Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: fnW1+aXZdCI0/yGKGF2XvQOMZ1EsYMNZxuxNmF3lsY8=
Subject key identifier: 9D:1E:EA:9E:42:B5:6A:63:6B:24:71:E8:73:69:89:1E:47:F3:92:09
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 01A0DD60C5060AA994BC93F3ADEEBF8FC56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 114A
Signing time: Sat 26 Sep 2026 11:01:41 +0000
Manifest this update: Sat 26 Sep 2026 11:01:41 +0000
Manifest next update: Sun 27 Sep 2026 11:01:41 +0000
Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: NlkTmUQDC40xaktPzYEn7n7P1Vi2oHCSYfwCRMGQ23A=)
2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=)
3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:c5:06:0a:a9:94:bc:93:f3:ad:ee:bf:8f:c5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Sep 26 11:01:41 2026 GMT
Not After : Sep 27 11:01:41 2026 GMT
Subject: CN=9d1eea9e42b56a636b2471e87369891e47f39209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:6b:72:5b:07:89:a4:a4:0e:40:c5:e0:6c:
ff:f4:eb:24:72:08:f3:b6:fc:c7:e3:51:17:56:20:
5a:c6:f3:ec:0b:bb:8e:c1:b7:a1:b0:81:f0:ec:29:
4d:60:2f:77:1a:f4:0e:2d:ea:ba:e2:29:bc:3d:7a:
d1:af:30:52:09:37:5f:7d:e7:da:1c:3c:e3:77:22:
b2:7a:4c:a3:0d:c9:f4:c2:b5:54:8a:6a:b6:52:45:
94:e6:64:c0:6c:da:1b:87:c2:71:b3:da:e5:7e:17:
4f:f1:70:0d:7f:a4:87:c6:80:8e:b3:ea:ad:d9:4e:
25:be:16:cf:9f:de:80:b8:0f:39:4c:a9:47:97:b2:
d4:69:0a:0e:ec:35:a2:c0:ed:77:2b:f3:9b:9f:1d:
4b:5b:93:c5:b5:4e:1f:17:03:46:db:b5:94:4d:85:
de:84:b6:04:7a:be:e7:b4:04:72:85:a3:15:1f:68:
b3:ce:9d:c1:e8:6a:ab:ff:89:b7:f1:d3:09:35:af:
42:90:c8:a8:f2:4e:21:42:5c:9c:db:aa:a3:ae:cc:
ab:cd:26:6b:2c:da:d7:c7:c9:85:ae:8f:f4:c7:ef:
39:c4:03:4b:99:b9:d0:bc:11:da:00:07:28:0a:02:
13:f7:14:37:df:81:77:4f:b6:09:23:f8:d2:ea:02:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1E:EA:9E:42:B5:6A:63:6B:24:71:E8:73:69:89:1E:47:F3:92:09
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1b:c4:22:b9:7e:d8:90:95:5e:23:32:d3:0e:73:26:2c:66:
cf:8f:9d:b1:5b:81:c1:b6:e7:24:a6:54:2f:48:ad:fb:f7:a5:
aa:2c:74:b4:ba:63:15:b9:91:5b:d3:70:06:43:1f:bd:09:f9:
96:f1:6b:60:1c:3b:e1:35:79:5a:c1:8b:0d:db:7c:96:04:64:
be:16:13:fe:05:29:67:e3:72:aa:9d:2c:ad:fb:95:0f:cf:26:
dd:5a:1f:4c:67:65:ff:41:d5:61:0b:3f:c7:8d:da:09:23:b5:
e4:68:3c:a8:59:a3:3d:95:61:6e:e1:d6:d3:9d:bf:4f:64:f4:
1f:61:dd:06:a6:ad:99:fa:5e:d6:57:d2:16:ef:21:c4:a4:6d:
38:27:8b:cc:cd:19:ea:60:84:9c:44:b3:bf:0a:42:92:0e:fd:
39:ad:87:f1:ff:a6:8d:7b:64:14:a1:38:55:c4:bc:2a:e2:70:
da:78:b7:a6:43:ab:22:b2:e6:bd:fb:c6:a5:a0:1a:0c:a5:94:
24:6d:a3:5e:b3:65:86:77:46:0d:a0:ac:7a:42:cc:ba:24:bf:
fb:a6:4b:fa:2d:bb:ba:e4:da:68:3e:93:90:8f:2a:86:a7:60:
3d:54:14:9a:ac:11:9a:94:20:8f:31:d8:7b:2d:0f:2a:50:5e:
c3:89:2a:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdYMUGCqmUvJPzre6/j8VsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOGI1YTM3NGYxNDZkN2I2YTZkYzdkMzE2ZThlYmIxMmRl
ZWE2NzAwHhcNMjYwOTI2MTEwMTQxWhcNMjYwOTI3MTEwMTQxWjAzMTEwLwYDVQQD
Eyg5ZDFlZWE5ZTQyYjU2YTYzNmIyNDcxZTg3MzY5ODkxZTQ3ZjM5MjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHNrclsHiaSkDkDF4Gz/9Oskcgjz
tvzH41EXViBaxvPsC7uOwbehsIHw7ClNYC93GvQOLeq64im8PXrRrzBSCTdffefa
HDzjdyKyekyjDcn0wrVUimq2UkWU5mTAbNobh8Jxs9rlfhdP8XANf6SHxoCOs+qt
2U4lvhbPn96AuA85TKlHl7LUaQoO7DWiwO13K/Obnx1LW5PFtU4fFwNG27WUTYXe
hLYEer7ntARyhaMVH2izzp3B6Gqr/4m38dMJNa9CkMio8k4hQlyc26qjrsyrzSZr
LNrXx8mFro/0x+85xANLmbnQvBHaAAcoCgIT9xQ334F3T7YJI/jS6gLgmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0e6p5CtWpjayRx6HNpiR5H85IJMB8GA1UdIwQY
MBaAFGqLWjdPFG17am3H0xbo67Et7qZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQt
NDQyNDFmZWMxYTlmLzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQtNDQyNDFmZWMxYTlm
LzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhvEIrl+
2JCVXiMy0w5zJixmz4+dsVuBwbbnJKZUL0it+/elqix0tLpjFbmRW9NwBkMfvQn5
lvFrYBw74TV5WsGLDdt8lgRkvhYT/gUpZ+Nyqp0srfuVD88m3VofTGdl/0HVYQs/
x43aCSO15Gg8qFmjPZVhbuHW052/T2T0H2HdBqatmfpe1lfSFu8hxKRtOCeLzM0Z
6mCEnESzvwpCkg79Oa2H8f+mjXtkFKE4VcS8KuJw2ni3pkOrIrLmvfvGpaAaDKWU
JG2jXrNlhndGDaCsekLMuiS/+6ZL+i27uuTaaD6TkI8qhqdgPVQUmqwRmpQgjzHY
ey0PKlBew4kqoQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:47:07 2026 by rpki-client