Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier: mVZ3sPZ4T2eTgbU/ft6MjKapHBpnA2rdEgouOBmL0Zg=
Subject key identifier: 6C:22:35:9D:BC:77:17:71:80:30:A4:EC:6A:6D:5C:7F:3F:2B:47:2C
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial: 01A0C1E844BC20DD55CD920CBA7D1218719E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number: 08D8
Signing time: Mon 21 Sep 2026 03:00:19 +0000
Manifest this update: Mon 21 Sep 2026 03:00:19 +0000
Manifest next update: Tue 22 Sep 2026 03:00:19 +0000
Files and hashes: 1: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: xypfDAPpxv3yrNcdpw0JjffNo3eCZe7deVnFGmJfGTo=)
2: INMcxslKzA9lQLIaiuC7po-TrrY.roa (hash: 9IPb8qBlhTZBbDZdvzgQp75cg/Es1qM9VUEr2AAlDW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:44:bc:20:dd:55:cd:92:0c:ba:7d:12:18:71:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
Validity
Not Before: Sep 21 03:00:19 2026 GMT
Not After : Sep 22 03:00:19 2026 GMT
Subject: CN=6c22359dbc7717718030a4ec6a6d5c7f3f2b472c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:48:e0:3a:f2:4a:11:59:bf:8a:75:88:2d:
9b:fe:44:e9:86:7b:e7:47:ac:1f:6c:ac:6f:08:6e:
3f:ea:0d:12:f6:1e:42:db:78:b1:3e:18:a7:a6:93:
87:90:9f:4b:86:f4:c8:06:8d:7d:3e:45:a9:bf:39:
c8:dd:da:dd:19:ca:b1:33:04:9e:3e:36:ea:12:c3:
8a:f5:85:5c:73:cf:df:cc:b8:e5:b5:7a:62:91:7e:
8c:38:92:8d:64:b1:91:a8:22:3e:12:0e:97:ca:03:
91:49:e8:ea:b9:2d:25:db:39:ce:f6:79:85:f0:03:
9b:94:13:0f:08:62:b3:77:c8:27:5a:82:9f:2d:ef:
f7:f5:27:4d:3c:34:14:28:ae:18:00:33:4e:8e:c6:
23:08:d3:f4:6e:2f:5b:96:33:e4:db:09:b4:73:f7:
ac:a8:5c:2c:33:e7:66:92:8a:5d:83:f0:bd:c8:d0:
5c:e7:5b:a0:09:10:8c:91:ab:1b:d8:aa:ce:04:7e:
df:fe:15:20:6c:e3:bd:55:88:87:70:f1:28:6d:eb:
dd:01:85:35:16:f7:fc:bd:56:c0:5f:47:a8:b8:1d:
3c:d2:7d:c1:a6:e7:df:f2:d1:eb:92:54:2d:73:3b:
53:fb:17:41:27:e2:93:14:3e:14:80:51:2a:13:c3:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:22:35:9D:BC:77:17:71:80:30:A4:EC:6A:6D:5C:7F:3F:2B:47:2C
X509v3 Authority Key Identifier:
keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f3:23:3c:b5:4d:06:d5:d9:6f:31:14:8d:ee:53:c2:fe:6d:
cb:a8:79:6f:48:f1:46:89:af:8c:ca:90:4c:77:4e:ce:68:07:
b2:67:7f:ad:04:0a:95:24:cd:b8:59:fc:b0:8d:82:bc:d6:c2:
d2:9d:ef:c6:63:07:a9:5c:91:2b:2e:f0:ce:d0:66:70:00:b5:
cb:24:a5:8f:e3:b4:b0:2c:92:4d:8e:60:ab:ed:14:75:2d:80:
4c:44:57:c9:49:1e:a9:2e:8a:6b:e1:ce:b1:b6:eb:3e:cf:a2:
95:65:2c:fe:99:40:82:6e:1a:2d:a4:0a:c9:47:46:5f:ba:31:
79:38:45:c6:9a:57:38:7e:c2:cc:48:21:37:8c:2c:d2:df:e8:
46:64:4e:a6:a4:dc:e8:45:c1:f4:e3:c8:38:33:b2:24:6a:0b:
50:25:68:29:7f:14:03:b6:ea:91:16:d3:e5:d5:47:f8:b4:7f:
46:ee:4e:92:2f:40:4b:4b:25:c8:26:57:d0:94:37:6d:9c:49:
47:d3:19:e6:b8:c7:1e:0c:23:b4:bf:c7:46:a4:97:e7:63:d4:
ef:0b:fd:b9:6c:68:f7:b1:d7:05:c5:20:88:be:86:fc:7c:d0:
24:ee:5c:8b:34:fc:fa:a8:dd:2b:d3:7e:4a:af:49:4a:be:25:
71:3a:c3:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDB6ES8IN1VzZIMun0SGHGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOWU3OGI0NWI1ZjU5NTk0ZWI4MTFmM2FjNjkwNjI5Njdm
MjhjNzcwHhcNMjYwOTIxMDMwMDE5WhcNMjYwOTIyMDMwMDE5WjAzMTEwLwYDVQQD
Eyg2YzIyMzU5ZGJjNzcxNzcxODAzMGE0ZWM2YTZkNWM3ZjNmMmI0NzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BxI4DryShFZv4p1iC2b/kTphnvn
R6wfbKxvCG4/6g0S9h5C23ixPhinppOHkJ9LhvTIBo19PkWpvznI3drdGcqxMwSe
PjbqEsOK9YVcc8/fzLjltXpikX6MOJKNZLGRqCI+Eg6XygORSejquS0l2znO9nmF
8AOblBMPCGKzd8gnWoKfLe/39SdNPDQUKK4YADNOjsYjCNP0bi9bljPk2wm0c/es
qFwsM+dmkopdg/C9yNBc51ugCRCMkasb2KrOBH7f/hUgbOO9VYiHcPEobevdAYU1
Fvf8vVbAX0eouB080n3Bpuff8tHrklQtcztT+xdBJ+KTFD4UgFEqE8NdzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwiNZ28dxdxgDCk7GptXH8/K0csMB8GA1UdIwQY
MBaAFAOeeLRbX1lZTrgR86xpBiln8ox3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQt
MjZhMzhkYzg2NzBiLzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQtMjZhMzhkYzg2NzBi
LzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/MjPLVN
BtXZbzEUje5Twv5ty6h5b0jxRomvjMqQTHdOzmgHsmd/rQQKlSTNuFn8sI2CvNbC
0p3vxmMHqVyRKy7wztBmcAC1yySlj+O0sCySTY5gq+0UdS2ATERXyUkeqS6Ka+HO
sbbrPs+ilWUs/plAgm4aLaQKyUdGX7oxeThFxppXOH7CzEghN4ws0t/oRmROpqTc
6EXB9OPIODOyJGoLUCVoKX8UA7bqkRbT5dVH+LR/Ru5Oki9AS0slyCZX0JQ3bZxJ
R9MZ5rjHHgwjtL/HRqSX52PU7wv9uWxo97HXBcUgiL6G/HzQJO5cizT8+qjdK9N+
Sq9JSr4lcTrD6A==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:41:03 2026 by rpki-client