
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: PtcBL8j1fOaDtEXMm//EoM6SrnvXmhh5JWm7CkXYpA0=
Subject key identifier: 9C:F8:A2:E2:0C:62:66:DC:EC:E8:40:CF:48:26:3D:88:46:D4:F3:6D
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 01A0B7D302A0F01B3CBABBCCC580C87EFD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 1A69
Signing time: Sat 19 Sep 2026 04:00:54 +0000
Manifest this update: Sat 19 Sep 2026 04:00:54 +0000
Manifest next update: Sun 20 Sep 2026 04:00:54 +0000
Files and hashes: 1: QACcx3bmkYq5FVm71dmit53bn4Q.roa (hash: oQ/m7QfRfNheRWfUqid3dTy2xJX9VnnT62jOhchvHuk=)
2: gux-IxdkibcThQl39PWiMsakK0g.roa (hash: xADBPDkQYtVHScAVn2k1rTwtjm/TxC5Y/n4oo7GBk1E=)
3: jpvZw7M6HWfeaPP7BBGWUfnUPW8.roa (hash: m69AM/qWHvVH8vQjk7f2bA/DtDMk2TIVp7SRlmCI4co=)
4: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: sxV+ISE0Xn88TQu3RPIs9LwOZ5lPQHYZmPDK4qisyAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:d3:02:a0:f0:1b:3c:ba:bb:cc:c5:80:c8:7e:fd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Sep 19 04:00:54 2026 GMT
Not After : Sep 20 04:00:54 2026 GMT
Subject: CN=9cf8a2e20c6266dcece840cf48263d8846d4f36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:28:3d:e7:32:aa:e2:40:c4:49:4f:5d:88:
95:bc:25:4d:6e:9a:81:dc:7b:1c:e3:79:ea:15:b8:
08:45:c0:93:27:39:22:14:96:87:38:63:c4:ec:b1:
23:da:77:fb:e8:52:78:43:ab:69:89:8a:bc:8d:76:
3a:b4:0d:ef:6c:ef:3e:11:7a:56:cf:d0:ab:9e:10:
9e:6e:8f:50:16:8a:e2:a1:02:97:0e:c5:36:5e:39:
45:d5:c2:b6:2c:7d:c1:84:ce:75:33:c0:5e:c9:f8:
8f:80:18:2b:d8:b1:82:be:ba:d8:66:a1:19:c7:1d:
0b:e4:45:a8:0c:0c:cc:d7:77:30:ec:55:1b:73:56:
8f:ea:55:12:d2:7c:6d:8c:74:12:fa:7d:d2:b5:55:
3b:4d:c1:a3:59:e8:c9:47:36:d4:d6:68:31:27:5e:
00:57:2c:85:1f:c6:c2:b6:d2:d5:b2:d9:75:e2:5c:
b7:f6:5f:77:85:3d:d0:c3:c8:63:d0:0d:02:8f:f7:
52:d6:06:41:fd:59:97:d1:2d:05:f4:db:46:db:cd:
1e:71:d4:75:0b:29:d2:eb:d4:7d:8e:f7:87:6e:b4:
cd:ba:d3:71:fe:10:9a:b0:05:11:b1:30:24:86:16:
a8:f9:c5:2c:1e:8c:27:50:c3:b1:c4:f7:9b:08:b4:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F8:A2:E2:0C:62:66:DC:EC:E8:40:CF:48:26:3D:88:46:D4:F3:6D
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c5:e4:b7:8d:76:04:87:9e:c3:73:2d:d7:5c:0c:8c:91:79:
c0:18:98:cf:9e:31:cc:a7:e8:3e:8d:8f:c7:ac:ea:32:15:e6:
