Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
File: 338uDqUtnkbtcQSFPG1RRlqso2c.mft (raw, json)
Hash identifier: 39xiun2ZwiqrvzkMoFntH8merItBjxgqdLLe3FHt/A0=
Subject key identifier: 8C:A1:60:C0:CF:43:25:23:65:69:F3:E4:2B:16:57:04:FC:AA:53:8F
Authority key identifier: DF:7F:2E:0E:A5:2D:9E:46:ED:71:04:85:3C:6D:51:46:5A:AC:A3:67
Certificate issuer: /CN=df7f2e0ea52d9e46ed7104853c6d51465aaca367
Certificate serial: 01A0404DED6DDE47E980716506AE9B7EE23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
Manifest number: 0143
Signing time: Wed 26 Aug 2026 23:00:43 +0000
Manifest this update: Wed 26 Aug 2026 23:00:43 +0000
Manifest next update: Thu 27 Aug 2026 23:00:43 +0000
Files and hashes: 1: 338uDqUtnkbtcQSFPG1RRlqso2c.crl (hash: OZw1eChbQJ5HjE3H2fuv2ks4QpJhFFvEkHZu0DvUfls=)
2: rkqbD4HeLY4fECgG4UCjCwTiZaY.roa (hash: rtmOzCRpMS+pQkVbuV9E2mfbRX0MvxLvH1ZciUH4P8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:ed:6d:de:47:e9:80:71:65:06:ae:9b:7e:e2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f2e0ea52d9e46ed7104853c6d51465aaca367
Validity
Not Before: Aug 26 23:00:43 2026 GMT
Not After : Aug 27 23:00:43 2026 GMT
Subject: CN=8ca160c0cf4325236569f3e42b165704fcaa538f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f2:6d:b4:2f:95:4a:b9:46:ef:96:97:0d:34:
2a:7c:cf:e4:c4:6a:c5:42:49:da:e8:31:18:c4:40:
ab:7e:5c:1e:9d:da:57:a4:96:d8:ce:d7:b6:37:7f:
f3:5e:48:2a:53:1a:ad:c7:5e:c9:44:5d:49:4a:bd:
94:fa:f1:d5:94:fd:da:3d:fc:da:0e:7e:6c:43:6f:
35:f2:b9:2e:c9:39:46:af:6a:dd:c4:84:10:1c:2a:
95:81:ad:35:7a:b3:d3:3e:f3:b3:7b:81:df:ca:a8:
45:be:e3:86:5d:da:f4:f8:5a:af:b2:3b:e5:76:6f:
7d:d4:0f:6d:51:19:55:07:16:7e:bf:a4:cc:9c:7e:
cc:79:6c:87:54:6d:01:9d:1a:d6:d2:ec:28:50:19:
10:44:45:ee:4d:8c:8f:0d:73:c6:d2:ea:c5:57:32:
ff:1c:42:12:04:b6:93:ab:29:98:a3:27:ae:69:f8:
c5:55:73:9c:d4:e3:05:b6:04:8f:0e:a2:de:0e:8f:
e0:c9:23:79:8a:44:87:67:60:db:cb:c1:2e:67:49:
1e:8c:6a:c4:f3:43:07:b9:ea:70:b4:f7:62:a3:81:
ee:1d:14:72:17:89:37:24:be:db:cd:15:ee:28:06:
42:8c:f2:6b:c2:73:9a:68:2d:f7:45:44:c0:3b:0a:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A1:60:C0:CF:43:25:23:65:69:F3:E4:2B:16:57:04:FC:AA:53:8F
X509v3 Authority Key Identifier:
keyid:DF:7F:2E:0E:A5:2D:9E:46:ED:71:04:85:3C:6D:51:46:5A:AC:A3:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/338uDqUtnkbtcQSFPG1RRlqso2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/879e41-9a1d-49ab-8547-05adb08f9a69/1/338uDqUtnkbtcQSFPG1RRlqso2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a9:88:c5:66:4e:01:9e:2e:05:5d:c2:3c:b6:6e:fe:8f:fd:
