Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: 6GqL40C/WrC/CpFPiTK3OGd/NfRub3xe4/n5f4qP51c=
Subject key identifier: EA:5C:36:06:5E:F5:C5:25:E8:26:B1:90:71:0F:4C:D2:2B:7C:C9:FB
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 01A000CABD878F3B7D51C353C7526D230A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 15:01:21 +0000
Manifest this update: Fri 14 Aug 2026 15:01:21 +0000
Manifest next update: Sat 15 Aug 2026 15:01:21 +0000
Files and hashes: 1: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: A6KrOR9M3T1FdHmZZm1d0A0zEqoqB3/ishbXy8b3QqA=)
2: swB-_KyWrdCTLsFeJA5Bb0yEuQw.roa (hash: Xe4yfVJ7GclnsKO5T3vlkkQQQKjDz34ASisy6nJh1ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:bd:87:8f:3b:7d:51:c3:53:c7:52:6d:23:0a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Aug 14 15:01:21 2026 GMT
Not After : Aug 15 15:01:21 2026 GMT
Subject: CN=ea5c36065ef5c525e826b190710f4cd22b7cc9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:66:d0:db:15:a2:98:95:d6:53:c7:9f:77:
ff:12:7d:cc:5e:49:2a:d8:08:65:f9:50:e0:fb:e7:
ed:8f:80:28:aa:95:bc:71:37:c8:c6:03:5c:d8:d6:
b2:93:1b:4f:77:f7:4b:c2:f5:b5:29:58:17:1e:1e:
e9:38:f4:55:28:05:48:99:3d:7e:15:bf:8f:ae:bc:
92:80:56:5f:46:e8:f2:0d:a7:d2:b8:8c:00:f3:03:
4b:8a:57:e1:d2:f9:f3:81:37:fe:6e:3e:0d:1b:6c:
ca:b4:a3:8a:91:76:ae:3c:ca:cb:d2:93:5e:97:79:
81:0c:e5:ea:d2:34:14:11:e8:c7:d2:97:b9:04:84:
33:81:cc:cd:08:31:3a:fe:d4:7b:05:15:2c:d1:9d:
d8:c1:aa:46:0c:6c:46:2f:40:e3:69:a4:b7:96:1b:
6c:3e:67:1c:29:77:a0:de:c3:68:20:69:1f:73:ad:
d7:e5:07:03:51:59:72:98:63:57:ab:6d:dc:ea:6c:
41:92:f3:04:77:35:b1:57:d3:73:00:74:e0:8d:45:
83:9c:cc:7b:e7:18:76:f7:47:41:c5:0e:a3:ce:8d:
13:c4:0f:99:52:95:ab:b6:41:d8:28:4c:95:da:c2:
7c:e4:d3:0e:db:03:40:a6:88:16:ba:31:87:7c:b8:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:36:06:5E:F5:C5:25:E8:26:B1:90:71:0F:4C:D2:2B:7C:C9:FB
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2d:7c:3b:20:2b:62:c5:ee:22:d5:57:23:07:a6:8a:5e:d9:
9f:e0:24:95:31:36:fc:36:9b:2b:02:ea:91:7a:c3:f1:a4:10:
ff:64:a0:75:bb:5d:3f:8e:b2:04:35:7e:ea:c4:a7:cc:ad:6e:
a9:57:49:5e:9e:72:d6:c5:74:fb:55:45:1b:50:15:e8:c3:fb:
80:df:17:26:d8:77:2d:30:73:0e:37:93:76:25:27:38:5d:45:
62:a9:61:9e:9d:a3:33:31:84:d3:0f:4f:4b:0d:c5:54:ac:9a:
f4:c6:6a:31:29:1b:41:c5:03:da:e2:5d:72:a2:9e:9d:dc:27:
fa:b7:bb:21:f9:37:b1:90:0f:04:12:f4:01:25:28:18:bb:63:
54:bd:a2:dc:25:b6:3b:40:a9:fa:1a:54:82:28:80:b7:56:a0:
f4:19:aa:de:9f:14:73:a2:8b:61:db:86:26:44:70:01:1c:37:
51:94:fe:bb:6c:40:d6:e5:f3:e6:9c:25:2b:4c:2a:62:93:bd:
8c:53:00:dd:9a:4a:dd:a6:26:85:2e:77:92:38:9c:dd:d3:51:
ab:4b:09:97:e1:75:f2:ac:51:e1:f8:4a:86:50:e3:10:73:a9:
1d:37:79:e5:78:91:5c:ca:2f:9c:f6:cc:8b:21:d0:97:e9:19:
bf:ed:5a:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyr2Hjzt9UcNTx1JtIwpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOGI5OTYzYzk3MmMxZDdhMDNkZjk2ZmFkMjVmNjhlYmQ0
ZmExNDkwHhcNMjYwODE0MTUwMTIxWhcNMjYwODE1MTUwMTIxWjAzMTEwLwYDVQQD
EyhlYTVjMzYwNjVlZjVjNTI1ZTgyNmIxOTA3MTBmNGNkMjJiN2NjOWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ahm0NsVopiV1lPHn3f/En3MXkkq
2Ahl+VDg++ftj4AoqpW8cTfIxgNc2NaykxtPd/dLwvW1KVgXHh7pOPRVKAVImT1+
Fb+PrrySgFZfRujyDafSuIwA8wNLilfh0vnzgTf+bj4NG2zKtKOKkXauPMrL0pNe
l3mBDOXq0jQUEejH0pe5BIQzgczNCDE6/tR7BRUs0Z3YwapGDGxGL0DjaaS3lhts
PmccKXeg3sNoIGkfc63X5QcDUVlymGNXq23c6mxBkvMEdzWxV9NzAHTgjUWDnMx7
5xh290dBxQ6jzo0TxA+ZUpWrtkHYKEyV2sJ85NMO2wNApogWujGHfLgfYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpcNgZe9cUl6CaxkHEPTNIrfMn7MB8GA1UdIwQY
MBaAFAOLmWPJcsHXoD35b60l9o69T6FJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWIt
NjE2M2I5OTdiNjQyLzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWItNjE2M2I5OTdiNjQy
LzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAai18OyAr
YsXuItVXIwemil7Zn+AklTE2/DabKwLqkXrD8aQQ/2SgdbtdP46yBDV+6sSnzK1u
qVdJXp5y1sV0+1VFG1AV6MP7gN8XJth3LTBzDjeTdiUnOF1FYqlhnp2jMzGE0w9P
Sw3FVKya9MZqMSkbQcUD2uJdcqKendwn+re7Ifk3sZAPBBL0ASUoGLtjVL2i3CW2
O0Cp+hpUgiiAt1ag9Bmq3p8Uc6KLYduGJkRwARw3UZT+u2xA1uXz5pwlK0wqYpO9
jFMA3ZpK3aYmhS53kjic3dNRq0sJl+F18qxR4fhKhlDjEHOpHTd55XiRXMovnPbM
iyHQl+kZv+1a4g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:05 2026 by rpki-client