Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
File: v4CafmyhTQoal2Zz4DGeNOlW7T0.mft (raw, json)
Hash identifier: o1DNSw4YuznWlImgjtGGpidkK/KAQuHycOvf++ku9k0=
Subject key identifier: 5D:32:24:AB:47:46:07:2D:D1:35:33:EE:D0:99:80:53:78:5B:E6:48
Authority key identifier: BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
Certificate issuer: /CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Certificate serial: 01A001DCC7A4D05D85C407A513CC3134BBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
Manifest number: 1A0A
Signing time: Fri 14 Aug 2026 20:00:41 +0000
Manifest this update: Fri 14 Aug 2026 20:00:41 +0000
Manifest next update: Sat 15 Aug 2026 20:00:41 +0000
Files and hashes: 1: 0531BAkLXZV67nncfLvNCkjbh-k.roa (hash: euvg4/4Sr2jxjMgLytVs8+6OJsRY0QQOvsQOdksVnGQ=)
2: MgSoiC6Hu1yTUAZdbU-vK0dVtuc.roa (hash: a2ZSZdWNOxousuGf0RH1BivI79B+5I59lCuIYIMOr3Y=)
3: S0e9H4nYj-dsFcnpYcONEEZPd4E.roa (hash: NU7H83v507Zrj9FWzAhWcvmD14bF+kjt08VtHrtE1qY=)
4: rN2UtVdj6caj6yMxQCrHsSKZMvI.roa (hash: Z3x5j+qIaBAKVKD7voN6LPA49rIP+QJqgn0Mulf73dQ=)
5: v4CafmyhTQoal2Zz4DGeNOlW7T0.crl (hash: w4nuypzn2bawQY+OgN3b4f791v4vMvuOj0AnAcxADA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:c7:a4:d0:5d:85:c4:07:a5:13:cc:31:34:bb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf809a7e6ca14d0a1a976673e0319e34e956ed3d
Validity
Not Before: Aug 14 20:00:41 2026 GMT
Not After : Aug 15 20:00:41 2026 GMT
Subject: CN=5d3224ab4746072dd13533eed0998053785be648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:45:a3:a2:43:f4:57:b3:3d:92:39:c6:52:
15:18:e2:1f:05:d2:ad:f5:38:6e:9b:98:83:a6:43:
46:df:13:bb:bc:f5:da:77:bf:77:32:e2:80:76:be:
bf:e1:c7:b1:05:39:6b:9c:b5:d0:67:4b:86:dd:3d:
2f:7d:ab:b5:de:66:e5:ac:2a:3a:02:a5:8e:99:99:
f6:e0:f8:25:c3:b7:64:31:8e:fc:98:96:dd:c2:c1:
a4:f5:16:a8:fd:8c:42:c7:5a:7f:44:5e:45:ef:31:
e6:27:1b:3a:d2:61:0c:67:9a:8d:d2:fb:c7:3a:f1:
a5:83:67:be:60:0b:09:79:7f:aa:c7:b6:a5:de:e1:
dc:1e:db:d5:02:7c:ee:55:76:5a:68:50:0d:11:da:
d2:3f:b2:b5:b1:81:e0:fe:4f:97:f6:f8:c7:04:c8:
22:fb:4b:4f:86:47:96:1a:c4:be:00:e4:f7:b4:7b:
63:16:f7:7a:33:75:00:64:ef:87:36:8e:f3:98:ad:
75:3d:d1:47:56:14:5d:89:0b:1f:e5:ce:98:39:42:
0c:c2:f1:b2:c1:c1:74:42:b7:08:2c:f7:7c:70:aa:
0a:97:44:83:9d:51:f8:26:05:9e:04:bc:a7:6e:8f:
ec:b1:07:65:69:e5:53:69:91:b1:fd:22:fe:f5:61:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:32:24:AB:47:46:07:2D:D1:35:33:EE:D0:99:80:53:78:5B:E6:48
X509v3 Authority Key Identifier:
