Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
File: 8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft (raw, json)
Hash identifier: s6n0pIeBiG45Besq5YdbNcpLHKNendPM8JXEgOadSGc=
Subject key identifier: 22:C6:AC:99:5B:E9:F7:06:05:DB:12:FB:16:90:BE:4C:E4:E9:80:0A
Authority key identifier: F0:CD:59:33:59:79:FC:36:0E:7C:BE:3C:27:7C:BF:99:8F:A9:36:10
Certificate issuer: /CN=f0cd59335979fc360e7cbe3c277cbf998fa93610
Certificate serial: 01A15E55AB5CFE743430930EFAEFDCA4FD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
Manifest number: 0117
Signing time: Wed 21 Oct 2026 12:00:35 +0000
Manifest this update: Wed 21 Oct 2026 12:00:35 +0000
Manifest next update: Thu 22 Oct 2026 12:00:35 +0000
Files and hashes: 1: 8M1ZM1l5_DYOfL48J3y_mY-pNhA.crl (hash: jwl3nJahOETRIHsPAMvZlEGuiR6YT8otWnYEjTuJCow=)
2: r42oR0C5g5SuflKWJ6GIOiVUO0U.roa (hash: Cm2S/1eJoWgRD00HMcE5iW9xvFGpF376Bo3aWrPUtvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:55:ab:5c:fe:74:34:30:93:0e:fa:ef:dc:a4:fd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cd59335979fc360e7cbe3c277cbf998fa93610
Validity
Not Before: Oct 21 12:00:35 2026 GMT
Not After : Oct 22 12:00:35 2026 GMT
Subject: CN=22c6ac995be9f70605db12fb1690be4ce4e9800a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:60:83:a0:f4:20:49:91:ff:1e:49:20:b1:
29:b5:f2:e6:d9:36:cc:b4:fc:3f:84:10:ba:8e:66:
89:fc:6b:7c:52:8a:a1:a2:c9:0a:54:94:da:ff:43:
6a:e2:d1:0b:d2:3a:20:b5:08:a7:22:fb:d6:b9:63:
de:93:41:6e:2a:b4:78:4d:6f:c1:e0:b3:dd:f3:7e:
bb:58:c5:26:4f:0b:df:9b:d5:b9:17:76:e6:90:05:
4c:84:85:88:e6:bb:c5:bd:54:35:b4:f4:a5:26:a6:
97:77:74:8e:91:51:c6:77:92:d5:4c:73:5e:6b:d8:
42:9d:a9:38:98:4c:10:c8:dd:d4:ee:9a:16:cf:54:
77:6d:cd:7a:a2:f5:7a:1f:72:92:89:bd:7c:51:f8:
b2:ff:55:3e:5b:d1:dc:ce:86:d2:16:ea:2d:c8:da:
c3:a2:24:81:98:46:a5:99:cf:1c:b3:92:b4:93:6b:
d9:db:ee:64:d3:27:ca:be:a0:dd:b0:7a:47:a1:38:
88:b7:4b:0d:b7:c7:29:05:e2:ba:10:f7:03:c2:b6:
78:45:61:5a:11:b1:c2:49:44:90:b4:49:65:d2:b8:
1c:aa:d0:f3:c0:28:56:48:f1:82:d5:af:83:3b:77:
92:49:0a:c3:45:7f:b6:da:6f:29:bd:fe:64:29:08:
73:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C6:AC:99:5B:E9:F7:06:05:DB:12:FB:16:90:BE:4C:E4:E9:80:0A
X509v3 Authority Key Identifier:
keyid:F0:CD:59:33:59:79:FC:36:0E:7C:BE:3C:27:7C:BF:99:8F:A9:36:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:77:0a:27:19:ec:b9:fa:96:4e:ff:cb:b3:ab:42:af:6b:b9:
