Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: zNwq1RsHxTp78JDiB2Aj7Z6nNI2kCO6pt5fTYZoig0s=
Subject key identifier: C9:C6:42:21:6A:6A:F1:2C:FF:55:27:9E:E2:31:C3:84:AE:44:3A:70
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 01A1076F32B184148E95F97E412399F1C725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 0FE1
Signing time: Sun 04 Oct 2026 15:01:30 +0000
Manifest this update: Sun 04 Oct 2026 15:01:30 +0000
Manifest next update: Mon 05 Oct 2026 15:01:30 +0000
Files and hashes: 1: QgMG-u89Y-TWbT4Gt6ZsQgsTYNI.roa (hash: sETsQ4q/+Tu+FYDJynqCF64iSLCcXXD4r9m9lwpRbx8=)
2: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: 4CqyfKq4LN4tXhczRNtr8fhXLRYP5g7L5RLDhpPSEEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6f:32:b1:84:14:8e:95:f9:7e:41:23:99:f1:c7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Oct 4 15:01:30 2026 GMT
Not After : Oct 5 15:01:30 2026 GMT
Subject: CN=c9c642216a6af12cff55279ee231c384ae443a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:6d:89:ed:2d:7d:9e:13:6a:d4:72:9c:99:
b4:a8:4c:04:e4:c3:f6:64:4c:68:ec:64:b7:8f:ad:
02:b4:f1:b2:4d:c5:ee:67:10:ec:54:a5:2a:45:cc:
0a:16:20:46:89:6f:34:37:e5:b7:bc:b7:5f:dd:45:
4e:cb:b4:32:a2:ff:c8:66:7f:d6:d4:ea:86:0a:5c:
67:34:82:5f:3a:50:90:d4:c2:37:61:05:87:a6:fc:
dd:4a:64:e8:0c:59:82:cf:ba:a8:68:33:c4:b5:9d:
2f:9d:f2:5c:64:ef:dd:75:55:d9:9e:7c:c0:f0:09:
b8:d7:a6:72:47:aa:ee:a8:de:3e:2a:35:7a:a9:33:
2c:f9:e1:c8:5c:5b:cd:1d:d5:26:21:4f:9c:74:fe:
6f:46:7f:c8:80:d7:9e:72:94:90:dc:63:c0:d3:3f:
43:aa:11:a9:33:0d:d8:e4:74:aa:c7:4b:7e:56:df:
63:69:47:27:59:ea:0d:f4:82:9c:b8:0b:bc:21:43:
7e:c0:b1:75:f1:43:eb:ed:55:67:69:45:ce:c8:e3:
f9:e3:7f:e4:78:41:41:24:d2:f4:2e:2e:06:ea:d3:
d9:bc:9a:f0:da:a0:5d:4d:f2:02:79:e2:5e:57:2e:
9a:95:0a:19:94:ed:4b:dc:81:dd:46:b3:ef:20:e2:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C6:42:21:6A:6A:F1:2C:FF:55:27:9E:E2:31:C3:84:AE:44:3A:70
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:55:7b:90:f8:ab:b3:e0:35:2a:9f:35:2c:e0:03:a0:38:cb:
1b:ba:cf:0c:7e:54:a2:26:d3:61:6c:02:e6:88:65:8a:e1:60:
3d:9f:e5:05:f2:2d:a9:a4:be:73:9c:1e:8a:69:4c:5f:0f:f6:
c1:a4:bf:d9:12:0f:b9:b1:e3:d6:f9:4f:ab:3a:62:d6:2f:bf:
42:f8:09:9f:71:25:ba:02:25:c5:0c:7c:94:a6:f1:5e:db:1e:
f4:77:92:38:e1:f3:ad:3d:5e:69:88:0a:49:47:a6:48:84:6a:
a1:04:2a:6b:5b:48:65:3d:48:09:71:db:c0:28:24:40:c5:1e:
60:3a:87:5a:dc:6e:d5:e8:c1:5a:84:8a:f7:41:46:b8:c6:42:
75:3e:3b:c8:6d:f5:21:8d:28:b0:a2:1a:1a:c3:26:47:55:15:
2c:b5:42:a0:80:82:84:5e:36:38:fa:d8:d4:00:8c:40:08:de:
c1:80:c3:9c:9f:cf:7d:7f:82:e6:fd:6d:e2:a6:de:5b:4b:c3:
03:4f:ae:01:17:a5:9b:a4:f5:f1:c8:6a:1e:ee:64:b1:3b:fd:
5f:f8:b5:b9:b2:50:14:d8:a4:55:32:6b:8c:60:a7:cf:8b:53:
d4:3f:14:35:16:1d:82:c1:f4:bb:ed:86:20:77:15:33:f7:dc:
c8:01:84:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHbzKxhBSOlfl+QSOZ8cclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGYxMjRjOTFjYWEwY2M5MWMzYjliYjRmOGFkYjA2MzI2
MjI0YTEwHhcNMjYxMDA0MTUwMTMwWhcNMjYxMDA1MTUwMTMwWjAzMTEwLwYDVQQD
EyhjOWM2NDIyMTZhNmFmMTJjZmY1NTI3OWVlMjMxYzM4NGFlNDQzYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5htie0tfZ4TatRynJm0qEwE5MP2
ZExo7GS3j60CtPGyTcXuZxDsVKUqRcwKFiBGiW80N+W3vLdf3UVOy7Qyov/IZn/W
1OqGClxnNIJfOlCQ1MI3YQWHpvzdSmToDFmCz7qoaDPEtZ0vnfJcZO/ddVXZnnzA
8Am416ZyR6ruqN4+KjV6qTMs+eHIXFvNHdUmIU+cdP5vRn/IgNeecpSQ3GPA0z9D
qhGpMw3Y5HSqx0t+Vt9jaUcnWeoN9IKcuAu8IUN+wLF18UPr7VVnaUXOyOP543/k
eEFBJNL0Li4G6tPZvJrw2qBdTfICeeJeVy6alQoZlO1L3IHdRrPvIOLeAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnGQiFqavEs/1UnnuIxw4SuRDpwMB8GA1UdIwQY
MBaAFGtPEkyRyqDMkcO5u0+K2wYyYiShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMt
YjY1MjYyY2YxOTgzLzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMtYjY1MjYyY2YxOTgz
LzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClV7kPir
s+A1Kp81LOADoDjLG7rPDH5UoibTYWwC5ohliuFgPZ/lBfItqaS+c5weimlMXw/2
waS/2RIPubHj1vlPqzpi1i+/QvgJn3ElugIlxQx8lKbxXtse9HeSOOHzrT1eaYgK
SUemSIRqoQQqa1tIZT1ICXHbwCgkQMUeYDqHWtxu1ejBWoSK90FGuMZCdT47yG31
IY0osKIaGsMmR1UVLLVCoICChF42OPrY1ACMQAjewYDDnJ/PfX+C5v1t4qbeW0vD
A0+uARelm6T18chqHu5ksTv9X/i1ubJQFNikVTJrjGCnz4tT1D8UNRYdgsH0u+2G
IHcVM/fcyAGEwA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:32:42 2026 by rpki-client