Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.mft
File: 11daq8dYqWhvnUPnrA7TWuRHj00.mft (raw, json)
Hash identifier: oIGjbo2Ll0IdhMAeF6NeGv/6TrV9G75gV30vFHM2Z+4=
Subject key identifier: 60:7C:20:99:81:CB:C1:F4:CB:85:FB:6D:80:F3:4B:99:F9:B7:BE:5B
Authority key identifier: D7:57:5A:AB:C7:58:A9:68:6F:9D:43:E7:AC:0E:D3:5A:E4:47:8F:4D
Certificate issuer: /CN=d7575aabc758a9686f9d43e7ac0ed35ae4478f4d
Certificate serial: 01A0404E019120BC3D8EF06F1C9D41CC5F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11daq8dYqWhvnUPnrA7TWuRHj00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.mft
Manifest number: 0168
Signing time: Wed 26 Aug 2026 23:00:49 +0000
Manifest this update: Wed 26 Aug 2026 23:00:49 +0000
Manifest next update: Thu 27 Aug 2026 23:00:49 +0000
Files and hashes: 1: 11daq8dYqWhvnUPnrA7TWuRHj00.crl (hash: 4LWRb6FL6t4TWetQxjnOt0PyGFI7k0tknGKsFvoKzWU=)
2: Csx9QDzDsQz_aHEulUGMnETy388.roa (hash: C8BP4jzTuTTi1E6V65zQ+3x8Wh6nKEgy7uqDWh2K8g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.mft
rsync://rpki.ripe.net/repository/DEFAULT/11daq8dYqWhvnUPnrA7TWuRHj00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:01:91:20:bc:3d:8e:f0:6f:1c:9d:41:cc:5f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7575aabc758a9686f9d43e7ac0ed35ae4478f4d
Validity
Not Before: Aug 26 23:00:49 2026 GMT
Not After : Aug 27 23:00:49 2026 GMT
Subject: CN=607c209981cbc1f4cb85fb6d80f34b99f9b7be5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:68:2a:8a:99:6d:80:fa:45:e6:a4:87:a4:
a0:0d:63:18:70:9a:9a:87:89:d0:42:c8:cf:2f:0b:
f3:f9:cb:4d:03:b2:1a:2d:82:3d:2f:71:07:91:72:
95:37:88:28:7e:5e:ed:b6:97:0b:9f:79:a8:7e:d8:
5c:14:b3:6a:5a:d2:aa:b3:3b:b9:12:e1:67:85:66:
18:93:4b:bd:14:e5:16:31:59:85:0a:49:d6:92:ba:
09:f7:35:5c:6b:ca:10:25:fa:90:4e:c5:2a:ec:ad:
fb:d4:56:1c:5a:5e:38:66:0e:cd:87:88:9d:95:c6:
79:bf:87:4f:d6:ab:7c:9b:76:e3:d4:ad:95:0c:80:
b0:6f:fc:aa:60:6f:5b:83:12:6e:e5:24:ee:2f:d6:
be:66:1a:ff:81:82:62:60:68:4d:fd:62:26:1c:70:
a1:5f:cd:72:7e:c2:9f:82:1f:57:b1:78:96:ca:e4:
8a:69:c3:96:d0:4f:f9:fc:8c:32:bb:89:0a:d6:93:
3d:16:90:b5:aa:98:6a:fb:37:ba:b3:d7:8a:50:02:
e3:28:e9:9b:5c:98:b2:92:a8:c9:83:c9:c4:a1:74:
14:6d:c1:97:3b:4a:9f:9f:7c:98:f8:6a:52:21:62:
10:18:6f:d1:fa:a1:04:9c:c4:39:57:dc:d8:3d:aa:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7C:20:99:81:CB:C1:F4:CB:85:FB:6D:80:F3:4B:99:F9:B7:BE:5B
X509v3 Authority Key Identifier:
keyid:D7:57:5A:AB:C7:58:A9:68:6F:9D:43:E7:AC:0E:D3:5A:E4:47:8F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11daq8dYqWhvnUPnrA7TWuRHj00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b7:95:b4:41:0a:23:d4:18:2a:c8:67:50:bb:83:85:ca:cf:
