Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: UvrwlEC9n3dEDrMWYi+MLZccZhSy6S4x1zyLl3L5wuk=
Subject key identifier: 15:DD:45:BD:AE:8A:E8:B0:FD:D9:29:54:4F:3A:DE:89:A8:9F:00:F6
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 01A0035E142758D92FE6A36544D0E640A552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 1A01
Signing time: Sat 15 Aug 2026 03:01:32 +0000
Manifest this update: Sat 15 Aug 2026 03:01:32 +0000
Manifest next update: Sun 16 Aug 2026 03:01:32 +0000
Files and hashes: 1: Hxhp2uGgJ96mDQMXtL0at3ZkeNo.roa (hash: JdSfPmOZyz9SS20YY9m/BqTfnfPdc3k8FKlJ51fneog=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: w8jv8zcP5Am+LF7DXKkR21Rcuzg8HQl8b0Qq/8848T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5e:14:27:58:d9:2f:e6:a3:65:44:d0:e6:40:a5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Aug 15 03:01:32 2026 GMT
Not After : Aug 16 03:01:32 2026 GMT
Subject: CN=15dd45bdae8ae8b0fdd929544f3ade89a89f00f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:cc:f5:60:7d:84:fc:65:cc:3a:fb:ef:e7:
8f:10:4e:34:51:6f:0a:5e:9f:23:bd:10:d5:d9:29:
d9:4f:ab:d5:f3:7f:af:0d:48:f4:de:19:35:18:6a:
6c:d5:b7:a2:1c:65:0f:d9:0c:5e:5e:60:a4:ac:d1:
98:03:89:08:3e:4c:ab:ab:15:9b:2f:0d:70:c1:cb:
48:1b:b4:0f:3b:50:41:72:17:7d:34:06:60:2d:71:
f0:df:5d:98:6d:a8:6a:6e:3d:76:23:92:cf:cf:70:
8f:fc:b6:f1:1b:6b:8a:75:a9:fb:3b:ae:83:7d:fe:
37:41:00:d8:b8:ec:31:ee:b9:ab:41:20:d2:b7:fd:
91:86:bf:f8:bc:2c:1a:92:50:1e:cc:1d:db:71:9e:
06:6d:90:05:6b:86:62:23:2f:4c:3b:5a:9b:ee:bb:
96:9c:4c:8d:b4:41:65:8e:b0:43:66:43:4e:40:60:
24:ec:28:b1:2d:0b:57:b6:57:12:dc:65:a0:bd:57:
28:c5:c8:93:4f:fd:8a:af:aa:ca:08:83:bc:03:3a:
95:11:ac:55:5e:04:7f:08:ef:97:79:9f:7b:b2:d1:
be:fd:a7:c7:ba:78:7d:64:23:11:4e:7e:32:2d:a8:
ec:1f:94:f6:cb:a3:ea:72:2e:4f:7e:50:2b:f4:31:
a7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DD:45:BD:AE:8A:E8:B0:FD:D9:29:54:4F:3A:DE:89:A8:9F:00:F6
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:36:1a:fb:d1:73:80:77:1c:80:0f:48:11:3c:ee:ab:68:1c:
65:e3:b9:4d:ec:ca:2c:b0:eb:a3:53:9d:1e:3c:79:75:e3:29:
76:bf:28:9c:f7:a7:e9:53:8e:9e:02:65:d4:05:57:c1:85:b6:
63:d2:7a:a9:d9:3c:d7:b0:29:13:24:68:dc:17:80:8b:c1:fe:
17:3a:b3:2e:ef:b1:77:3f:92:4d:44:ff:28:c9:bd:1d:9f:aa:
28:85:be:e6:6d:2c:ef:99:e9:ea:4a:ef:83:fd:bc:29:86:2f:
1c:29:b3:85:d3:ff:5f:58:f3:f3:67:e4:01:fb:f3:57:38:d0:
41:2f:09:1f:7a:a7:64:d3:7a:8b:0b:28:84:ac:14:a3:45:d1:
75:ce:45:47:fa:e6:bb:54:72:ef:f1:e7:23:f5:16:01:fb:e3:
94:ae:99:70:f5:86:66:7c:fe:76:1c:cd:92:8b:99:9b:fc:1f:
87:96:66:a7:73:a5:c8:df:58:15:e1:8e:59:e5:f6:2b:e3:ef:
24:2d:7f:ad:02:0b:2c:80:5d:04:b6:17:00:b6:17:54:83:f1:
41:5b:16:ec:42:b2:9b:d3:89:8a:98:e2:4e:80:77:4c:e8:df:
dc:7a:c2:ee:ae:26:5f:53:e9:7a:b9:7d:62:4d:04:ab:b4:eb:
55:db:b6:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADXhQnWNkv5qNlRNDmQKVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYzM4ZDNlMWM0ZTdlNTQzYTM2YzhiNjM1M2ViNjZkYTRk
YWI0MGIwHhcNMjYwODE1MDMwMTMyWhcNMjYwODE2MDMwMTMyWjAzMTEwLwYDVQQD
EygxNWRkNDViZGFlOGFlOGIwZmRkOTI5NTQ0ZjNhZGU4OWE4OWYwMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVzM9WB9hPxlzDr77+ePEE40UW8K
Xp8jvRDV2SnZT6vV83+vDUj03hk1GGps1beiHGUP2QxeXmCkrNGYA4kIPkyrqxWb
Lw1wwctIG7QPO1BBchd9NAZgLXHw312Ybahqbj12I5LPz3CP/LbxG2uKdan7O66D
ff43QQDYuOwx7rmrQSDSt/2Rhr/4vCwaklAezB3bcZ4GbZAFa4ZiIy9MO1qb7ruW
nEyNtEFljrBDZkNOQGAk7CixLQtXtlcS3GWgvVcoxciTT/2Kr6rKCIO8AzqVEaxV
XgR/CO+XeZ97stG+/afHunh9ZCMRTn4yLajsH5T2y6Pqci5PflAr9DGndQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXdRb2uiuiw/dkpVE863omonwD2MB8GA1UdIwQY
MBaAFJPDjT4cTn5UOjbItjU+tm2k2rQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNzFlMzAtYzg2OC00OGZjLTgwZGYt
MzY0ODMxMzlkYzVlLzEvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jNzFlMzAtYzg2OC00OGZjLTgwZGYtMzY0ODMxMzlkYzVl
LzEvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejYa+9Fz
gHccgA9IETzuq2gcZeO5TezKLLDro1OdHjx5deMpdr8onPen6VOOngJl1AVXwYW2
Y9J6qdk817ApEyRo3BeAi8H+FzqzLu+xdz+STUT/KMm9HZ+qKIW+5m0s75np6krv
g/28KYYvHCmzhdP/X1jz82fkAfvzVzjQQS8JH3qnZNN6iwsohKwUo0XRdc5FR/rm
u1Ry7/HnI/UWAfvjlK6ZcPWGZnz+dhzNkouZm/wfh5Zmp3OlyN9YFeGOWeX2K+Pv
JC1/rQILLIBdBLYXALYXVIPxQVsW7EKym9OJipjiToB3TOjf3HrC7q4mX1Pperl9
Yk0Eq7TrVdu2HA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:58 2026 by rpki-client