Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.mft
File: C4XDO8AkLFLwilwUPGsb0g0M-Ac.mft (raw, json)
Hash identifier: xiDhE3bRIyJ9qnEv2Lj5CfHV+GkSloQVVjtJ6CT6GCk=
Subject key identifier: 0A:DE:98:62:DC:05:EB:84:6D:F1:72:73:78:92:F2:01:D1:68:6A:68
Authority key identifier: 0B:85:C3:3B:C0:24:2C:52:F0:8A:5C:14:3C:6B:1B:D2:0D:0C:F8:07
Certificate issuer: /CN=0b85c33bc0242c52f08a5c143c6b1bd20d0cf807
Certificate serial: 01A03F3B838BF1F30536D5F5ECA407B70061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4XDO8AkLFLwilwUPGsb0g0M-Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:00:59 +0000
Manifest this update: Wed 26 Aug 2026 18:00:59 +0000
Manifest next update: Thu 27 Aug 2026 18:00:59 +0000
Files and hashes: 1: C4XDO8AkLFLwilwUPGsb0g0M-Ac.crl (hash: hqtnZdUqwADJhnqKFW3AU43JjOC7Z5jRK42epoFU5PE=)
2: L5cQ5SJUyLN7drpYYBzPM81Qf1g.roa (hash: /FF+sHYB7i2p1F+LkGmyZupdIg1ihT2WUmRZqDaJdeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4XDO8AkLFLwilwUPGsb0g0M-Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:83:8b:f1:f3:05:36:d5:f5:ec:a4:07:b7:00:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b85c33bc0242c52f08a5c143c6b1bd20d0cf807
Validity
Not Before: Aug 26 18:00:59 2026 GMT
Not After : Aug 27 18:00:59 2026 GMT
Subject: CN=0ade9862dc05eb846df172737892f201d1686a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:1b:9e:c2:40:07:e9:68:92:11:5e:9b:b4:
a5:2a:1e:ec:4e:b7:3e:32:72:25:dc:66:4f:b2:6f:
16:43:56:30:43:c3:b2:7b:ca:47:c4:a7:86:16:22:
9f:0c:77:38:4a:32:4a:9e:3d:d0:db:7d:d1:3f:cc:
4b:9f:a4:d3:d4:4f:38:18:70:a8:d8:46:bc:01:2b:
ec:b2:6a:05:7f:d8:f9:fd:78:54:9c:db:c0:ce:e5:
e4:34:c1:40:af:81:7b:c9:76:c2:6c:ee:33:56:df:
58:ed:61:c9:5f:dc:84:9d:74:16:5c:95:89:31:9f:
c9:c0:fd:fc:5e:25:5a:21:74:f7:e6:d4:d5:eb:d7:
fc:8a:a9:fd:ae:78:84:5b:03:6c:df:62:85:30:e9:
e1:5f:b5:b7:17:3c:b5:43:3b:17:4b:70:d4:5f:24:
45:0b:85:84:30:c6:99:1d:b6:b1:a1:07:b9:6d:a8:
45:ba:a3:b6:55:81:be:d3:77:93:8c:e9:61:37:fd:
10:ad:75:6b:d4:13:1f:22:46:00:3f:4e:f0:a3:04:
d3:a1:1d:1f:c5:69:1b:10:df:15:30:c4:c0:ef:3b:
f0:03:e7:7b:b2:72:e2:a2:e1:54:e3:81:78:9f:e6:
2b:8e:3f:75:7a:0f:d5:45:e6:23:4a:df:2f:f0:9e:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DE:98:62:DC:05:EB:84:6D:F1:72:73:78:92:F2:01:D1:68:6A:68
X509v3 Authority Key Identifier:
keyid:0B:85:C3:3B:C0:24:2C:52:F0:8A:5C:14:3C:6B:1B:D2:0D:0C:F8:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4XDO8AkLFLwilwUPGsb0g0M-Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:63:a7:8e:d6:17:e7:46:0c:fe:bf:c4:57:bc:93:99:36:30:
c2:e5:be:e8:21:5f:0d:a8:95:d6:6b:7f:00:70:80:1b:92:87:
be:93:68:2d:65:ca:34:be:47:d4:77:23:17:a3:f2:c9:f0:52:
41:9c:54:35:bf:51:3f:a3:36:28:b3:94:b2:b7:b6:c2:6e:40:
c7:0f:1c:d8:18:75:38:f2:11:95:db:e3:a8:40:4b:21:a6:1d:
66:f0:93:fe:71:9f:dc:91:a0:c5:b0:8a:bc:74:ef:3e:ca:c4:
7a:97:b4:3d:1b:ba:da:b5:db:52:d9:e2:7f:2d:33:58:9f:7c:
19:a2:ae:bf:7b:84:f7:10:48:ee:5d:e0:2b:91:77:d2:8d:55:
38:dc:5d:4f:c4:2f:1b:7e:cf:66:50:af:48:d4:24:b6:15:3c:
c5:b5:db:ee:bc:d8:7b:4b:5e:44:e7:6a:29:d6:6a:3e:ba:aa:
94:de:e5:94:66:84:b2:30:2d:24:57:5a:3f:f0:d2:b7:fa:0e:
06:5f:71:7a:f3:4c:47:6a:30:2e:8c:48:0a:09:69:eb:08:36:
5d:f2:74:b7:cb:bc:66:f2:24:a0:a5:06:5f:36:85:ab:cd:67:
93:af:59:a2:f0:c7:30:9e:c9:fd:58:3a:5c:73:92:5f:f7:11:
6f:d8:2c:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/O4OL8fMFNtX17KQHtwBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiODVjMzNiYzAyNDJjNTJmMDhhNWMxNDNjNmIxYmQyMGQw
Y2Y4MDcwHhcNMjYwODI2MTgwMDU5WhcNMjYwODI3MTgwMDU5WjAzMTEwLwYDVQQD
EygwYWRlOTg2MmRjMDVlYjg0NmRmMTcyNzM3ODkyZjIwMWQxNjg2YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7cbnsJAB+lokhFem7SlKh7sTrc+
MnIl3GZPsm8WQ1YwQ8Oye8pHxKeGFiKfDHc4SjJKnj3Q233RP8xLn6TT1E84GHCo
2Ea8ASvssmoFf9j5/XhUnNvAzuXkNMFAr4F7yXbCbO4zVt9Y7WHJX9yEnXQWXJWJ
MZ/JwP38XiVaIXT35tTV69f8iqn9rniEWwNs32KFMOnhX7W3Fzy1QzsXS3DUXyRF
C4WEMMaZHbaxoQe5bahFuqO2VYG+03eTjOlhN/0QrXVr1BMfIkYAP07wowTToR0f
xWkbEN8VMMTA7zvwA+d7snLiouFU44F4n+Yrjj91eg/VReYjSt8v8J4mJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAremGLcBeuEbfFyc3iS8gHRaGpoMB8GA1UdIwQY
MBaAFAuFwzvAJCxS8IpcFDxrG9INDPgHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzRYRE84QWtMRkx3aWx3VVBHc2IwZzBNLUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEt
MGMyZmY3OTM3ZTZmLzEvQzRYRE84QWtMRkx3aWx3VVBHc2IwZzBNLUFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEtMGMyZmY3OTM3ZTZm
LzEvQzRYRE84QWtMRkx3aWx3VVBHc2IwZzBNLUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwWOnjtYX
50YM/r/EV7yTmTYwwuW+6CFfDaiV1mt/AHCAG5KHvpNoLWXKNL5H1HcjF6PyyfBS
QZxUNb9RP6M2KLOUsre2wm5Axw8c2Bh1OPIRldvjqEBLIaYdZvCT/nGf3JGgxbCK
vHTvPsrEepe0PRu62rXbUtnify0zWJ98GaKuv3uE9xBI7l3gK5F30o1VONxdT8Qv
G37PZlCvSNQkthU8xbXb7rzYe0teROdqKdZqPrqqlN7llGaEsjAtJFdaP/DSt/oO
Bl9xevNMR2owLoxICglp6wg2XfJ0t8u8ZvIkoKUGXzaFq81nk69ZovDHMJ7J/Vg6
XHOSX/cRb9gsGg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:54 2026 by rpki-client