Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: ZG9Qnj3cCc0xVm8oilqF8KsFQ+L2bBIuMhC0n9kKg80=
Subject key identifier: 93:B2:EC:F4:F2:D8:47:B0:93:17:0A:13:AC:BC:CB:AE:E3:10:15:41
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 019CAD22FFED4DADC4D929686E4C46AD639A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 0DA0
Signing time: Mon 02 Mar 2026 06:01:17 +0000
Manifest this update: Mon 02 Mar 2026 06:01:17 +0000
Manifest next update: Tue 03 Mar 2026 06:01:17 +0000
Files and hashes: 1: QgMG-u89Y-TWbT4Gt6ZsQgsTYNI.roa (hash: sETsQ4q/+Tu+FYDJynqCF64iSLCcXXD4r9m9lwpRbx8=)
2: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: 3BMx3onZKSf1iTKeZuqsJAw7uokVeASTcZSzq10qGM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:ff:ed:4d:ad:c4:d9:29:68:6e:4c:46:ad:63:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Mar 2 06:01:17 2026 GMT
Not After : Mar 3 06:01:17 2026 GMT
Subject: CN=93b2ecf4f2d847b093170a13acbccbaee3101541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:37:26:9b:55:37:81:98:8f:37:47:86:7e:
b6:ca:51:33:c7:1f:6b:1c:d8:94:42:1a:88:cc:fd:
4d:fd:1d:c3:b2:3e:92:ed:cb:74:02:9a:0e:89:15:
7e:97:7a:85:ec:3d:8a:de:6d:82:79:07:9f:16:6b:
3b:64:dc:c3:9b:93:6c:f7:90:00:fc:cc:6b:ec:75:
9a:77:59:4e:5f:7f:f9:b8:c0:96:89:fd:7b:29:90:
8e:4f:ec:7c:bb:db:11:7c:90:61:1c:21:de:dd:70:
6e:66:72:bf:75:13:1a:6d:c2:a1:f1:e7:61:91:30:
10:04:ed:e9:cf:14:83:ea:cf:28:09:49:5c:67:64:
8e:92:c0:99:9f:35:54:bd:68:2f:bb:66:10:95:01:
42:28:b9:0f:c4:04:f5:53:32:c7:df:de:20:55:19:
53:43:2e:23:ec:8f:42:15:ee:9b:9a:51:fd:1a:d1:
a1:df:4d:e7:e9:fc:33:ec:64:c7:80:a9:93:db:ab:
17:e1:dd:a5:77:e9:37:95:34:c2:cf:34:43:c6:9f:
80:f7:33:87:e8:76:50:e9:46:38:55:33:b7:fc:e9:
cf:6b:37:e6:10:fa:ad:d6:60:d4:3f:f9:5e:f4:8a:
e7:21:b3:2c:c5:bd:21:e5:2c:71:51:81:68:bb:fa:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B2:EC:F4:F2:D8:47:B0:93:17:0A:13:AC:BC:CB:AE:E3:10:15:41
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:96:96:bb:52:28:1b:85:b4:fe:09:02:9e:05:05:cc:bb:7e:
c2:29:93:1c:93:ef:5f:6b:b6:2c:21:0d:ae:fc:1d:df:07:dc:
a0:dc:37:fa:22:c0:1a:39:1a:4d:8d:34:24:ea:a8:b7:65:8e:
35:80:6f:b3:16:08:36:cd:c5:7f:e4:44:2f:91:9e:bd:b6:f3:
9d:4d:5b:73:20:d2:be:c3:e2:3b:36:bc:37:b5:71:31:56:d1:
eb:dc:b9:0c:ea:f7:03:bd:8b:19:c0:e2:5b:4a:53:a4:39:83:
82:df:03:dd:16:33:9f:8e:02:fa:25:1c:43:fd:df:73:c2:f4:
cc:a5:80:3e:90:c8:90:94:2c:4b:b3:b7:ce:14:91:2f:ec:c4:
81:b0:86:2c:7e:c0:37:96:32:a3:41:63:52:76:c3:36:69:69:
1f:bb:9e:2e:5a:5f:5d:2c:84:df:22:40:de:85:8e:ca:a1:2e:
b8:dc:9d:ec:23:f0:6c:70:f0:96:5a:86:fd:f9:17:0d:18:61:
64:0f:d9:7c:ca:7f:ea:2d:b3:e7:a8:66:da:51:ab:44:a5:be:
03:d4:fe:32:81:9b:fc:6d:01:c7:a2:65:79:74:d5:c6:31:d3:
d0:40:b3:d9:26:c2:e2:20:d6:dd:12:ca:1e:a0:69:fe:b1:29:
29:d1:83:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIv/tTa3E2SlobkxGrWOaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGYxMjRjOTFjYWEwY2M5MWMzYjliYjRmOGFkYjA2MzI2
MjI0YTEwHhcNMjYwMzAyMDYwMTE3WhcNMjYwMzAzMDYwMTE3WjAzMTEwLwYDVQQD
Eyg5M2IyZWNmNGYyZDg0N2IwOTMxNzBhMTNhY2JjY2JhZWUzMTAxNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNk3JptVN4GYjzdHhn62ylEzxx9r
HNiUQhqIzP1N/R3Dsj6S7ct0ApoOiRV+l3qF7D2K3m2CeQefFms7ZNzDm5Ns95AA
/Mxr7HWad1lOX3/5uMCWif17KZCOT+x8u9sRfJBhHCHe3XBuZnK/dRMabcKh8edh
kTAQBO3pzxSD6s8oCUlcZ2SOksCZnzVUvWgvu2YQlQFCKLkPxAT1UzLH394gVRlT
Qy4j7I9CFe6bmlH9GtGh303n6fwz7GTHgKmT26sX4d2ld+k3lTTCzzRDxp+A9zOH
6HZQ6UY4VTO3/OnPazfmEPqt1mDUP/le9IrnIbMsxb0h5SxxUYFou/rdsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOy7PTy2EewkxcKE6y8y67jEBVBMB8GA1UdIwQY
MBaAFGtPEkyRyqDMkcO5u0+K2wYyYiShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMt
YjY1MjYyY2YxOTgzLzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMtYjY1MjYyY2YxOTgz
LzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5aWu1Io
G4W0/gkCngUFzLt+wimTHJPvX2u2LCENrvwd3wfcoNw3+iLAGjkaTY00JOqot2WO
NYBvsxYINs3Ff+REL5GevbbznU1bcyDSvsPiOza8N7VxMVbR69y5DOr3A72LGcDi
W0pTpDmDgt8D3RYzn44C+iUcQ/3fc8L0zKWAPpDIkJQsS7O3zhSRL+zEgbCGLH7A
N5Yyo0FjUnbDNmlpH7ueLlpfXSyE3yJA3oWOyqEuuNyd7CPwbHDwllqG/fkXDRhh
ZA/ZfMp/6i2z56hm2lGrRKW+A9T+MoGb/G0Bx6JleXTVxjHT0ECz2SbC4iDW3RLK
HqBp/rEpKdGDaQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:19 2026 by rpki-client