Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: V5LAHWkrP13dY+ZUO5hh7OAsVbAKVH3PotlgygQyp/0=
Subject key identifier: AE:6E:45:4C:71:B4:F9:B3:F9:56:31:6A:2A:23:55:33:12:89:A4:AD
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 01A027A0EDE82A875C33381C95EEC049F705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 0CA1
Signing time: Sat 22 Aug 2026 04:00:53 +0000
Manifest this update: Sat 22 Aug 2026 04:00:53 +0000
Manifest next update: Sun 23 Aug 2026 04:00:53 +0000
Files and hashes: 1: XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa (hash: wAuwL6Iz2Pwm9WGIInMjcsxZMvhkc1vHutS+nMnQpa8=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: N+IpUbdvdBQd6hStzTV7j63mJ7iWH7x1AGVRNmId7aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:27:a0:ed:e8:2a:87:5c:33:38:1c:95:ee:c0:49:f7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Aug 22 04:00:53 2026 GMT
Not After : Aug 23 04:00:53 2026 GMT
Subject: CN=ae6e454c71b4f9b3f956316a2a2355331289a4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6b:89:8c:17:6c:17:6b:f1:f3:1a:8a:2d:2e:
72:70:74:50:3f:55:e3:36:05:3f:57:47:4c:cd:ed:
c1:94:f2:57:fc:e1:23:11:be:b7:f0:f4:53:96:f7:
66:31:20:da:cf:65:0d:f2:c1:84:53:2d:61:e4:1a:
2a:c2:ec:0a:86:7a:1c:5b:b1:26:f3:79:bc:9d:02:
5a:46:08:53:5c:c8:d0:f2:16:ab:c2:c5:5f:a5:1b:
8a:53:99:59:4b:12:1f:bf:b8:ca:34:37:20:50:a3:
b0:6c:b8:6a:4a:0f:08:1b:d6:79:d6:f8:58:cd:71:
42:b0:6b:07:d3:ba:10:b5:2c:4a:a7:c5:27:61:b4:
45:f6:41:cc:bf:02:27:44:86:e1:b0:12:90:2c:38:
64:d4:33:0c:ba:2e:12:e3:6d:18:d7:ad:27:6b:a8:
3d:8c:bd:5e:c8:a2:84:43:13:2a:ab:13:19:ae:17:
f4:4b:bd:5b:1b:9c:26:ab:b6:57:86:c4:44:e5:97:
f4:7f:ab:9a:3c:07:6b:e3:db:d9:3a:4f:e3:02:9c:
e3:0c:3d:d5:9d:7d:89:43:17:78:07:cb:c3:4b:8a:
ed:09:2a:9d:d3:eb:ee:e7:84:ba:7d:aa:96:9a:af:
56:7d:b0:a6:46:16:3a:51:6d:35:89:b4:b3:d0:ea:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6E:45:4C:71:B4:F9:B3:F9:56:31:6A:2A:23:55:33:12:89:A4:AD
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:50:55:bb:f4:9a:40:80:1c:80:b3:e0:3e:6b:00:95:ba:94:
c5:47:cf:97:2e:34:83:0f:58:14:8d:4c:fa:62:d8:15:d3:fd:
b3:56:7b:b2:ee:7d:3f:16:c1:8c:ef:72:d4:75:7a:ca:ac:c4:
68:18:73:b7:fb:6d:e8:98:fd:4a:c2:89:09:da:ee:ae:32:76:
bc:64:66:31:de:2c:0f:fa:8d:2e:e2:8e:de:b0:f2:18:c3:0c:
4d:94:15:00:85:96:e7:04:f7:55:f4:18:b0:01:dc:d6:99:aa:
7b:83:69:bc:fc:17:9f:d6:bd:c1:70:f9:67:df:20:0c:a1:68:
8e:70:e4:6e:77:80:46:2a:2e:b1:b6:86:0d:e6:c8:0f:19:7f:
4a:14:70:9e:d0:e7:3c:39:c7:ed:5f:4c:9b:b4:98:53:f6:43:
31:ad:ac:da:43:8c:05:d2:43:85:49:d0:76:f2:ec:0c:e2:aa:
8b:18:e0:d7:95:85:dc:ff:65:87:4b:09:0c:99:62:60:3e:31:
a6:4b:c3:58:2e:e8:b1:90:7a:34:e6:63:ce:aa:40:22:61:0b:
90:1d:e7:b1:3c:8d:1d:f7:1b:78:07:db:ca:be:19:0b:c8:36:
48:87:9a:92:55:5d:13:bc:3a:44:92:a8:8c:ec:1a:4b:4e:74:
28:9a:50:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAnoO3oKodcMzgcle7ASfcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2N2YxY2YyNzQyNjA3MGFlZGE3YjI2MDUzNDUzYzI4M2Zk
Zjc1MzcwHhcNMjYwODIyMDQwMDUzWhcNMjYwODIzMDQwMDUzWjAzMTEwLwYDVQQD
EyhhZTZlNDU0YzcxYjRmOWIzZjk1NjMxNmEyYTIzNTUzMzEyODlhNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52uJjBdsF2vx8xqKLS5ycHRQP1Xj
NgU/V0dMze3BlPJX/OEjEb638PRTlvdmMSDaz2UN8sGEUy1h5BoqwuwKhnocW7Em
83m8nQJaRghTXMjQ8harwsVfpRuKU5lZSxIfv7jKNDcgUKOwbLhqSg8IG9Z51vhY
zXFCsGsH07oQtSxKp8UnYbRF9kHMvwInRIbhsBKQLDhk1DMMui4S420Y160na6g9
jL1eyKKEQxMqqxMZrhf0S71bG5wmq7ZXhsRE5Zf0f6uaPAdr49vZOk/jApzjDD3V
nX2JQxd4B8vDS4rtCSqd0+vu54S6faqWmq9WfbCmRhY6UW01ibSz0OonRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5uRUxxtPmz+VYxaiojVTMSiaStMB8GA1UdIwQY
MBaAFKZ/HPJ0JgcK7aeyYFNFPCg/33U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xMmUyYzQtMjQzZC00NGRmLWIwZGMt
YjlkNjY4ZjA1MWRlLzEvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xMmUyYzQtMjQzZC00NGRmLWIwZGMtYjlkNjY4ZjA1MWRl
LzEvcG44YzhuUW1Cd3J0cDdKZ1UwVThLRF9mZFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzlBVu/Sa
QIAcgLPgPmsAlbqUxUfPly40gw9YFI1M+mLYFdP9s1Z7su59PxbBjO9y1HV6yqzE
aBhzt/tt6Jj9SsKJCdrurjJ2vGRmMd4sD/qNLuKO3rDyGMMMTZQVAIWW5wT3VfQY
sAHc1pmqe4NpvPwXn9a9wXD5Z98gDKFojnDkbneARiousbaGDebIDxl/ShRwntDn
PDnH7V9Mm7SYU/ZDMa2s2kOMBdJDhUnQdvLsDOKqixjg15WF3P9lh0sJDJliYD4x
pkvDWC7osZB6NOZjzqpAImELkB3nsTyNHfcbeAfbyr4ZC8g2SIeaklVdE7w6RJKo
jOwaS050KJpQjg==
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:20 2026 by rpki-client