keyid:BF:80:9A:7E:6C:A1:4D:0A:1A:97:66:73:E0:31:9E:34:E9:56:ED:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4CafmyhTQoal2Zz4DGeNOlW7T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3a382a-3dda-4796-b320-3fdfb4140f24/1/v4CafmyhTQoal2Zz4DGeNOlW7T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:20:0c:55:54:0d:02:fe:13:83:51:e6:a7:83:7d:6d:b9:44:
ca:c0:80:5f:ef:70:d5:89:ca:d0:62:74:b1:51:80:8b:75:bc:
8b:46:0c:25:af:c5:9d:6e:77:06:d3:76:75:12:cd:2c:81:bc:
5c:63:af:e1:f3:36:8d:21:66:7d:9f:7d:7e:66:0e:05:6b:6a:
f6:91:ec:bd:9c:04:70:7b:41:56:4a:4a:f1:df:6b:91:68:22:
05:3b:ac:e3:51:54:97:39:ac:db:6a:03:ba:d3:c9:29:2c:96:
82:f5:3d:f3:d1:1a:28:c2:11:24:86:bb:c2:58:b4:fd:28:6e:
e1:64:0a:0e:22:9a:48:50:79:bc:4f:68:09:88:d9:36:54:b7:
13:3d:cc:6f:a4:f4:ec:d9:2a:57:bc:e9:08:11:d1:d5:f2:fc:
df:d0:c0:e0:62:e5:5c:13:40:2f:d0:d5:44:4a:53:17:e6:31:
8e:ec:6f:e3:ef:08:5a:57:29:01:90:ec:6e:81:4f:42:50:13:
9d:3f:df:c5:5d:a3:87:48:1a:c2:bc:12:57:88:da:9b:b3:58:
09:a3:80:9f:bb:d6:e5:78:d1:57:f1:87:75:95:ef:88:ab:f5:
fd:ac:a5:6b:1b:08:cf:00:7a:38:26:df:1e:90:1c:bc:8a:05:
26:6a:6a:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3Mek0F2FxAelE8wxNLvGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODA5YTdlNmNhMTRkMGExYTk3NjY3M2UwMzE5ZTM0ZTk1
NmVkM2QwHhcNMjYwODE0MjAwMDQxWhcNMjYwODE1MjAwMDQxWjAzMTEwLwYDVQQD
Eyg1ZDMyMjRhYjQ3NDYwNzJkZDEzNTMzZWVkMDk5ODA1Mzc4NWJlNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCRFo6JD9FezPZI5xlIVGOIfBdKt
9Thum5iDpkNG3xO7vPXad793MuKAdr6/4cexBTlrnLXQZ0uG3T0vfau13mblrCo6
AqWOmZn24Pglw7dkMY78mJbdwsGk9Rao/YxCx1p/RF5F7zHmJxs60mEMZ5qN0vvH
OvGlg2e+YAsJeX+qx7al3uHcHtvVAnzuVXZaaFANEdrSP7K1sYHg/k+X9vjHBMgi
+0tPhkeWGsS+AOT3tHtjFvd6M3UAZO+HNo7zmK11PdFHVhRdiQsf5c6YOUIMwvGy
wcF0QrcILPd8cKoKl0SDnVH4JgWeBLynbo/ssQdlaeVTaZGx/SL+9WEYtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0yJKtHRgct0TUz7tCZgFN4W+ZIMB8GA1UdIwQY
MBaAFL+Amn5soU0KGpdmc+AxnjTpVu09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYTM4MmEtM2RkYS00Nzk2LWIzMjAt
M2ZkZmI0MTQwZjI0LzEvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8zYTM4MmEtM2RkYS00Nzk2LWIzMjAtM2ZkZmI0MTQwZjI0
LzEvdjRDYWZteWhUUW9hbDJaejRER2VOT2xXN1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSAMVVQN
Av4Tg1Hmp4N9bblEysCAX+9w1YnK0GJ0sVGAi3W8i0YMJa/FnW53BtN2dRLNLIG8
XGOv4fM2jSFmfZ99fmYOBWtq9pHsvZwEcHtBVkpK8d9rkWgiBTus41FUlzms22oD
utPJKSyWgvU989EaKMIRJIa7wli0/Shu4WQKDiKaSFB5vE9oCYjZNlS3Ez3Mb6T0
7NkqV7zpCBHR1fL839DA4GLlXBNAL9DVREpTF+Yxjuxv4+8IWlcpAZDsboFPQlAT
nT/fxV2jh0gawrwSV4jam7NYCaOAn7vW5XjRV/GHdZXviKv1/aylaxsIzwB6OCbf
HpAcvIoFJmpqhA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:55 2026 by rpki-client