48:21:26:09:a4:86:44:c2:cb:71:14:53:36:02:ba:ce:e9:ba:
e2:38:5e:7f:e0:19:3c:d4:51:86:e5:73:a6:48:0c:cf:1e:3e:
47:81:6c:47:62:a6:2f:fa:a9:c9:df:fb:ed:30:56:e7:42:c9:
c8:4e:59:7d:34:30:21:5e:ea:ce:0d:ad:49:43:fc:62:3f:55:
fa:19:f6:e5:dd:d2:c6:c0:fa:93:c0:12:94:98:23:05:54:96:
90:ed:47:5b:6e:84:5d:ea:44:66:12:62:78:2a:7a:99:14:d8:
75:eb:8e:cb:3a:8d:22:85:7c:1a:61:3c:60:6e:e4:36:27:2f:
b7:01:dc:d5:f5:65:e5:91:d6:f0:f1:01:89:b7:f6:72:af:5b:
51:73:eb:30:5c:1e:49:99:6c:e6:fa:0c:5f:72:0b:65:c7:61:
45:e0:fb:6c:b8:1d:db:16:bf:a7:33:a7:8e:a9:3c:22:4d:4d:
91:8f:e3:72:b8:a8:91:15:d7:fd:74:6e:bd:61:16:6b:5b:d0:
1e:f3:ca:22:aa:28:dd:20:d1:75:af:eb:d2:d5:30:8b:d1:37:
d0:bd:1f:bb:6c:04:e0:83:dc:29:da:08:2b:ff:7a:37:c7:16:
c8:58:5e:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFeVatc/nQ0MJMO+u/cpP0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2Q1OTMzNTk3OWZjMzYwZTdjYmUzYzI3N2NiZjk5OGZh
OTM2MTAwHhcNMjYxMDIxMTIwMDM1WhcNMjYxMDIyMTIwMDM1WjAzMTEwLwYDVQQD
EygyMmM2YWM5OTViZTlmNzA2MDVkYjEyZmIxNjkwYmU0Y2U0ZTk4MDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs69gg6D0IEmR/x5JILEptfLm2TbM
tPw/hBC6jmaJ/Gt8UoqhoskKVJTa/0Nq4tEL0jogtQinIvvWuWPek0FuKrR4TW/B
4LPd8367WMUmTwvfm9W5F3bmkAVMhIWI5rvFvVQ1tPSlJqaXd3SOkVHGd5LVTHNe
a9hCnak4mEwQyN3U7poWz1R3bc16ovV6H3KSib18Ufiy/1U+W9HczobSFuotyNrD
oiSBmEalmc8cs5K0k2vZ2+5k0yfKvqDdsHpHoTiIt0sNt8cpBeK6EPcDwrZ4RWFa
EbHCSUSQtEll0rgcqtDzwChWSPGC1a+DO3eSSQrDRX+22m8pvf5kKQhzawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLGrJlb6fcGBdsS+xaQvkzk6YAKMB8GA1UdIwQY
MBaAFPDNWTNZefw2Dny+PCd8v5mPqTYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE0xWk0xbDVfRFlPZkw0OEozeV9tWS1wTmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82NWQ2ZjUtODY1Ny00ZGRjLWI0NDQt
NDI2OTAxMjBjMjMxLzEvOE0xWk0xbDVfRFlPZkw0OEozeV9tWS1wTmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82NWQ2ZjUtODY1Ny00ZGRjLWI0NDQtNDI2OTAxMjBjMjMx
LzEvOE0xWk0xbDVfRFlPZkw0OEozeV9tWS1wTmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXcKJxns
ufqWTv/Ls6tCr2u5SCEmCaSGRMLLcRRTNgK6zum64jhef+AZPNRRhuVzpkgMzx4+
R4FsR2KmL/qpyd/77TBW50LJyE5ZfTQwIV7qzg2tSUP8Yj9V+hn25d3SxsD6k8AS
lJgjBVSWkO1HW26EXepEZhJieCp6mRTYdeuOyzqNIoV8GmE8YG7kNicvtwHc1fVl
5ZHW8PEBibf2cq9bUXPrMFweSZls5voMX3ILZcdhReD7bLgd2xa/pzOnjqk8Ik1N
kY/jcriokRXX/XRuvWEWa1vQHvPKIqoo3SDRda/r0tUwi9E30L0fu2wE4IPcKdoI
K/96N8cWyFheNQ==
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:59:49 2026 by rpki-client