Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: aRMJEtYdTnwcEqmwUn3cN8w+TsWpboRVzurFuV+pe10=
Subject key identifier: 20:66:86:67:46:8C:1A:20:AC:51:A7:5E:2F:EB:AD:0B:AB:60:6E:2A
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 019CADFE80BC462FD8E67976E834A110D6F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 12D0
Signing time: Mon 02 Mar 2026 10:01:03 +0000
Manifest this update: Mon 02 Mar 2026 10:01:03 +0000
Manifest next update: Tue 03 Mar 2026 10:01:03 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: EAqGmpe+nWdBO4UCX+ZOOptAZ9YOmlDoiTxFs0P3YVI=)
2: lcX_BfSjVldf0AWvAKj1fHUxC84.roa (hash: EI6Mzu5z6YSWUkBvK1kxjCqRN5l7TNUNJw5p8ATCsOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:80:bc:46:2f:d8:e6:79:76:e8:34:a1:10:d6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Mar 2 10:01:03 2026 GMT
Not After : Mar 3 10:01:03 2026 GMT
Subject: CN=20668667468c1a20ac51a75e2febad0bab606e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:be:76:6c:30:24:eb:ac:97:ab:41:da:12:a0:
40:57:0c:66:12:89:15:e3:b9:ac:24:e1:e2:bc:6e:
ac:d5:69:56:eb:38:bd:45:f3:2b:8e:e5:75:32:89:
75:54:99:49:e3:c9:a7:2e:2d:37:07:75:d2:09:1d:
94:2b:cd:21:80:a8:10:c1:be:25:15:90:5b:fb:1b:
81:38:7e:c6:32:e6:e2:da:60:59:35:b2:98:03:c5:
60:aa:e4:fc:dd:8c:8e:45:bb:4f:68:b5:d0:26:05:
d0:38:39:98:d3:3a:59:34:87:8d:dd:f6:22:ba:cb:
a8:05:34:0e:74:81:dc:79:e1:4e:c3:ad:4b:0d:8b:
15:df:1f:0d:23:3a:0f:f7:dc:d9:69:dd:29:99:ab:
c7:9f:f5:a7:17:1e:f1:7c:ac:12:45:45:8a:66:ff:
a8:fa:23:70:13:d3:0f:7e:51:51:e3:c6:6e:b4:a7:
5c:ed:df:09:97:77:35:cb:82:ed:00:f2:18:ae:2a:
b6:42:a3:76:44:68:09:c3:19:1d:c6:8c:be:3e:2c:
c6:87:a8:57:c7:de:aa:86:b5:22:b9:8c:a6:62:e2:
a9:b0:54:4f:0a:6a:08:98:80:1b:e3:23:75:ee:5b:
9a:74:05:c5:4f:94:56:2c:69:f3:b8:57:be:b0:a5:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:86:67:46:8C:1A:20:AC:51:A7:5E:2F:EB:AD:0B:AB:60:6E:2A
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:40:a9:3c:38:b9:28:a8:aa:5f:03:75:99:5e:f1:f8:d8:88:
94:16:97:10:79:0d:1c:72:e9:f6:2b:5e:27:31:1b:8a:68:91:
8f:e7:6d:94:40:ac:ed:4a:40:dc:50:fc:92:4c:d5:0c:b8:3d:
e0:ad:87:bf:54:7c:08:21:37:a7:50:34:c0:ac:79:90:68:cf:
91:d2:6c:89:2e:2f:af:ad:d3:99:4b:ab:c5:b1:99:ad:ac:c4:
bc:3b:80:9d:d8:7b:24:32:ae:7d:35:4b:c1:27:bc:24:58:de:
83:fa:96:5c:bf:d5:9f:2d:93:4d:5f:81:ff:45:49:ec:b2:8d:
8b:0b:34:d8:f9:81:55:c9:01:20:13:7e:58:91:ff:bc:ac:57:
3f:0d:78:d7:d2:ea:0e:43:f6:47:ea:ca:20:89:4a:3a:f2:95:
9b:73:98:57:af:85:02:01:9d:fa:99:c7:81:47:d2:66:ea:6f:
55:69:56:c7:3d:3c:23:18:96:17:c7:da:6d:8a:48:f7:c7:37:
c6:cb:6e:23:3a:85:9e:75:b4:c0:52:24:8e:de:cb:1f:8a:3a:
d6:ad:26:ef:d7:9c:03:f5:73:74:92:fb:8d:bf:0a:7e:07:82:
74:8d:d0:8c:74:f5:3d:90:60:63:e6:b6:9d:2c:24:30:1d:6c:
05:7f:89:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/oC8Ri/Y5nl26DShENb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzZjZWEyYTgwMjIwMzYxMjMxYjZhZmJiYzhjOGNkYWE0
ZmQ1MTcwHhcNMjYwMzAyMTAwMTAzWhcNMjYwMzAzMTAwMTAzWjAzMTEwLwYDVQQD
EygyMDY2ODY2NzQ2OGMxYTIwYWM1MWE3NWUyZmViYWQwYmFiNjA2ZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2752bDAk66yXq0HaEqBAVwxmEokV
47msJOHivG6s1WlW6zi9RfMrjuV1Mol1VJlJ48mnLi03B3XSCR2UK80hgKgQwb4l
FZBb+xuBOH7GMubi2mBZNbKYA8VgquT83YyORbtPaLXQJgXQODmY0zpZNIeN3fYi
usuoBTQOdIHceeFOw61LDYsV3x8NIzoP99zZad0pmavHn/WnFx7xfKwSRUWKZv+o
+iNwE9MPflFR48ZutKdc7d8Jl3c1y4LtAPIYriq2QqN2RGgJwxkdxoy+PizGh6hX
x96qhrUiuYymYuKpsFRPCmoImIAb4yN17luadAXFT5RWLGnzuFe+sKWvPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBmhmdGjBogrFGnXi/rrQurYG4qMB8GA1UdIwQY
MBaAFAPGzqKoAiA2EjG2r7vIyM2qT9UXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQt
ZjQ2ZDZhYjNkMzI2LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQtZjQ2ZDZhYjNkMzI2
LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkCpPDi5
KKiqXwN1mV7x+NiIlBaXEHkNHHLp9iteJzEbimiRj+dtlECs7UpA3FD8kkzVDLg9
4K2Hv1R8CCE3p1A0wKx5kGjPkdJsiS4vr63TmUurxbGZrazEvDuAndh7JDKufTVL
wSe8JFjeg/qWXL/Vny2TTV+B/0VJ7LKNiws02PmBVckBIBN+WJH/vKxXPw1419Lq
DkP2R+rKIIlKOvKVm3OYV6+FAgGd+pnHgUfSZupvVWlWxz08IxiWF8fabYpI98c3
xstuIzqFnnW0wFIkjt7LH4o61q0m79ecA/VzdJL7jb8KfgeCdI3QjHT1PZBgY+a2
nSwkMB1sBX+JnQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:43 2026 by rpki-client