a9:ff:e2:da:48:df:cc:4d:9a:80:af:ad:51:58:7f:70:9d:76:
ff:0f:ad:38:37:db:01:a1:7b:9d:d0:a8:56:26:15:c8:a0:27:
05:a9:52:ea:3b:19:bb:82:39:f1:c7:64:de:8a:09:9c:cf:26:
a6:45:64:35:a6:8c:99:d0:5f:89:20:26:f5:f5:77:48:9f:29:
35:63:49:03:0b:2d:cb:4c:28:9d:73:fb:9b:93:2e:81:36:d3:
0a:4c:a2:01:1b:9d:84:17:4a:de:68:d6:7f:a5:29:e9:c8:44:
b3:87:a7:2d:32:82:62:b6:3b:05:23:85:fa:ee:bd:26:2e:f5:
bf:13:d3:71:d4:98:8b:30:bc:9c:e6:31:d7:40:bc:5e:fa:fc:
29:97:b5:03:14:76:ef:f9:23:a8:d4:bf:af:5b:c4:43:24:c1:
a0:62:c0:a4:80:11:a7:fe:ab:02:ef:67:fb:71:f8:b3:0c:85:
f2:08:de:6b:0a:a3:a8:5f:48:6f:54:78:05:8c:b1:74:9e:2b:
5d:e2:1c:1b:5d:0e:57:96:c1:bf:4d:27:df:ee:24:01:f4:50:
d2:9b:92:1c:23:d9:d6:f4:f4:7a:56:ac:63:d6:f4:11:e8:b9:
50:cd:99:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATe1t3kfpgHFlBq6bfuI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2YyZTBlYTUyZDllNDZlZDcxMDQ4NTNjNmQ1MTQ2NWFh
Y2EzNjcwHhcNMjYwODI2MjMwMDQzWhcNMjYwODI3MjMwMDQzWjAzMTEwLwYDVQQD
Eyg4Y2ExNjBjMGNmNDMyNTIzNjU2OWYzZTQyYjE2NTcwNGZjYWE1MzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fJttC+VSrlG75aXDTQqfM/kxGrF
Qkna6DEYxECrflwendpXpJbYzte2N3/zXkgqUxqtx17JRF1JSr2U+vHVlP3aPfza
Dn5sQ2818rkuyTlGr2rdxIQQHCqVga01erPTPvOze4HfyqhFvuOGXdr0+Fqvsjvl
dm991A9tURlVBxZ+v6TMnH7MeWyHVG0BnRrW0uwoUBkQREXuTYyPDXPG0urFVzL/
HEISBLaTqymYoyeuafjFVXOc1OMFtgSPDqLeDo/gySN5ikSHZ2Dby8EuZ0kejGrE
80MHuepwtPdio4HuHRRyF4k3JL7bzRXuKAZCjPJrwnOaaC33RUTAOwpwBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyhYMDPQyUjZWnz5CsWVwT8qlOPMB8GA1UdIwQY
MBaAFN9/Lg6lLZ5G7XEEhTxtUUZarKNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzM4dURxVXRua2J0Y1FTRlBHMVJSbHFzbzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84NzllNDEtOWExZC00OWFiLTg1NDct
MDVhZGIwOGY5YTY5LzEvMzM4dURxVXRua2J0Y1FTRlBHMVJSbHFzbzJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84NzllNDEtOWExZC00OWFiLTg1NDctMDVhZGIwOGY5YTY5
LzEvMzM4dURxVXRua2J0Y1FTRlBHMVJSbHFzbzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqmIxWZO
AZ4uBV3CPLZu/o/9qf/i2kjfzE2agK+tUVh/cJ12/w+tODfbAaF7ndCoViYVyKAn
BalS6jsZu4I58cdk3ooJnM8mpkVkNaaMmdBfiSAm9fV3SJ8pNWNJAwsty0wonXP7
m5MugTbTCkyiARudhBdK3mjWf6Up6chEs4enLTKCYrY7BSOF+u69Ji71vxPTcdSY
izC8nOYx10C8Xvr8KZe1AxR27/kjqNS/r1vEQyTBoGLApIARp/6rAu9n+3H4swyF
8gjeawqjqF9Ib1R4BYyxdJ4rXeIcG10OV5bBv00n3+4kAfRQ0puSHCPZ1vT0elas
Y9b0Eei5UM2Z2w==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:40:27 2026 by rpki-client