Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: zQsqcKd5kvmDedHGf2pksIR4a/nkjrqdDfZUvVUv6Jg=
Subject key identifier: 30:CB:60:4A:48:8A:CC:57:78:73:F9:F7:EF:77:AA:8F:60:58:44:79
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 01A0BE0B941AA38BA3F8A1AE77FAB27544E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0F8D
Signing time: Sun 20 Sep 2026 09:00:24 +0000
Manifest this update: Sun 20 Sep 2026 09:00:24 +0000
Manifest next update: Mon 21 Sep 2026 09:00:24 +0000
Files and hashes: 1: S04NKU0J13eA6-TGQ2BZfun47ys.roa (hash: xIlFQJwTJx7ez8Zx99ToD2cR7A/Ipyz0mMaGV2drzPQ=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: SKS0olJvSl/OfxpRetBqR4ly2dLmPZPnl4t7GfiafOk=)
3: rJKcaNGOpOiZ0iciVQt-oX04cPI.roa (hash: BT7ocoNehLiRKdELBQmLzdxfWaOUS/P7hDDrN7lDDSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0b:94:1a:a3:8b:a3:f8:a1:ae:77:fa:b2:75:44:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Sep 20 09:00:24 2026 GMT
Not After : Sep 21 09:00:24 2026 GMT
Subject: CN=30cb604a488acc577873f9f7ef77aa8f60584479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:49:cb:37:ba:a5:81:85:6b:fb:c5:36:af:
a2:fe:f0:bb:4c:38:c0:33:1e:05:18:72:68:df:68:
f1:22:6b:22:35:65:f3:ee:ed:cc:43:99:48:c2:a7:
a5:0a:a2:51:8f:92:8d:17:18:09:cb:4a:2f:d7:21:
10:54:d7:24:5c:d4:78:b9:7a:e2:56:69:90:37:e5:
8b:5d:fc:39:15:92:f9:a3:9e:95:bb:d2:d2:e1:26:
95:47:3b:46:92:87:9e:ec:55:d5:ab:60:ea:94:bd:
58:0d:bf:aa:89:5b:4a:8e:cf:ba:92:5d:74:1a:c3:
ab:f3:8f:56:3a:26:a6:11:8e:35:71:7a:12:7d:14:
93:5b:c1:0f:1c:bb:9b:65:0b:71:67:29:ae:8b:cc:
68:16:f3:bc:0a:f2:02:24:c6:c0:03:60:d2:c7:60:
81:8f:77:5b:76:81:74:ee:46:43:81:1d:d4:9c:7c:
c8:88:a5:ba:c0:cf:ed:11:2d:97:18:61:e8:78:b7:
f2:ba:d0:c6:0e:09:cf:d5:14:72:d2:57:c4:fa:78:
85:53:47:d8:b8:63:72:61:8e:6d:ea:9b:e0:1e:3c:
e1:36:8b:2a:02:96:71:45:04:bd:5d:68:b6:2a:ba:
22:26:61:af:8e:53:d8:45:e4:ab:3d:46:44:14:cd:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CB:60:4A:48:8A:CC:57:78:73:F9:F7:EF:77:AA:8F:60:58:44:79
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:53:8a:67:bc:a7:4e:ce:02:8e:3c:09:ad:54:fa:e7:8f:76:
46:a4:7d:4f:f3:2e:2f:c5:bb:73:d8:fd:4f:02:31:47:04:e7:
c2:17:d7:e3:67:07:ad:bc:fd:f2:f7:6b:24:da:c9:8b:ac:20:
5c:0d:97:2a:f4:d6:01:30:10:24:df:f5:26:ed:0e:4d:a5:5a:
32:bc:bb:a0:dd:a9:19:f6:61:ac:f2:d9:d0:e9:fd:9d:67:31:
a7:4e:86:f7:d3:f3:e3:f4:da:a3:f0:3c:c3:bc:fe:21:49:1f:
50:90:d7:dd:16:e4:3a:24:af:c4:af:34:ca:fb:df:d9:0f:3a:
8a:ab:2d:15:8c:4f:ed:c2:37:cc:8d:06:79:8a:5c:61:18:d0:
bb:71:2d:05:5f:ea:35:bc:a1:de:32:31:fb:e4:b9:d4:77:2d:
8a:01:0a:71:8d:60:38:9a:f0:19:1f:7d:61:4c:84:c2:34:ea:
ca:bd:5d:ef:2e:34:29:fb:52:eb:c8:d7:25:d6:84:c6:87:7f:
3d:84:ce:9d:db:c9:bc:88:bc:83:c8:9f:b0:e8:7c:3d:37:39:
05:f7:17:62:5c:c3:98:25:f2:a6:e6:52:bb:33:1a:d5:bd:b3:
be:90:84:a6:42:ab:83:63:f0:41:a5:37:e7:f6:44:db:d8:2b:
23:e7:86:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+C5Qao4uj+KGud/qydUThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YmQxMGYxYjE0YmJiMjc2N2ZmZGNhZWM0YjQxNzI4ODBi
YTQ2MWEwHhcNMjYwOTIwMDkwMDI0WhcNMjYwOTIxMDkwMDI0WjAzMTEwLwYDVQQD
EygzMGNiNjA0YTQ4OGFjYzU3Nzg3M2Y5ZjdlZjc3YWE4ZjYwNTg0NDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38dJyze6pYGFa/vFNq+i/vC7TDjA
Mx4FGHJo32jxImsiNWXz7u3MQ5lIwqelCqJRj5KNFxgJy0ov1yEQVNckXNR4uXri
VmmQN+WLXfw5FZL5o56Vu9LS4SaVRztGkoee7FXVq2DqlL1YDb+qiVtKjs+6kl10
GsOr849WOiamEY41cXoSfRSTW8EPHLubZQtxZymui8xoFvO8CvICJMbAA2DSx2CB
j3dbdoF07kZDgR3UnHzIiKW6wM/tES2XGGHoeLfyutDGDgnP1RRy0lfE+niFU0fY
uGNyYY5t6pvgHjzhNosqApZxRQS9XWi2KroiJmGvjlPYReSrPUZEFM1IqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDLYEpIisxXeHP59+93qo9gWER5MB8GA1UdIwQY
MBaAFGi9EPGxS7snZ//crsS0FyiAukYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYt
OWZlN2Q5MjhkOWJlLzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYtOWZlN2Q5MjhkOWJl
LzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFOKZ7yn
Ts4CjjwJrVT65492RqR9T/MuL8W7c9j9TwIxRwTnwhfX42cHrbz98vdrJNrJi6wg
XA2XKvTWATAQJN/1Ju0OTaVaMry7oN2pGfZhrPLZ0On9nWcxp06G99Pz4/Tao/A8
w7z+IUkfUJDX3RbkOiSvxK80yvvf2Q86iqstFYxP7cI3zI0GeYpcYRjQu3EtBV/q
Nbyh3jIx++S51HctigEKcY1gOJrwGR99YUyEwjTqyr1d7y40KftS68jXJdaExod/
PYTOndvJvIi8g8ifsOh8PTc5BfcXYlzDmCXypuZSuzMa1b2zvpCEpkKrg2PwQaU3
5/ZE29grI+eGeQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:14:45 2026 by rpki-client