ec:4b:98:1a:0b:38:45:95:5c:6c:65:9d:d9:e6:b1:e6:07:c8:
39:73:ce:50:f1:f3:2d:62:01:2f:45:60:7d:09:a1:1b:f6:fd:
84:d3:06:42:96:f8:f1:ae:a7:58:22:66:af:73:af:2b:69:e2:
15:3d:9e:26:c3:49:b9:45:60:1c:4d:5e:4a:eb:58:4e:1f:9d:
f1:a0:99:67:4e:18:29:07:1c:31:1f:5e:76:ba:34:5a:36:c3:
a8:65:8e:73:85:aa:8e:bc:d2:50:b2:58:06:dc:07:07:6c:82:
fb:71:e6:ec:10:ef:37:7d:5d:34:59:6e:d9:db:8e:87:a7:8d:
dd:6f:73:2b:ef:77:70:80:44:7f:87:fd:86:ba:2d:60:e9:43:
89:54:20:f0:7b:b6:fe:17:46:20:04:69:98:b4:28:2d:26:e7:
da:df:50:5a:fa:67:5f:4e:ce:8e:e8:ac:7f:77:f0:d6:8b:84:
aa:23:0d:d2:cb:e3:f4:1e:6c:1c:47:d6:04:27:d0:46:cd:c1:
9a:7c:c8:a7:93:47:65:d7:f9:d7:b9:c4:72:be:56:c9:98:79:
db:e3:0b:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC30wKg8Bs8urvMxYDIfv2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOGEwZTBiMWIyMWYwOTMzMzNjMDc0ODE0NWIxNjI4NDE4
Y2YyYjUwHhcNMjYwOTE5MDQwMDU0WhcNMjYwOTIwMDQwMDU0WjAzMTEwLwYDVQQD
Eyg5Y2Y4YTJlMjBjNjI2NmRjZWNlODQwY2Y0ODI2M2Q4ODQ2ZDRmMzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmAoPecyquJAxElPXYiVvCVNbpqB
3Hsc43nqFbgIRcCTJzkiFJaHOGPE7LEj2nf76FJ4Q6tpiYq8jXY6tA3vbO8+EXpW
z9CrnhCebo9QForioQKXDsU2XjlF1cK2LH3BhM51M8BeyfiPgBgr2LGCvrrYZqEZ
xx0L5EWoDAzM13cw7FUbc1aP6lUS0nxtjHQS+n3StVU7TcGjWejJRzbU1mgxJ14A
VyyFH8bCttLVstl14ly39l93hT3Qw8hj0A0Cj/dS1gZB/VmX0S0F9NtG280ecdR1
CynS69R9jveHbrTNutNx/hCasAURsTAkhhao+cUsHownUMOxxPebCLQMewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz4ouIMYmbc7OhAz0gmPYhG1PNtMB8GA1UdIwQY
MBaAFKyKDgsbIfCTMzwHSBRbFihBjPK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84Y2U2YTEtMTMwYy00ODBlLWE5MDMt
ZGI4ZWZmMWIxMWEwLzEvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84Y2U2YTEtMTMwYy00ODBlLWE5MDMtZGI4ZWZmMWIxMWEw
LzEvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMXkt412
BIeew3Mt11wMjJF5wBiYz54xzKfoPo2Px6zqMhXm7EuYGgs4RZVcbGWd2eax5gfI
OXPOUPHzLWIBL0VgfQmhG/b9hNMGQpb48a6nWCJmr3OvK2niFT2eJsNJuUVgHE1e
SutYTh+d8aCZZ04YKQccMR9edro0WjbDqGWOc4WqjrzSULJYBtwHB2yC+3Hm7BDv
N31dNFlu2duOh6eN3W9zK+93cIBEf4f9hrotYOlDiVQg8Hu2/hdGIARpmLQoLSbn
2t9QWvpnX07Ojuisf3fw1ouEqiMN0svj9B5sHEfWBCfQRs3BmnzIp5NHZdf517nE
cr5WyZh52+MLKQ==
-----END CERTIFICATE-----
Generated at Sat Sep 19 07:37:31 2026 by rpki-client