Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
File: p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json)
Hash identifier: WJfSjpUVnPzeneo65z0SSYqX2kBTeu68DDX35SOrvlI=
Subject key identifier: 40:F8:A4:12:29:8D:81:3B:A6:D6:3B:AC:15:B9:65:D7:3F:84:2A:AF
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial: 01A0250DC6E2932170CC85AC7D9DD9BF101D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
Manifest number: 0A67
Signing time: Fri 21 Aug 2026 16:00:54 +0000
Manifest this update: Fri 21 Aug 2026 16:00:54 +0000
Manifest next update: Sat 22 Aug 2026 16:00:54 +0000
Files and hashes: 1: JWCAfjjh5zsM89EhT5JBBpHJm28.roa (hash: +D0zzkFTWspOvvhGzzd00EXqwAQzFC2yhaPbQUOWqZU=)
2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: MnGOw34JnPNufZiNG4A6wTte79LakCDKy3yyHsRBPiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:0d:c6:e2:93:21:70:cc:85:ac:7d:9d:d9:bf:10:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Validity
Not Before: Aug 21 16:00:54 2026 GMT
Not After : Aug 22 16:00:54 2026 GMT
Subject: CN=40f8a412298d813ba6d63bac15b965d73f842aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:b3:ee:47:0e:fc:fe:74:eb:11:a1:f9:5a:
2c:77:94:05:88:f3:dc:39:71:e9:e3:4d:4f:b4:ba:
2d:5b:a3:aa:9f:88:cc:6e:08:a1:50:5f:bb:4c:f5:
21:21:2c:b1:07:8f:e1:c6:f9:37:62:0e:70:98:bb:
14:8e:31:ef:10:92:2b:0c:e4:35:7e:73:2f:ec:5a:
a4:a5:bc:a2:08:fb:32:9b:97:de:a3:1f:67:7f:bf:
bc:dd:00:02:92:e9:cf:51:9e:15:70:6a:f6:70:b0:
83:f0:96:6e:10:f8:d3:31:ec:85:7b:1f:42:0f:3f:
04:0b:9c:b9:9a:7b:90:d6:74:e0:af:74:d9:7c:6d:
aa:d8:a6:b2:2b:a7:68:e6:20:6a:c0:4f:7e:be:31:
99:80:27:91:e1:a9:bf:d6:b6:e5:59:9d:17:fd:a0:
c8:64:a6:cd:f2:64:44:f2:db:26:d2:c6:94:31:dd:
11:71:0a:da:11:85:f0:69:26:47:f0:65:ca:10:d5:
3b:45:c8:e8:93:e8:1c:af:36:94:98:24:eb:2b:dd:
ec:69:99:51:69:b2:25:1c:59:4e:5e:cf:15:81:f7:
c4:f1:21:cb:ed:2c:19:91:89:05:ff:e0:7e:79:2e:
e7:85:9e:8d:6d:e6:43:82:51:e4:67:7b:97:2d:75:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F8:A4:12:29:8D:81:3B:A6:D6:3B:AC:15:B9:65:D7:3F:84:2A:AF
X509v3 Authority Key Identifier:
keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:68:6e:a0:3a:06:1d:fd:c6:94:2b:e3:08:83:26:30:a3:c1:
32:f6:32:03:db:3a:f5:b2:dc:2e:5b:74:dc:87:f3:7a:6b:d2:
f4:bd:d5:93:64:e4:41:e5:45:eb:c1:ab:14:05:11:f0:42:12:
2d:64:b9:97:76:a5:ab:ac:c1:87:dd:0c:bb:3a:10:5f:ca:33:
a4:fc:44:5b:75:ca:11:c5:cf:0e:81:de:40:1e:e0:bf:df:cd:
74:4a:80:55:53:0f:7b:1a:9c:04:b1:44:5d:c2:e0:97:58:1c:
65:f2:7b:70:ae:49:c2:dd:47:ab:84:91:ed:f7:aa:04:7a:05:
e2:f0:ae:58:bf:1a:b3:62:14:60:3b:fe:0f:f1:e4:ba:13:36:
a5:9c:64:cf:92:c3:e6:b0:01:21:36:6e:67:e3:1c:2d:c3:ed:
4c:23:45:40:da:5f:aa:f3:6b:8f:34:4c:76:fc:c8:aa:5d:2e:
e6:46:83:20:16:57:d2:63:d2:09:df:8f:df:7e:99:b7:55:ba:
bc:de:da:a6:03:e3:da:f9:28:e4:b9:dc:0f:8c:14:35:c0:22:
89:53:92:68:9d:9f:0e:d7:af:7a:58:85:c2:d2:0e:f0:14:b3:
b3:13:33:f2:10:be:6c:fd:53:1f:77:83:a7:2d:52:21:a7:ed:
97:a2:51:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAlDcbikyFwzIWsfZ3ZvxAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWYzYWQzMTQyYTJjMDJmOTkyYjk2YWIwYjliNjM5MGFm
N2ZlMDIwHhcNMjYwODIxMTYwMDU0WhcNMjYwODIyMTYwMDU0WjAzMTEwLwYDVQQD
Eyg0MGY4YTQxMjI5OGQ4MTNiYTZkNjNiYWMxNWI5NjVkNzNmODQyYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TOz7kcO/P506xGh+Vosd5QFiPPc
OXHp401PtLotW6Oqn4jMbgihUF+7TPUhISyxB4/hxvk3Yg5wmLsUjjHvEJIrDOQ1
fnMv7FqkpbyiCPsym5feox9nf7+83QACkunPUZ4VcGr2cLCD8JZuEPjTMeyFex9C
Dz8EC5y5mnuQ1nTgr3TZfG2q2KayK6do5iBqwE9+vjGZgCeR4am/1rblWZ0X/aDI
ZKbN8mRE8tsm0saUMd0RcQraEYXwaSZH8GXKENU7Rcjok+gcrzaUmCTrK93saZlR
abIlHFlOXs8VgffE8SHL7SwZkYkF/+B+eS7nhZ6NbeZDglHkZ3uXLXVoBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED4pBIpjYE7ptY7rBW5Zdc/hCqvMB8GA1UdIwQY
MBaAFKefOtMUKiwC+ZK5arC5tjkK9/4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MzYzY2UtYzhhMC00OTYxLWFlODAt
ZDVhNzg1NTE3YmJmLzEvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82MzYzY2UtYzhhMC00OTYxLWFlODAtZDVhNzg1NTE3YmJm
LzEvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGhuoDoG
Hf3GlCvjCIMmMKPBMvYyA9s69bLcLlt03IfzemvS9L3Vk2TkQeVF68GrFAUR8EIS
LWS5l3alq6zBh90MuzoQX8ozpPxEW3XKEcXPDoHeQB7gv9/NdEqAVVMPexqcBLFE
XcLgl1gcZfJ7cK5Jwt1Hq4SR7feqBHoF4vCuWL8as2IUYDv+D/HkuhM2pZxkz5LD
5rABITZuZ+McLcPtTCNFQNpfqvNrjzRMdvzIql0u5kaDIBZX0mPSCd+P336Zt1W6
vN7apgPj2vko5LncD4wUNcAiiVOSaJ2fDteveliFwtIO8BSzsxMz8hC+bP1TH3eD
py1SIaftl6JRIg==
-----END CERTIFICATE-----
Generated at Sat Aug 22 00:53:01 2026 by rpki-client