Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: a+Nypx3YEHNM4UVYm04g74JMEIelkiz2alo1E0fwS38=
Subject key identifier: 87:52:20:BA:70:B3:D9:0A:04:65:2A:C9:95:A1:EB:C8:57:74:B3:07
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 01A01FE7F0E8C21FF2EEC92E52FC44563C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 08E6
Signing time: Thu 20 Aug 2026 16:01:29 +0000
Manifest this update: Thu 20 Aug 2026 16:01:29 +0000
Manifest next update: Fri 21 Aug 2026 16:01:29 +0000
Files and hashes: 1: 1FR5ZpZwPSxvOqUqxpmnyVdoI2Y.roa (hash: Uc2np6So5kLYsA5QE2lGHUyNPrOYT/fABQqkzzDnXDo=)
2: Z48YcacIdaFOrbU7hl0nBrBdOnE.roa (hash: mNCCj8yHct24e5aYcSn4spJlToJ33LdwEpzI7Aa7J4o=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: 7fIdGw35igLuo1J4BklJzSkSnnG8qUiQLGsuNQHKJns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:e7:f0:e8:c2:1f:f2:ee:c9:2e:52:fc:44:56:3c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Aug 20 16:01:29 2026 GMT
Not After : Aug 21 16:01:29 2026 GMT
Subject: CN=875220ba70b3d90a04652ac995a1ebc85774b307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c2:f2:1f:52:c7:15:94:c7:41:bd:9a:7b:cd:
45:74:50:30:6e:97:5e:b6:8e:47:44:2c:65:a3:53:
82:b6:aa:1e:f2:a4:32:35:60:e2:d4:58:fd:9c:28:
6b:89:bb:4a:44:78:e8:7d:9a:41:d0:1c:38:b0:48:
69:27:36:c4:b2:44:ab:53:49:b2:13:87:c7:6d:1d:
50:c7:1b:f5:f6:08:f4:5a:8c:d2:27:2e:e8:62:e4:
8a:b5:81:e7:3a:a7:6b:bc:aa:2d:65:e4:ad:7c:f2:
1b:22:6b:f3:88:e9:94:2d:82:5e:26:ba:27:3f:dd:
06:c3:85:f8:ed:cc:da:6d:f2:92:61:bf:2d:cc:ee:
5f:44:41:23:b8:55:26:09:1f:b1:42:c8:f4:13:98:
15:53:4f:95:fa:de:f6:cf:2f:55:07:f7:24:65:51:
39:e6:54:08:29:be:3b:e4:34:63:af:10:be:f3:52:
a6:c3:54:41:11:72:e9:4c:fb:96:4d:78:e0:b5:50:
35:09:66:22:57:4a:ce:61:5c:bb:b7:8b:1f:43:38:
1b:17:26:6b:c3:76:d3:66:0f:1d:5c:bb:45:1e:56:
97:e3:6e:47:08:15:7d:f8:d1:61:27:21:c4:42:98:
c2:c2:92:88:ab:6c:31:77:96:8f:08:da:6a:37:46:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:52:20:BA:70:B3:D9:0A:04:65:2A:C9:95:A1:EB:C8:57:74:B3:07
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f3:4e:04:f1:20:32:26:a8:6b:11:76:06:85:71:f1:72:5d:
54:b4:5e:c1:da:cf:06:ef:f2:89:99:56:dd:f7:8c:2f:eb:12:
6d:9d:e9:df:2b:fe:a6:88:fc:ed:25:c1:d2:53:07:ac:e5:7f:
1a:71:c1:fb:eb:dc:91:94:e1:3d:f1:59:20:81:e3:bb:92:28:
38:e3:45:49:e0:66:a7:b6:b8:63:55:c8:08:c1:06:3d:e3:d2:
a3:5f:85:c5:5b:05:42:86:7f:f7:73:3d:68:c0:eb:5f:3f:d9:
a1:18:c7:02:b4:73:1a:9b:0b:1f:56:f7:0c:0f:cd:57:dd:33:
3c:78:13:87:23:5c:91:5c:7b:15:87:46:6a:79:63:bd:e0:d3:
ca:72:f4:df:f9:cc:c1:64:54:ca:49:e2:49:3a:f7:18:88:c8:
e0:7e:8d:5e:91:4c:a5:77:5a:43:e8:a0:69:5f:ae:f1:00:7f:
e9:f3:9a:bc:c5:09:a1:dc:ad:c0:d6:5b:99:16:e1:bf:3e:b1:
ec:58:7d:c9:ef:b6:be:b9:97:dc:ad:df:86:da:62:10:e0:fb:
5c:d1:56:c4:92:6e:3b:61:c3:ba:76:0d:fa:d5:cd:d7:76:68:
c4:21:45:25:44:05:70:8e:3c:df:80:e1:21:b9:e8:6e:bc:fa:
97:0c:d4:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAf5/Dowh/y7skuUvxEVjx0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MjExODY0MTNiYmRmZGUyMGU1OTJmYmU1NTUzZGU3Zjk0
ZTU5ODcwHhcNMjYwODIwMTYwMTI5WhcNMjYwODIxMTYwMTI5WjAzMTEwLwYDVQQD
Eyg4NzUyMjBiYTcwYjNkOTBhMDQ2NTJhYzk5NWExZWJjODU3NzRiMzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsLyH1LHFZTHQb2ae81FdFAwbpde
to5HRCxlo1OCtqoe8qQyNWDi1Fj9nChribtKRHjofZpB0Bw4sEhpJzbEskSrU0my
E4fHbR1Qxxv19gj0WozSJy7oYuSKtYHnOqdrvKotZeStfPIbImvziOmULYJeJron
P90Gw4X47czabfKSYb8tzO5fREEjuFUmCR+xQsj0E5gVU0+V+t72zy9VB/ckZVE5
5lQIKb475DRjrxC+81Kmw1RBEXLpTPuWTXjgtVA1CWYiV0rOYVy7t4sfQzgbFyZr
w3bTZg8dXLtFHlaX425HCBV9+NFhJyHEQpjCwpKIq2wxd5aPCNpqN0ap3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdSILpws9kKBGUqyZWh68hXdLMHMB8GA1UdIwQY
MBaAFKYhGGQTu9/eIOWS++VVPef5TlmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMzk2YWQtZGRhNy00NjAwLThmNjYt
ZjU2Yzc3OWIxNDJmLzEvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wMzk2YWQtZGRhNy00NjAwLThmNjYtZjU2Yzc3OWIxNDJm
LzEvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfNOBPEg
MiaoaxF2BoVx8XJdVLRewdrPBu/yiZlW3feML+sSbZ3p3yv+poj87SXB0lMHrOV/
GnHB++vckZThPfFZIIHju5IoOONFSeBmp7a4Y1XICMEGPePSo1+FxVsFQoZ/93M9
aMDrXz/ZoRjHArRzGpsLH1b3DA/NV90zPHgThyNckVx7FYdGanljveDTynL03/nM
wWRUykniSTr3GIjI4H6NXpFMpXdaQ+igaV+u8QB/6fOavMUJodytwNZbmRbhvz6x
7Fh9ye+2vrmX3K3fhtpiEOD7XNFWxJJuO2HDunYN+tXN13ZoxCFFJUQFcI4834Dh
Ibnobrz6lwzUpg==
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:37:58 2026 by rpki-client