Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: OxA5rhhC1m60sAq7GnUAwCma1Z18jdvj29TCsn368MY=
Subject key identifier: C6:B6:98:A5:77:C0:9D:FC:C2:E4:BF:5B:C6:1E:C5:E6:F9:78:F0:5F
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 019D9B876F17F4549EA9FC5AB438463CBA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 134B
Signing time: Fri 17 Apr 2026 13:00:37 +0000
Manifest this update: Fri 17 Apr 2026 13:00:37 +0000
Manifest next update: Sat 18 Apr 2026 13:00:37 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: Goif5feAq/u0jN3mkPbIeSZPoz+yermJr/O8GXY8Xb4=)
2: lcX_BfSjVldf0AWvAKj1fHUxC84.roa (hash: EI6Mzu5z6YSWUkBvK1kxjCqRN5l7TNUNJw5p8ATCsOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:6f:17:f4:54:9e:a9:fc:5a:b4:38:46:3c:ba:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Apr 17 13:00:37 2026 GMT
Not After : Apr 18 13:00:37 2026 GMT
Subject: CN=c6b698a577c09dfcc2e4bf5bc61ec5e6f978f05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:2b:35:9f:a8:44:da:96:d9:86:5d:87:0a:
fa:aa:e3:be:f1:69:26:97:ef:94:09:31:39:e5:d5:
d3:ea:a9:9c:b0:c9:38:8b:a6:f1:02:be:5e:c6:0e:
ff:bf:c4:a7:ac:cd:2e:80:6b:96:38:e2:77:8e:d4:
fb:66:cc:97:13:a3:7b:cf:b2:bf:18:ab:c4:bd:d8:
c6:f6:d9:a0:e2:ad:14:24:dc:b1:12:4c:2f:43:bd:
4d:a2:0d:83:b4:ec:71:5e:69:b5:f3:e9:08:3f:63:
84:8e:cd:8c:8a:64:5f:4c:14:a1:19:d6:cf:b9:44:
78:e9:eb:b4:d1:7c:2b:df:de:9a:13:b1:7f:05:9f:
e5:ac:74:0a:59:8b:78:9b:01:18:ff:52:6b:d3:d8:
3c:84:f9:84:31:e0:c5:5f:dc:f2:5b:f0:79:f7:25:
ab:5f:c1:00:c0:71:3f:94:8b:59:b3:f1:6d:29:5e:
ae:31:5c:75:4a:7c:7a:9c:e7:21:56:50:88:f8:30:
44:df:36:81:56:27:b2:4f:c1:5b:3a:f2:2c:8c:52:
ca:9b:01:8a:e9:26:90:a3:ce:83:64:dd:f8:0c:bd:
8c:cc:01:1e:49:a7:71:bf:78:e7:c4:e5:5d:25:9a:
35:66:d8:07:5f:fd:ec:c1:c7:4f:a7:74:d6:36:8f:
c1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B6:98:A5:77:C0:9D:FC:C2:E4:BF:5B:C6:1E:C5:E6:F9:78:F0:5F
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:76:b2:2e:ad:b0:5e:d6:99:88:c2:e4:36:34:30:95:ac:11:
7e:55:d0:b0:7c:e6:e6:97:44:6e:ae:50:d3:be:65:ee:60:74:
d8:30:8f:1a:bb:f9:18:a2:ee:e3:63:a9:4a:2a:6a:9d:d4:8e:
8d:09:04:e8:b0:84:f8:59:7a:f7:92:a9:16:dd:75:71:e1:01:
93:ff:32:d9:eb:f6:ff:14:db:03:ba:97:34:a5:30:33:1e:05:
5f:30:4d:f4:fc:68:ee:13:3b:aa:88:9f:b6:04:63:30:2e:0b:
20:5d:1e:74:18:4c:6a:ed:ce:78:c0:47:99:7e:f0:b7:07:59:
c0:6b:6f:01:5f:6e:33:87:e0:20:63:6a:f9:53:88:b4:e9:73:
02:a9:4a:da:16:9d:5b:0e:05:05:e7:de:a0:a9:df:f6:db:7a:
a5:b8:73:1c:f2:2d:f9:2b:ed:1c:71:c3:bc:13:9c:62:37:80:
bd:67:16:fe:54:d4:52:cf:23:2d:54:b9:40:d4:9b:2a:89:3d:
09:d8:e1:6e:e7:3e:57:ee:90:ae:cc:d1:b8:70:cd:9f:b8:2a:
a8:75:33:5a:af:b8:c1:66:e2:05:59:42:e9:b7:ff:54:56:a5:
1d:0a:5e:77:81:46:59:99:bd:d7:86:f2:c5:5e:9e:96:52:43:
84:4b:42:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh28X9FSeqfxatDhGPLo6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzZjZWEyYTgwMjIwMzYxMjMxYjZhZmJiYzhjOGNkYWE0
ZmQ1MTcwHhcNMjYwNDE3MTMwMDM3WhcNMjYwNDE4MTMwMDM3WjAzMTEwLwYDVQQD
EyhjNmI2OThhNTc3YzA5ZGZjYzJlNGJmNWJjNjFlYzVlNmY5NzhmMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fErNZ+oRNqW2YZdhwr6quO+8Wkm
l++UCTE55dXT6qmcsMk4i6bxAr5exg7/v8SnrM0ugGuWOOJ3jtT7ZsyXE6N7z7K/
GKvEvdjG9tmg4q0UJNyxEkwvQ71Nog2DtOxxXmm18+kIP2OEjs2MimRfTBShGdbP
uUR46eu00Xwr396aE7F/BZ/lrHQKWYt4mwEY/1Jr09g8hPmEMeDFX9zyW/B59yWr
X8EAwHE/lItZs/FtKV6uMVx1Snx6nOchVlCI+DBE3zaBVieyT8FbOvIsjFLKmwGK
6SaQo86DZN34DL2MzAEeSadxv3jnxOVdJZo1ZtgHX/3swcdPp3TWNo/BGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMa2mKV3wJ38wuS/W8Yexeb5ePBfMB8GA1UdIwQY
MBaAFAPGzqKoAiA2EjG2r7vIyM2qT9UXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQt
ZjQ2ZDZhYjNkMzI2LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQtZjQ2ZDZhYjNkMzI2
LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHayLq2w
XtaZiMLkNjQwlawRflXQsHzm5pdEbq5Q075l7mB02DCPGrv5GKLu42OpSipqndSO
jQkE6LCE+Fl695KpFt11ceEBk/8y2ev2/xTbA7qXNKUwMx4FXzBN9Pxo7hM7qoif
tgRjMC4LIF0edBhMau3OeMBHmX7wtwdZwGtvAV9uM4fgIGNq+VOItOlzAqlK2had
Ww4FBefeoKnf9tt6pbhzHPIt+SvtHHHDvBOcYjeAvWcW/lTUUs8jLVS5QNSbKok9
Cdjhbuc+V+6QrszRuHDNn7gqqHUzWq+4wWbiBVlC6bf/VFalHQped4FGWZm914by
xV6ellJDhEtCxQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:52 2026 by rpki-client