Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
File: D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json)
Hash identifier: cpc2uyzvBPdrwEbCE4Svp/lhWC/VhVNzsX0AyD1VEXs=
Subject key identifier: 9C:23:C3:DA:AE:4F:6A:BC:44:97:B3:31:14:95:84:98:12:BA:B2:40
Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
Certificate issuer: /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Certificate serial: 01A00138559FDB09057346BDBF9A9702ABDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
Manifest number: 0607
Signing time: Fri 14 Aug 2026 17:01:04 +0000
Manifest this update: Fri 14 Aug 2026 17:01:04 +0000
Manifest next update: Sat 15 Aug 2026 17:01:04 +0000
Files and hashes: 1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: 3ffuIZpZAcK/pOqMyhLxU62EpcRJ+dBg7MY09JIQ33A=)
2: SCHRZY-CfI024Dm7CtHiKFlNshk.asa (hash: CoaKu2xsdb1vUBMm0shIAq9E8fWITwH9g7k1dI56T6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:55:9f:db:09:05:73:46:bd:bf:9a:97:02:ab:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Validity
Not Before: Aug 14 17:01:04 2026 GMT
Not After : Aug 15 17:01:04 2026 GMT
Subject: CN=9c23c3daae4f6abc4497b3311495849812bab240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:ea:8e:d7:bf:0a:f9:f8:0d:99:09:74:48:
41:f4:5d:90:85:8b:6d:66:c1:3b:f2:44:1b:f8:ac:
dd:74:6f:0c:c6:f6:d6:9a:17:1e:e0:36:d9:3d:b2:
4a:37:f0:f6:34:55:ab:5d:2f:52:16:a2:b3:f3:fa:
68:92:cd:6e:2a:95:8b:bc:3c:dd:1b:5e:99:67:c9:
3c:9b:ce:8c:a1:77:eb:a8:70:18:f4:ac:d7:b4:5f:
0d:fe:30:b5:d6:f8:cc:37:51:e7:1f:a5:86:a7:76:
2f:a9:0e:f8:ed:b2:00:23:ec:71:1d:e0:c3:6c:db:
1f:2e:d0:5d:86:4d:80:f6:64:28:4a:65:ff:b1:dc:
ae:73:47:f1:16:f9:14:e2:91:5b:8d:4b:1c:14:21:
88:80:d4:11:b6:c9:e8:d2:fd:ec:2c:c6:f8:73:70:
f6:33:82:4c:b3:43:0a:83:99:3d:e3:47:06:ca:47:
cf:ed:c2:77:4a:0e:b2:8b:27:c2:f1:84:67:32:46:
5c:4b:8e:2f:b8:af:d1:5a:f8:81:cc:94:f2:46:b7:
46:78:6c:b1:22:7c:42:f6:39:a7:06:34:6c:aa:6c:
cc:9b:3c:80:f2:f1:de:32:43:a3:c1:1f:dc:38:b0:
86:5c:ac:3e:75:2e:5e:41:fd:4f:ab:47:40:b7:3e:
49:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:23:C3:DA:AE:4F:6A:BC:44:97:B3:31:14:95:84:98:12:BA:B2:40
X509v3 Authority Key Identifier:
keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:72:f8:39:19:10:7c:ed:f5:1d:28:6e:94:54:ff:99:f0:8d:
33:f1:2d:9f:ad:ca:73:8c:df:4c:58:cf:82:49:1d:ed:30:f3:
71:1e:cc:5a:25:48:5f:8c:97:8f:4a:ae:66:18:57:8a:26:8f:
e4:72:b6:47:ef:66:52:5d:46:e0:39:21:f1:de:15:6e:72:9a:
b5:7d:13:ab:48:ce:8a:b2:11:04:6d:d5:b6:c5:40:96:db:2b:
92:2b:80:1e:8b:64:24:0f:a6:95:1d:1d:77:6c:67:38:27:9e:
c2:4b:b7:a8:ca:c5:f9:1b:00:1a:97:c4:8d:74:db:f9:8d:08:
94:9b:7e:1d:c4:0b:7b:0d:17:3f:8a:3d:ab:6a:a2:ae:56:89:
fd:e6:b4:79:86:89:2e:d8:1e:ff:cf:11:79:a3:6f:31:98:ea:
4b:9c:38:a6:28:43:f4:b8:ec:0a:c6:7d:a6:a2:61:36:b3:27:
47:a8:63:85:bc:11:35:a7:a2:10:9f:09:6f:a9:68:ac:69:a6:
aa:1d:b6:ef:42:91:f4:94:4c:50:93:34:6d:26:e8:ee:5e:91:
f6:71:97:17:e4:99:1a:15:6e:31:e1:93:0e:1e:a3:2c:3d:41:
f5:67:7f:d7:27:81:d5:eb:31:be:14:72:ef:18:27:a4:33:92:
52:1c:b3:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOFWf2wkFc0a9v5qXAqvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOGYwNmMzNTQ5NDYwOGQ5YWNjZWIwNzBhNGNkMTZhYjk1
ZmY2YTYwHhcNMjYwODE0MTcwMTA0WhcNMjYwODE1MTcwMTA0WjAzMTEwLwYDVQQD
Eyg5YzIzYzNkYWFlNGY2YWJjNDQ5N2IzMzExNDk1ODQ5ODEyYmFiMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQzqjte/Cvn4DZkJdEhB9F2QhYtt
ZsE78kQb+KzddG8MxvbWmhce4DbZPbJKN/D2NFWrXS9SFqKz8/poks1uKpWLvDzd
G16ZZ8k8m86MoXfrqHAY9KzXtF8N/jC11vjMN1HnH6WGp3YvqQ747bIAI+xxHeDD
bNsfLtBdhk2A9mQoSmX/sdyuc0fxFvkU4pFbjUscFCGIgNQRtsno0v3sLMb4c3D2
M4JMs0MKg5k940cGykfP7cJ3Sg6yiyfC8YRnMkZcS44vuK/RWviBzJTyRrdGeGyx
InxC9jmnBjRsqmzMmzyA8vHeMkOjwR/cOLCGXKw+dS5eQf1Pq0dAtz5JuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwjw9quT2q8RJezMRSVhJgSurJAMB8GA1UdIwQY
MBaAFA+PBsNUlGCNmszrBwpM0Wq5X/amMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9iMDkyMTgtODllNy00ODU5LWIzMmMt
NjBlOWI3ZGM1NTBiLzEvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9iMDkyMTgtODllNy00ODU5LWIzMmMtNjBlOWI3ZGM1NTBi
LzEvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3L4ORkQ
fO31HShulFT/mfCNM/Etn63Kc4zfTFjPgkkd7TDzcR7MWiVIX4yXj0quZhhXiiaP
5HK2R+9mUl1G4Dkh8d4VbnKatX0Tq0jOirIRBG3VtsVAltsrkiuAHotkJA+mlR0d
d2xnOCeewku3qMrF+RsAGpfEjXTb+Y0IlJt+HcQLew0XP4o9q2qirlaJ/ea0eYaJ
Ltge/88ReaNvMZjqS5w4pihD9LjsCsZ9pqJhNrMnR6hjhbwRNaeiEJ8Jb6lorGmm
qh2270KR9JRMUJM0bSbo7l6R9nGXF+SZGhVuMeGTDh6jLD1B9Wd/1yeB1esxvhRy
7xgnpDOSUhyz8Q==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:51 2026 by rpki-client