03:55:8c:f5:35:2e:18:a0:b2:d2:2b:0a:68:96:a5:77:17:2e:
fe:3a:53:29:32:ca:f5:aa:4d:91:df:93:c3:c6:20:41:9d:ab:
c3:66:60:e1:d2:19:f2:c3:56:87:72:a1:1b:94:77:dc:b7:44:
c4:39:9a:eb:e9:3b:9b:8a:ca:6d:d4:0d:1f:48:d5:9a:37:4b:
e7:a7:d5:5f:57:f9:b3:14:b1:3e:29:6d:5c:e5:a8:c3:28:15:
60:d8:73:20:2d:00:ef:34:76:fb:f3:e4:55:cf:a2:a4:82:4a:
4c:d3:47:20:cd:17:be:d9:9c:04:22:e1:22:38:4b:d1:65:3a:
55:cf:37:79:55:fb:0d:8e:aa:7b:ff:53:ec:b1:55:14:2c:73:
02:27:64:07:f7:cf:41:ae:8b:fb:0c:fb:1a:24:4d:4c:17:69:
1d:74:81:7a:49:af:87:35:e0:6d:0c:d4:cc:5f:24:4c:6f:d2:
de:9b:2d:60:91:e3:35:98:9d:77:fd:84:80:ce:c9:84:1e:60:
ef:0c:f4:9d:87:e5:ca:9c:32:42:0d:fc:f1:92:02:b3:f0:15:
a6:07:11:de:b8:cc:74:c7:8c:7b:b7:12:f5:99:1b:51:37:f9:
e4:7f:19:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATgGRILw9jvBvHJ1BzF8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NTc1YWFiYzc1OGE5Njg2ZjlkNDNlN2FjMGVkMzVhZTQ0
NzhmNGQwHhcNMjYwODI2MjMwMDQ5WhcNMjYwODI3MjMwMDQ5WjAzMTEwLwYDVQQD
Eyg2MDdjMjA5OTgxY2JjMWY0Y2I4NWZiNmQ4MGYzNGI5OWY5YjdiZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp19oKoqZbYD6Reakh6SgDWMYcJqa
h4nQQsjPLwvz+ctNA7IaLYI9L3EHkXKVN4gofl7ttpcLn3mofthcFLNqWtKqszu5
EuFnhWYYk0u9FOUWMVmFCknWkroJ9zVca8oQJfqQTsUq7K371FYcWl44Zg7Nh4id
lcZ5v4dP1qt8m3bj1K2VDICwb/yqYG9bgxJu5STuL9a+Zhr/gYJiYGhN/WImHHCh
X81yfsKfgh9XsXiWyuSKacOW0E/5/Iwyu4kK1pM9FpC1qphq+ze6s9eKUALjKOmb
XJiykqjJg8nEoXQUbcGXO0qfn3yY+GpSIWIQGG/R+qEEnMQ5V9zYPapFVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGB8IJmBy8H0y4X7bYDzS5n5t75bMB8GA1UdIwQY
MBaAFNdXWqvHWKlob51D56wO01rkR49NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTFkYXE4ZFlxV2h2blVQbnJBN1RXdVJIajAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mZGM1MmUtZGViZC00NTc5LTllYzEt
NDk5NTg5OGFjYjYwLzEvMTFkYXE4ZFlxV2h2blVQbnJBN1RXdVJIajAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mZGM1MmUtZGViZC00NTc5LTllYzEtNDk5NTg5OGFjYjYw
LzEvMTFkYXE4ZFlxV2h2blVQbnJBN1RXdVJIajAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbeVtEEK
I9QYKshnULuDhcrPA1WM9TUuGKCy0isKaJaldxcu/jpTKTLK9apNkd+Tw8YgQZ2r
w2Zg4dIZ8sNWh3KhG5R33LdExDma6+k7m4rKbdQNH0jVmjdL56fVX1f5sxSxPilt
XOWowygVYNhzIC0A7zR2+/PkVc+ipIJKTNNHIM0XvtmcBCLhIjhL0WU6Vc83eVX7
DY6qe/9T7LFVFCxzAidkB/fPQa6L+wz7GiRNTBdpHXSBekmvhzXgbQzUzF8kTG/S
3pstYJHjNZidd/2EgM7JhB5g7wz0nYflypwyQg388ZICs/AVpgcR3rjMdMeMe7cS
9ZkbUTf55H8ZQg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:30:28 2026 by rpki-client