Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/85GH19IXLTZcKckH479vqxZLLE4.mft
File: 85GH19IXLTZcKckH479vqxZLLE4.mft (raw, json)
Hash identifier: OXmdXJNDmqr4EXFY8312IF7znVVKIc50oFu34iYwxq0=
Subject key identifier: A2:32:3B:EB:84:81:C7:58:9C:D6:DD:7A:E0:DC:5A:E7:B4:D8:9B:7E
Authority key identifier: F3:91:87:D7:D2:17:2D:36:5C:29:C9:07:E3:BF:6F:AB:16:4B:2C:4E
Certificate issuer: /CN=f39187d7d2172d365c29c907e3bf6fab164b2c4e
Certificate serial: 01A0404E2D7082707431DC0C2A56AC244F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85GH19IXLTZcKckH479vqxZLLE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/85GH19IXLTZcKckH479vqxZLLE4.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:00 +0000
Manifest this update: Wed 26 Aug 2026 23:01:00 +0000
Manifest next update: Thu 27 Aug 2026 23:01:00 +0000
Files and hashes: 1: 85GH19IXLTZcKckH479vqxZLLE4.crl (hash: WDy/uvPv+GqXnYvyY2eq23omsSYCplTx0Xp7Rnb/NrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/85GH19IXLTZcKckH479vqxZLLE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/85GH19IXLTZcKckH479vqxZLLE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/85GH19IXLTZcKckH479vqxZLLE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:2d:70:82:70:74:31:dc:0c:2a:56:ac:24:4f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f39187d7d2172d365c29c907e3bf6fab164b2c4e
Validity
Not Before: Aug 26 23:01:00 2026 GMT
Not After : Aug 27 23:01:00 2026 GMT
Subject: CN=a2323beb8481c7589cd6dd7ae0dc5ae7b4d89b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:09:8b:ef:74:c9:33:0f:db:da:e6:38:84:
3d:4f:97:99:3f:c9:0b:da:df:5d:55:e8:86:01:a9:
fb:34:d2:5c:69:aa:1d:3f:52:76:56:48:57:d6:17:
18:a2:74:d0:93:9a:44:f4:1a:7e:e8:8c:c4:c6:b5:
87:ff:67:9d:e2:e1:64:a1:c1:49:3b:5f:0b:6d:84:
94:4d:cb:e2:78:d4:7b:9c:84:a2:73:cb:e0:f1:3a:
97:a4:e3:af:22:26:c9:19:6f:73:a9:0f:5f:e2:38:
64:34:8e:49:1f:69:4c:7f:3f:e2:ec:f4:f4:4b:f6:
fd:79:57:af:3f:0e:46:ef:42:93:8e:5a:cc:f9:4c:
02:a1:bc:30:cf:7f:71:92:29:88:8c:33:ae:cf:b6:
f3:87:fc:7c:6b:99:e5:b4:02:00:02:e3:60:7a:ed:
f1:17:9b:3e:0d:da:fa:59:69:eb:b2:27:be:05:92:
81:f6:98:ce:81:40:65:d3:92:81:bc:3d:16:2e:21:
10:cf:12:e0:9d:e8:5b:8c:a1:d1:8c:ad:b2:79:fd:
40:88:8a:af:a5:8d:6d:ab:3e:1c:12:d4:88:0a:a2:
d9:86:5d:27:df:64:71:86:73:c6:76:23:63:74:7e:
2c:aa:38:20:b4:7f:35:20:2e:31:c3:a2:06:53:05:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:32:3B:EB:84:81:C7:58:9C:D6:DD:7A:E0:DC:5A:E7:B4:D8:9B:7E
X509v3 Authority Key Identifier:
