Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: clSHfwdIS+rqQpIgM9a4M+7R2sJeh6BrSH3H6ZfoEi8=
Subject key identifier: F5:6E:1E:06:B0:F1:39:7D:5D:31:0B:F4:BC:7B:97:70:70:B1:86:4B
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 01A0C8FD0AF985E3BB09BC431755BD9087BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 058D
Signing time: Tue 22 Sep 2026 12:00:21 +0000
Manifest this update: Tue 22 Sep 2026 12:00:21 +0000
Manifest next update: Wed 23 Sep 2026 12:00:21 +0000
Files and hashes: 1: A9rhd59_7voAjZbMragLA3ftrbw.roa (hash: jQKHOIkJndimLRm6Iut1TREkFlVZwkrcXKBUSUJBxdk=)
2: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: xpYiCTp+VcV9lxbjEupFuWXnV2FCUNJtHzdepEAaGs4=)
3: ofJXmIsyK_jDudPiA8bDAQbKAlU.roa (hash: +olJpgKdSnPRSUcTlissuMFWoxiuQFVYufPs4uhUsXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:0a:f9:85:e3:bb:09:bc:43:17:55:bd:90:87:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Sep 22 12:00:21 2026 GMT
Not After : Sep 23 12:00:21 2026 GMT
Subject: CN=f56e1e06b0f1397d5d310bf4bc7b977070b1864b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bb:10:a5:cf:05:db:61:0b:6d:83:22:b7:70:
a0:df:2b:e9:37:a7:3a:4f:e5:f1:47:85:8b:b5:73:
98:2e:ac:42:19:5e:92:84:7b:f6:22:f0:cc:fc:10:
a9:cd:a9:9e:4a:40:4a:6a:08:e4:a7:e8:e7:56:1f:
95:37:3f:c3:0a:42:f9:96:6b:7d:68:60:d3:16:bb:
14:1e:5f:50:3a:5e:8b:15:15:33:82:c9:70:d8:a9:
10:68:bd:f6:70:fc:de:2b:92:6f:c9:6c:87:bb:42:
4e:33:20:45:87:32:64:48:84:e5:4c:15:83:70:59:
af:21:b2:40:b4:7e:da:74:cb:80:c9:82:36:b4:8f:
01:82:75:c0:d0:bd:1a:42:07:9b:96:17:61:e8:af:
a7:b7:bc:b7:a3:fe:39:e1:af:1d:d1:aa:7a:25:79:
d8:87:94:3f:bd:a8:fa:63:68:4e:7e:05:58:3c:35:
6b:5e:af:8b:8b:ba:3e:a2:f5:1d:6c:38:77:b4:ac:
d3:17:0c:5d:02:f8:3a:17:ec:b8:ff:92:96:75:4a:
c9:f7:02:32:5c:87:86:21:df:c3:48:1a:3e:ea:54:
f0:95:a2:bb:34:12:24:34:3e:7c:7c:4d:5e:53:1c:
4a:7e:a9:2a:31:50:e0:f7:ef:78:07:59:8e:39:0c:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6E:1E:06:B0:F1:39:7D:5D:31:0B:F4:BC:7B:97:70:70:B1:86:4B
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a0:84:82:be:ef:74:66:f1:e4:a8:f9:1f:1e:bd:38:b1:20:
9c:df:67:5e:3e:b0:fb:03:20:6d:0b:a3:44:3e:09:f0:ed:20:
ed:46:76:96:b7:e9:4a:55:fe:ac:ac:26:ab:86:f4:41:2d:af:
d8:1b:2f:8a:bb:fe:0b:27:0f:53:f7:70:c6:f2:87:ba:17:06:
f6:4e:0c:27:0b:9c:ea:b4:ff:24:79:f3:99:f8:66:e6:03:d9:
76:e8:93:7e:fd:09:30:6d:67:4a:83:63:82:7e:29:8c:d8:aa:
80:f9:ed:98:f8:83:fd:b6:8c:c8:c8:b3:fa:97:7f:69:bb:95:
ed:42:9d:0c:8a:5a:15:9f:c9:6c:15:bd:84:76:f5:4b:08:36:
d5:fb:2d:92:6f:be:11:0a:63:1c:12:97:44:06:f5:6f:6e:13:
a2:55:5b:cc:99:d8:50:52:9d:e4:9f:1a:10:12:2e:00:0e:b3:
ea:0d:00:e8:40:a9:e3:a3:9c:14:7d:14:77:be:ca:48:08:1a:
a2:7f:be:9f:de:2c:81:ec:b6:32:db:26:91:c8:29:0c:77:9a:
8b:9a:28:42:a0:38:fa:e9:f6:3c:48:f5:9f:81:79:48:b3:74:
72:d1:57:35:88:d0:73:7c:2c:15:05:54:72:50:66:1f:73:36:
f2:b1:44:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDI/Qr5heO7CbxDF1W9kIe+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNWYwZTY2NWE5Yzc0MjIzYzRiZmUyNzBhMTY1OWFkZTRj
ZWYzMWYwHhcNMjYwOTIyMTIwMDIxWhcNMjYwOTIzMTIwMDIxWjAzMTEwLwYDVQQD
EyhmNTZlMWUwNmIwZjEzOTdkNWQzMTBiZjRiYzdiOTc3MDcwYjE4NjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbsQpc8F22ELbYMit3Cg3yvpN6c6
T+XxR4WLtXOYLqxCGV6ShHv2IvDM/BCpzameSkBKagjkp+jnVh+VNz/DCkL5lmt9
aGDTFrsUHl9QOl6LFRUzgslw2KkQaL32cPzeK5JvyWyHu0JOMyBFhzJkSITlTBWD
cFmvIbJAtH7adMuAyYI2tI8BgnXA0L0aQgeblhdh6K+nt7y3o/454a8d0ap6JXnY
h5Q/vaj6Y2hOfgVYPDVrXq+Li7o+ovUdbDh3tKzTFwxdAvg6F+y4/5KWdUrJ9wIy
XIeGId/DSBo+6lTwlaK7NBIkND58fE1eUxxKfqkqMVDg9+94B1mOOQymhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVuHgaw8Tl9XTEL9Lx7l3BwsYZLMB8GA1UdIwQY
MBaAFAFfDmZanHQiPEv+JwoWWa3kzvMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAt
ODY3N2IzZGQ4NzA3LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAtODY3N2IzZGQ4NzA3
LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6CEgr7v
dGbx5Kj5Hx69OLEgnN9nXj6w+wMgbQujRD4J8O0g7UZ2lrfpSlX+rKwmq4b0QS2v
2Bsvirv+CycPU/dwxvKHuhcG9k4MJwuc6rT/JHnzmfhm5gPZduiTfv0JMG1nSoNj
gn4pjNiqgPntmPiD/baMyMiz+pd/abuV7UKdDIpaFZ/JbBW9hHb1Swg21fstkm++
EQpjHBKXRAb1b24TolVbzJnYUFKd5J8aEBIuAA6z6g0A6ECp46OcFH0Ud77KSAga
on++n94sgey2MtsmkcgpDHeai5ooQqA4+un2PEj1n4F5SLN0ctFXNYjQc3wsFQVU
clBmH3M28rFEhw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:31:33 2026 by rpki-client