Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: btZKEwWMnmThmwUhIM9i4X4TBGs2mEPq5gVgBo871T8=
Subject key identifier: 7F:CD:8D:B7:82:4F:06:03:01:84:87:0D:B1:99:06:42:DC:A7:C5:EC
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 01A001A5FA247AB5F0A244BFBAE03BB5C0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 19:00:49 +0000
Manifest this update: Fri 14 Aug 2026 19:00:49 +0000
Manifest next update: Sat 15 Aug 2026 19:00:49 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: 2hVw4EEyDZ57SXncUkbano66BQ19XTjmcj1BBQln5L8=)
2: 6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa (hash: CYhce381HzbX7vSncPONtF+Lbdg5xHx48Q/vd4tyB6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:fa:24:7a:b5:f0:a2:44:bf:ba:e0:3b:b5:c0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Aug 14 19:00:49 2026 GMT
Not After : Aug 15 19:00:49 2026 GMT
Subject: CN=7fcd8db7824f06030184870db1990642dca7c5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:26:a9:5d:be:4a:87:7b:4c:77:38:9d:b1:
c3:76:26:90:dc:fd:77:f0:01:ea:af:97:12:9f:06:
39:a4:a2:3f:b9:52:cd:0e:63:13:ed:ae:da:34:f3:
4c:41:b6:07:d0:63:62:0f:bc:8c:49:0f:84:4e:a0:
95:fe:14:df:2a:92:1c:77:24:30:32:6b:e0:9b:35:
d0:81:e5:f9:63:55:6b:b7:c9:58:bd:92:12:dc:44:
54:bf:e5:50:5d:db:ab:63:99:a4:8c:72:17:00:f8:
3c:ef:e8:6f:6f:c8:22:56:58:3f:a7:2b:98:9e:91:
74:50:f7:ed:93:2a:f6:1b:eb:2b:db:08:1e:c6:69:
4d:a2:c2:37:74:0e:65:48:10:fa:f0:c1:3c:06:cc:
49:a9:c4:3d:cb:2d:af:2c:cf:c0:e0:48:3b:5d:69:
56:c3:82:08:ff:10:85:96:7f:fb:60:93:42:14:37:
5d:cc:c8:3c:f3:f1:ef:33:59:07:fe:a5:53:f3:2a:
21:ed:32:18:51:14:65:9b:26:74:8f:9d:cf:17:3e:
99:91:dc:ca:54:1a:ce:d9:d2:83:22:dc:8b:10:cf:
51:d5:fc:4d:73:b5:95:d9:77:e7:12:42:39:53:8a:
26:4d:55:7b:e4:bb:9b:29:f4:ff:84:a9:03:c8:2e:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CD:8D:B7:82:4F:06:03:01:84:87:0D:B1:99:06:42:DC:A7:C5:EC
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fe:1d:bf:5f:af:c7:11:13:a0:06:46:59:14:74:e8:2b:51:
6f:cd:f6:14:02:38:21:b3:7c:69:91:1d:0e:5c:b7:73:1d:46:
9d:d8:b9:0f:75:c1:64:3e:22:d3:c3:dc:61:1e:22:a5:a8:62:
68:43:5e:3e:76:af:60:89:06:94:69:83:ce:6e:3a:25:86:b0:
83:3b:b1:66:d9:6f:9f:ed:de:88:48:12:ce:d0:e2:1c:c2:3d:
04:6d:39:b7:5d:fe:c6:3f:d9:d4:af:86:cb:88:50:ef:24:3b:
9f:9e:3d:68:17:75:5b:ae:d1:ea:ce:5f:99:1a:cd:1f:25:b4:
cb:3c:e0:ee:ae:16:57:aa:f0:de:2c:0d:32:57:a5:6e:5a:40:
47:8a:af:09:89:54:d8:d0:12:a5:15:aa:25:00:cb:98:12:3a:
f9:3c:50:fe:63:3b:47:60:de:8d:bf:d5:65:11:96:c9:75:63:
53:ef:b8:88:c5:9b:de:15:ae:86:8b:45:b0:be:de:6a:5f:f7:
9e:e8:73:e2:a1:fd:00:d4:16:74:a9:7f:f0:63:57:69:5e:ab:
22:6f:d5:4e:51:f5:59:98:4e:0e:5b:07:bf:c6:e1:20:ac:7c:
bd:20:76:60:fd:8e:1a:78:be:3d:fd:31:ca:0e:7c:35:63:fb:
c5:e2:61:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpfokerXwokS/uuA7tcDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjExMTU5YjcyZDQwMTVlZDg2N2I0MmI3ODQzODFlNWQ5
NTVhOGYwHhcNMjYwODE0MTkwMDQ5WhcNMjYwODE1MTkwMDQ5WjAzMTEwLwYDVQQD
Eyg3ZmNkOGRiNzgyNGYwNjAzMDE4NDg3MGRiMTk5MDY0MmRjYTdjNWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMYmqV2+Sod7THc4nbHDdiaQ3P13
8AHqr5cSnwY5pKI/uVLNDmMT7a7aNPNMQbYH0GNiD7yMSQ+ETqCV/hTfKpIcdyQw
MmvgmzXQgeX5Y1Vrt8lYvZIS3ERUv+VQXdurY5mkjHIXAPg87+hvb8giVlg/pyuY
npF0UPftkyr2G+sr2wgexmlNosI3dA5lSBD68ME8BsxJqcQ9yy2vLM/A4Eg7XWlW
w4II/xCFln/7YJNCFDddzMg88/HvM1kH/qVT8yoh7TIYURRlmyZ0j53PFz6ZkdzK
VBrO2dKDItyLEM9R1fxNc7WV2XfnEkI5U4omTVV75LubKfT/hKkDyC5QLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/NjbeCTwYDAYSHDbGZBkLcp8XsMB8GA1UdIwQY
MBaAFNKxEVm3LUAV7YZ7QreEOB5dlVqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAt
ZjViOTQ5NTljOWY3LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAtZjViOTQ5NTljOWY3
LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtP4dv1+v
xxEToAZGWRR06CtRb832FAI4IbN8aZEdDly3cx1Gndi5D3XBZD4i08PcYR4ipahi
aENePnavYIkGlGmDzm46JYawgzuxZtlvn+3eiEgSztDiHMI9BG05t13+xj/Z1K+G
y4hQ7yQ7n549aBd1W67R6s5fmRrNHyW0yzzg7q4WV6rw3iwNMlelblpAR4qvCYlU
2NASpRWqJQDLmBI6+TxQ/mM7R2Dejb/VZRGWyXVjU++4iMWb3hWuhotFsL7eal/3
nuhz4qH9ANQWdKl/8GNXaV6rIm/VTlH1WZhODlsHv8bhIKx8vSB2YP2OGni+Pf0x
yg58NWP7xeJhpQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:16 2026 by rpki-client