Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File: acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier: /bmbgMsmEJusdCSa4vvkI2Dbio/Vw4jOGLYqYtetrak=
Subject key identifier: F8:9A:95:3E:73:AD:F5:FB:FB:42:FB:C9:CB:1B:E4:D8:D6:9B:D0:DF
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial: 01A0C77CF4D3F01E85A931592E1C2DEEC88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 05:00:50 +0000
Manifest this update: Tue 22 Sep 2026 05:00:50 +0000
Manifest next update: Wed 23 Sep 2026 05:00:50 +0000
Files and hashes: 1: 8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa (hash: hTQqJteeaF5ZjxlYrkjPbZjafNKCCRD7RpYTaq51+Q4=)
2: WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa (hash: WNLKDaJxOe6Uz6jgAOWxAF+kTRgHf8gZjh0RxUla/9E=)
3: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: uwbXQ/sSzjfPT4BF4lpr5pVA1ElsZpQIaq/xEStqosM=)
4: gKFSZ12cdmISn4h5sbRx_f8ayV0.roa (hash: EtpOpvk7x1JOKFPhiQBQKjgaBtJnr2gJBSccIdWGROA=)
5: yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa (hash: TjYy4/mDVjYziy+CeletARV0PQ6H5KzIho/639xxwbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:f4:d3:f0:1e:85:a9:31:59:2e:1c:2d:ee:c8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
Validity
Not Before: Sep 22 05:00:50 2026 GMT
Not After : Sep 23 05:00:50 2026 GMT
Subject: CN=f89a953e73adf5fbfb42fbc9cb1be4d8d69bd0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e6:f0:b3:28:30:10:34:19:03:f2:8b:75:77:
63:ec:4b:b3:5b:f5:8f:6f:14:a1:ea:af:7b:e7:d0:
23:9d:ea:b5:18:0b:ab:c6:c4:25:c7:99:de:40:6d:
5b:ba:ab:d3:49:2d:5e:d9:39:c4:62:ce:78:10:3e:
12:c0:64:52:db:01:67:de:90:83:ea:6d:75:23:96:
7b:4a:8a:19:75:b2:c2:cc:2b:c9:ee:a6:ab:78:21:
b7:60:6f:45:96:e9:57:86:df:11:c4:be:84:b2:87:
0d:1c:d3:b5:36:ef:20:49:b2:f8:7f:c3:da:0d:43:
27:80:4c:32:64:8e:61:57:ef:03:1c:b1:f7:61:76:
b3:dc:aa:5a:69:ef:04:cc:d1:98:47:cb:15:8f:ba:
cd:0b:2c:9a:a9:d1:ad:2c:d4:e9:d0:ef:63:4e:b5:
1b:63:36:34:90:15:d8:b5:17:7d:9a:65:bb:cd:52:
51:64:5d:96:5d:19:4d:ba:89:e1:41:a3:f5:80:56:
be:1f:24:db:02:74:95:22:6b:d5:8f:30:51:41:d3:
9f:13:93:d0:b4:e3:91:8c:e8:6f:61:69:7c:e4:a7:
1b:e8:d4:ce:4b:e1:a9:e8:da:8c:16:a4:b5:b8:e8:
a6:cd:fe:b4:82:1c:5d:b7:73:4d:90:5a:c3:cf:96:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9A:95:3E:73:AD:F5:FB:FB:42:FB:C9:CB:1B:E4:D8:D6:9B:D0:DF
X509v3 Authority Key Identifier:
keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:95:55:75:4d:f4:85:a0:ba:2f:7e:c8:e4:f8:47:62:88:86:
4c:66:00:34:cb:35:b7:47:65:5b:99:77:d5:26:b0:f0:aa:38:
66:1b:9f:92:d6:71:8e:cc:a0:7f:44:db:68:c5:0e:a3:a3:2e:
f4:21:5f:fc:b1:28:4d:b0:10:43:73:31:1a:00:52:b9:bb:23:
0d:35:e5:53:73:b5:b2:86:e0:e6:82:e5:b2:8f:dc:a2:42:9d:
3d:d8:27:37:d0:bc:0b:46:db:5a:84:ce:6a:94:ef:1c:8d:67:
0b:17:db:98:c7:22:ea:75:34:82:37:f1:17:be:aa:df:ad:35:
8f:df:38:83:36:d3:4d:8e:98:98:8f:ef:14:b3:b5:35:c2:3f:
b0:8f:36:10:41:46:50:79:46:f5:6c:45:69:ce:b6:04:7a:ab:
c9:7c:c6:1c:4e:56:49:38:e1:3e:53:30:1b:35:18:93:ec:81:
5a:7c:09:5c:bd:f8:81:58:df:1d:fe:c5:45:dd:a3:df:a8:4c:
21:ef:84:16:14:02:02:7f:25:fe:72:d4:e2:a8:ea:4d:2c:9f:
50:e9:5a:5f:1f:84:f0:dc:c6:b9:a5:08:84:f6:12:70:6c:06:
4d:32:a2:87:15:79:b9:c7:57:2f:bb:3c:78:98:da:29:c7:60:
49:66:50:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHfPTT8B6FqTFZLhwt7siMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl
Yjc2ZWQwHhcNMjYwOTIyMDUwMDUwWhcNMjYwOTIzMDUwMDUwWjAzMTEwLwYDVQQD
EyhmODlhOTUzZTczYWRmNWZiZmI0MmZiYzljYjFiZTRkOGQ2OWJkMGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhubwsygwEDQZA/KLdXdj7EuzW/WP
bxSh6q9759Ajneq1GAurxsQlx5neQG1buqvTSS1e2TnEYs54ED4SwGRS2wFn3pCD
6m11I5Z7SooZdbLCzCvJ7qareCG3YG9FlulXht8RxL6EsocNHNO1Nu8gSbL4f8Pa
DUMngEwyZI5hV+8DHLH3YXaz3Kpaae8EzNGYR8sVj7rNCyyaqdGtLNTp0O9jTrUb
YzY0kBXYtRd9mmW7zVJRZF2WXRlNuonhQaP1gFa+HyTbAnSVImvVjzBRQdOfE5PQ
tOORjOhvYWl85Kcb6NTOS+Gp6NqMFqS1uOimzf60ghxdt3NNkFrDz5YqmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPialT5zrfX7+0L7ycsb5NjWm9DfMB8GA1UdIwQY
MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt
ZjQ3YWU3ZGRhZWMwLzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw
LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5VVdU30
haC6L37I5PhHYoiGTGYANMs1t0dlW5l31Saw8Ko4ZhufktZxjsygf0TbaMUOo6Mu
9CFf/LEoTbAQQ3MxGgBSubsjDTXlU3O1sobg5oLlso/cokKdPdgnN9C8C0bbWoTO
apTvHI1nCxfbmMci6nU0gjfxF76q3601j984gzbTTY6YmI/vFLO1NcI/sI82EEFG
UHlG9WxFac62BHqryXzGHE5WSTjhPlMwGzUYk+yBWnwJXL34gVjfHf7FRd2j36hM
Ie+EFhQCAn8l/nLU4qjqTSyfUOlaXx+E8NzGuaUIhPYScGwGTTKihxV5ucdXL7s8
eJjaKcdgSWZQ1Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:01:13 2026 by rpki-client