a5:6c:d1:c4:26:8f:23:8b:24:31:07:70:ea:96:b2:5c:83:85:
4e:36:2c:0c:6a:78:7d:f7:2d:ad:01:6e:d6:95:28:db:61:b1:
43:72:30:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+lOBiEwFiQisAN3+Wrd5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYTI3NDRlNjZkNTZhNTlmMGI0YTBlMzBjZDExNGFhZWIx
NTI3MzMwHhcNMjYxMDE1MDgwMTQ2WhcNMjYxMDE2MDgwMTQ2WjAzMTEwLwYDVQQD
Eyg4ZmVmNjkxMjc0YTJmZDY1ZWRjZmFmYjY1NGIwYThmMjc3ZjRjNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqOcf5CgY6eK7u4+KlX+vYwn+eMy
jvdMTDUXfj5qIwJPj9Ud/VRkdzUUBclPtS3Ra6Rfj/CCfTEm2mvNqoapyMKgkPcR
RyNIim0XHFtFCB2A/2u9abU8SgpZWaXpyegI4nwt8e3+CAnRcV++UsphWUllXYug
57tHMzZ1Mz4JFj3ywQaMLzrBphS6isT04OurBMhcxDMgWQuNqMC+48tqUniqx8NZ
gvqTqgn+JP9bEAsbSgYlt/htFnxfC9rJ7oD3+bX3L91YWwCkTzT4uT4pj9FpM2C/
BlTX3TARoe8aKCZc7qXjBXAIVQxKiMo8BNm6KWhicP11+4fyavgHuzHLvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/vaRJ0ov1l7c+vtlSwqPJ39MUEMB8GA1UdIwQY
MBaAFNGidE5m1WpZ8LSg4wzRFKrrFSczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGFKMFRtYlZhbG53dEtEakRORVVxdXNWSnpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ZGJmZTEtZTQ5Zi00MjFiLWE3NTUt
YTk4Mzg2NjA3MGNiLzEvMGFKMFRtYlZhbG53dEtEakRORVVxdXNWSnpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81ZGJmZTEtZTQ5Zi00MjFiLWE3NTUtYTk4Mzg2NjA3MGNi
LzEvMGFKMFRtYlZhbG53dEtEakRORVVxdXNWSnpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhxsVGVK
vkMnMTPjKO+5+PAQL4p8S1JEH1fMHs7VDu6AK72iSvxGajdqLa93E2VV4bZ4oDaq
QzCL3AYK6VMHtz7mZPqvUgXuXiiKNg8qdWEmcPO7nhlgZhF5sSq/pnznc/dzczx8
PLqRoYtR2mHSsyfu2J8Tts6H7azVtxKbmCTPm/hPwAv2Mww3hJEJwOgLPuTi7ftr
tCmczXYIbNTV+BfsodglB67bfZtdJbA/LmAaMSlrdMtxkctSkF2hl7s2oz9o+JvE
c+vj2pq0j2BNpDTFeq1/6xqepWzRxCaPI4skMQdw6payXIOFTjYsDGp4ffctrQFu
1pUo22GxQ3Iw1Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 16:24:57 2026 by rpki-client