Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: 6aSt13+v47rgN2ThCx0tZwG/x5W9rxHzahirJ4GzAas=
Subject key identifier: 28:51:98:15:27:A8:B0:33:91:AF:94:E7:0B:78:0F:4C:6D:E5:33:66
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 01A184F58B230511B859F054034AE6E28A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: 062C
Signing time: Thu 29 Oct 2026 00:00:46 +0000
Manifest this update: Thu 29 Oct 2026 00:00:46 +0000
Manifest next update: Fri 30 Oct 2026 00:00:46 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: yN18+V21tYOFxdOvS/h84G/aNTYgI6SmJ223I7M+9+I=)
2: sdMta7c0gW915yu9rkbP8a3pD1A.roa (hash: dpcGKoEnYqxFtG+MmQSOKo58GUsu+Url2Igp0+ElIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 22:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:f5:8b:23:05:11:b8:59:f0:54:03:4a:e6:e2:8a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Oct 29 00:00:46 2026 GMT
Not After : Oct 30 00:00:46 2026 GMT
Subject: CN=2851981527a8b03391af94e70b780f4c6de53366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:93:ef:6b:ff:20:a0:2d:ec:b0:bf:80:de:
fb:90:06:c0:49:33:26:4e:50:e2:f0:5b:4f:8b:04:
ca:72:fa:b7:ca:b0:78:4c:d0:af:c0:49:1d:15:48:
3d:7e:54:aa:c8:0e:3a:02:82:18:32:6c:8e:4d:21:
cd:64:50:2a:1f:6f:4a:d8:40:3d:35:2d:62:0b:95:
5b:9b:08:a5:c7:c8:70:80:e1:22:e8:bd:32:ae:ee:
1a:37:46:40:70:d4:4e:e4:87:e6:6e:74:d5:36:db:
06:f9:14:32:47:15:9b:1b:36:80:99:9b:1b:82:d7:
05:cf:06:2c:e4:81:72:0a:77:c9:f2:69:fe:9a:5e:
5b:ce:b8:6f:d7:ed:6e:db:d8:53:05:a8:61:84:de:
e7:c9:45:1f:7f:65:a8:f3:6b:bd:80:5f:c3:00:04:
2b:fa:15:c3:ab:ec:88:9d:4a:8d:cb:8f:41:16:01:
59:5e:f9:ec:16:9d:fd:8e:e4:24:f5:fe:1c:5e:a1:
6b:cc:aa:25:9f:01:d3:9d:88:30:f9:59:44:6c:7c:
28:94:9f:dd:af:4e:d2:51:10:f3:2d:49:37:7b:21:
00:31:7c:af:c0:5b:d3:08:c8:a1:9b:81:e2:05:20:
13:a3:95:69:7b:e9:cd:4d:91:97:dd:62:cd:fb:b8:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:51:98:15:27:A8:B0:33:91:AF:94:E7:0B:78:0F:4C:6D:E5:33:66
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e8:a5:61:ac:f4:2d:c5:e1:9f:19:84:2a:0f:7b:f4:bb:ae:
dc:e4:ea:8f:33:ac:f6:ea:56:33:42:d6:b6:80:dc:4f:5a:42:
30:01:7e:1c:28:38:fc:e8:87:50:d8:f7:dc:21:ba:4c:98:08:
f4:d4:d8:34:3f:b8:b3:2a:ce:ef:a3:4b:db:7c:b3:8d:5d:4f:
7e:ad:60:37:ad:4c:5d:ab:c5:e9:4d:a6:dc:c0:a2:10:24:68:
1c:88:5d:b0:09:b6:3a:d9:54:17:b5:04:1a:65:47:10:65:fa:
de:55:00:53:c2:fa:ae:4a:a2:2f:a8:c8:f9:94:32:b4:0a:1b:
30:2b:06:8b:4b:15:ad:20:ed:ec:fd:5f:93:25:a7:c8:60:73:
5d:dd:56:61:94:39:8a:ae:3f:e9:5e:7b:2d:04:b4:5d:ff:aa:
9f:2e:86:0b:b2:6d:7c:e2:ef:7c:3d:0f:c8:54:9b:55:99:d8:
ff:0a:ff:da:1b:4b:ac:2c:b7:07:5a:b2:ec:65:36:b3:46:e8:
31:c0:96:bf:cc:e7:41:e4:f6:58:26:4e:8f:34:27:0f:e1:ff:
63:ac:d9:b4:f0:46:d2:73:32:97:63:da:c7:f5:fa:9d:8d:97:
01:33:26:93:ce:b0:40:4d:57:f1:b5:93:72:b0:e1:d0:3a:ff:
9b:e6:30:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGE9YsjBRG4WfBUA0rm4ooMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNmRlMjllOTM1NmRmNDQ3MDdjODM5NmQ5MThlNmIyODkx
MjljNGEwHhcNMjYxMDI5MDAwMDQ2WhcNMjYxMDMwMDAwMDQ2WjAzMTEwLwYDVQQD
EygyODUxOTgxNTI3YThiMDMzOTFhZjk0ZTcwYjc4MGY0YzZkZTUzMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWGT72v/IKAt7LC/gN77kAbASTMm
TlDi8FtPiwTKcvq3yrB4TNCvwEkdFUg9flSqyA46AoIYMmyOTSHNZFAqH29K2EA9
NS1iC5Vbmwilx8hwgOEi6L0yru4aN0ZAcNRO5IfmbnTVNtsG+RQyRxWbGzaAmZsb
gtcFzwYs5IFyCnfJ8mn+ml5bzrhv1+1u29hTBahhhN7nyUUff2Wo82u9gF/DAAQr
+hXDq+yInUqNy49BFgFZXvnsFp39juQk9f4cXqFrzKolnwHTnYgw+VlEbHwolJ/d
r07SURDzLUk3eyEAMXyvwFvTCMihm4HiBSATo5Vpe+nNTZGX3WLN+7g3EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChRmBUnqLAzka+U5wt4D0xt5TNmMB8GA1UdIwQY
MBaAFPBt4p6TVt9EcHyDltkY5rKJEpxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEt
ZjgxNmQzYmU0MDEyLzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEtZjgxNmQzYmU0MDEy
LzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOilYaz0
LcXhnxmEKg979Luu3OTqjzOs9upWM0LWtoDcT1pCMAF+HCg4/OiHUNj33CG6TJgI
9NTYND+4syrO76NL23yzjV1Pfq1gN61MXavF6U2m3MCiECRoHIhdsAm2OtlUF7UE
GmVHEGX63lUAU8L6rkqiL6jI+ZQytAobMCsGi0sVrSDt7P1fkyWnyGBzXd1WYZQ5
iq4/6V57LQS0Xf+qny6GC7JtfOLvfD0PyFSbVZnY/wr/2htLrCy3B1qy7GU2s0bo
McCWv8znQeT2WCZOjzQnD+H/Y6zZtPBG0nMyl2Pax/X6nY2XATMmk86wQE1X8bWT
crDh0Dr/m+YwQQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 01:51:07 2026 by rpki-client