keyid:F3:91:87:D7:D2:17:2D:36:5C:29:C9:07:E3:BF:6F:AB:16:4B:2C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85GH19IXLTZcKckH479vqxZLLE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/85GH19IXLTZcKckH479vqxZLLE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/85GH19IXLTZcKckH479vqxZLLE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:86:a1:f5:3b:01:47:aa:56:b5:92:07:53:c5:72:6a:a4:b9:
03:55:9a:8a:82:39:51:a2:56:01:91:c7:56:d8:a4:13:d5:ae:
51:a1:dd:1c:78:7e:1e:2a:7b:3a:c1:78:f3:93:04:8a:39:cd:
5d:c5:a5:f1:88:f0:84:19:f6:9d:13:b9:7d:8b:5b:1e:20:9f:
33:4d:9b:4b:e6:b7:38:f4:82:ed:54:d2:d0:5f:21:2a:f5:a2:
63:32:d5:ad:d4:30:08:1c:97:ae:44:d0:17:35:7e:d0:34:55:
1f:2a:d7:1f:6c:13:a8:03:3f:1a:db:f7:c5:01:a5:b2:77:60:
9f:8e:56:cd:4b:ef:b6:cf:80:5b:51:23:10:33:bc:61:c2:e3:
27:8b:53:4a:e0:e0:0d:d9:aa:1b:60:6f:8a:4d:12:90:20:d3:
ba:eb:0f:87:4e:cd:4e:22:c8:90:b1:b5:51:45:fd:b8:00:c2:
63:5f:32:bd:98:95:4d:62:5b:34:e0:42:1f:ce:4e:17:0b:e8:
14:1e:c1:8c:0b:d4:b9:61:17:3f:27:f9:35:ff:32:b0:d1:22:
5c:b1:ca:c7:a1:19:a0:a8:be:b0:d7:3e:94:cc:10:f1:ab:c6:
7f:80:10:ed:9e:13:0b:0a:f0:32:4b:0f:d8:5f:cc:9a:06:96:
db:56:de:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATi1wgnB0MdwMKlasJE8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzOTE4N2Q3ZDIxNzJkMzY1YzI5YzkwN2UzYmY2ZmFiMTY0
YjJjNGUwHhcNMjYwODI2MjMwMTAwWhcNMjYwODI3MjMwMTAwWjAzMTEwLwYDVQQD
EyhhMjMyM2JlYjg0ODFjNzU4OWNkNmRkN2FlMGRjNWFlN2I0ZDg5YjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6cJi+90yTMP29rmOIQ9T5eZP8kL
2t9dVeiGAan7NNJcaaodP1J2VkhX1hcYonTQk5pE9Bp+6IzExrWH/2ed4uFkocFJ
O18LbYSUTcvieNR7nISic8vg8TqXpOOvIibJGW9zqQ9f4jhkNI5JH2lMfz/i7PT0
S/b9eVevPw5G70KTjlrM+UwCobwwz39xkimIjDOuz7bzh/x8a5nltAIAAuNgeu3x
F5s+Ddr6WWnrsie+BZKB9pjOgUBl05KBvD0WLiEQzxLgnehbjKHRjK2yef1AiIqv
pY1tqz4cEtSICqLZhl0n32RxhnPGdiNjdH4sqjggtH81IC4xw6IGUwUsXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIyO+uEgcdYnNbdeuDcWue02Jt+MB8GA1UdIwQY
MBaAFPORh9fSFy02XCnJB+O/b6sWSyxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODVHSDE5SVhMVFpjS2NrSDQ3OXZxeFpMTEU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZWU2OTItNmQ2NC00NzNhLWEwNjMt
MmNmZTgzNjY2NjBmLzEvODVHSDE5SVhMVFpjS2NrSDQ3OXZxeFpMTEU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZWU2OTItNmQ2NC00NzNhLWEwNjMtMmNmZTgzNjY2NjBm
LzEvODVHSDE5SVhMVFpjS2NrSDQ3OXZxeFpMTEU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4ah9TsB
R6pWtZIHU8VyaqS5A1WaioI5UaJWAZHHVtikE9WuUaHdHHh+Hip7OsF485MEijnN
XcWl8YjwhBn2nRO5fYtbHiCfM02bS+a3OPSC7VTS0F8hKvWiYzLVrdQwCByXrkTQ
FzV+0DRVHyrXH2wTqAM/Gtv3xQGlsndgn45WzUvvts+AW1EjEDO8YcLjJ4tTSuDg
DdmqG2Bvik0SkCDTuusPh07NTiLIkLG1UUX9uADCY18yvZiVTWJbNOBCH85OFwvo
FB7BjAvUuWEXPyf5Nf8ysNEiXLHKx6EZoKi+sNc+lMwQ8avGf4AQ7Z4TCwrwMksP
2F/MmgaW21begw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:16 2026 by rpki-client