Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File: 08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier: deVBpFN5U9FfF3Rj5NToKcCjdZeTLRqJYScVn5kayN4=
Subject key identifier: 6D:C9:B7:3B:34:08:FB:EA:CC:DA:18:64:66:B9:D3:61:9F:76:6E:7B
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer: /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial: 01A13FA771C6A85A45E9C3D5ED7622E8F2E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 13:01:40 +0000
Manifest this update: Thu 15 Oct 2026 13:01:40 +0000
Manifest next update: Fri 16 Oct 2026 13:01:40 +0000
Files and hashes: 1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: Qp8S9ocvm/bPzfNFQitOcQo3v5pMwkod5lqrIrPUtFQ=)
2: TkVIENg5yxh_iBn69iwP-Gzs7M0.roa (hash: XN4b40QKJDQSEm8B3f99MTAbjS4H9rL0ddzhBtlCaKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:71:c6:a8:5a:45:e9:c3:d5:ed:76:22:e8:f2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Validity
Not Before: Oct 15 13:01:40 2026 GMT
Not After : Oct 16 13:01:40 2026 GMT
Subject: CN=6dc9b73b3408fbeaccda186466b9d3619f766e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:5a:a7:0a:30:88:24:3f:35:67:55:0f:bd:
ba:16:8e:57:4b:b0:fb:44:31:0b:26:23:be:60:82:
f7:f3:46:76:b5:20:ea:98:62:dd:6c:1d:2a:75:9f:
b5:b5:5e:f1:f9:e6:01:1c:03:1c:92:38:dc:c9:9d:
2d:7c:50:89:f0:7d:6f:2c:7d:b5:a2:5b:49:24:dd:
e0:d0:6a:57:7e:31:dc:fb:ef:7b:37:3f:f3:00:65:
70:8f:28:71:ea:85:c5:59:50:d1:05:c0:ee:f7:a4:
7c:2b:02:cd:24:ea:d7:2c:60:f3:f6:5d:30:bd:65:
c1:1c:85:44:25:18:26:05:32:94:cb:6e:48:95:b8:
35:39:bc:7b:ed:95:49:66:3c:84:24:38:64:cb:1a:
be:e3:0a:bc:8d:4a:eb:7a:c6:d6:4b:df:a8:c1:cb:
7b:19:0b:6c:24:09:47:c1:c0:25:8d:6e:99:74:6c:
e3:58:5b:5f:67:c0:cb:a9:04:b9:bb:c0:d7:58:5e:
3e:f3:67:07:a8:e9:b6:65:92:68:83:f2:4b:d0:5e:
82:6a:e4:3b:83:30:a5:c2:cf:eb:12:fb:e8:23:09:
be:21:9c:9a:8c:fe:4c:9f:a2:c5:da:ea:da:2f:3a:
1f:32:bc:4a:76:b4:59:6a:42:64:19:3e:c9:05:20:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C9:B7:3B:34:08:FB:EA:CC:DA:18:64:66:B9:D3:61:9F:76:6E:7B
X509v3 Authority Key Identifier:
keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:72:4c:4d:ac:25:0f:d2:5e:06:db:2c:31:e5:42:45:7e:27:
60:2a:de:5a:4b:c7:83:bb:cd:bc:76:13:e4:45:90:e4:f6:e0:
b8:42:2c:8e:e5:d3:8e:49:6d:53:2b:aa:38:23:0f:88:b3:05:
be:39:0c:4f:aa:09:c3:54:64:44:d9:da:24:d0:c8:7e:1e:87:
11:c3:41:12:39:86:95:fb:3b:28:55:b5:48:54:8c:94:c5:26:
40:3f:ec:1b:1e:d1:64:0a:96:b0:30:47:5f:43:86:14:f6:55:
0b:95:61:69:7e:b0:e2:e2:57:a4:0b:97:89:31:47:11:9c:6e:
72:37:cd:00:29:42:a6:76:06:e8:6f:d9:44:67:88:6a:db:77:
45:80:ea:c5:01:5c:11:26:a9:7e:ee:57:ee:9d:87:9f:78:4b:
1e:96:f3:e8:42:fd:24:10:80:08:ca:3e:2d:72:1c:8f:d7:64:
bc:7c:0b:48:8c:f5:79:18:72:6b:28:aa:2c:56:80:16:21:b4:
34:14:4f:91:f0:e6:5e:ea:ed:76:eb:bc:f2:82:7b:bc:39:7f:
cb:38:98:d1:45:c2:2a:35:d4:00:10:47:fd:f5:30:05:c5:30:
bd:c7:8a:0f:5d:eb:cb:09:33:ba:e2:6a:63:a6:39:3a:51:81:
9d:c7:1f:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/p3HGqFpF6cPV7XYi6PLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzYxNzhmYjAzNDkwNTEzMGFmMGNlMWNkMjc1MTU0ZjJi
NTliNzgwHhcNMjYxMDE1MTMwMTQwWhcNMjYxMDE2MTMwMTQwWjAzMTEwLwYDVQQD
Eyg2ZGM5YjczYjM0MDhmYmVhY2NkYTE4NjQ2NmI5ZDM2MTlmNzY2ZTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCpapwowiCQ/NWdVD726Fo5XS7D7
RDELJiO+YIL380Z2tSDqmGLdbB0qdZ+1tV7x+eYBHAMckjjcyZ0tfFCJ8H1vLH21
oltJJN3g0GpXfjHc++97Nz/zAGVwjyhx6oXFWVDRBcDu96R8KwLNJOrXLGDz9l0w
vWXBHIVEJRgmBTKUy25Ilbg1Obx77ZVJZjyEJDhkyxq+4wq8jUrresbWS9+owct7
GQtsJAlHwcAljW6ZdGzjWFtfZ8DLqQS5u8DXWF4+82cHqOm2ZZJog/JL0F6CauQ7
gzClws/rEvvoIwm+IZyajP5Mn6LF2uraLzofMrxKdrRZakJkGT7JBSD6JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3Jtzs0CPvqzNoYZGa502Gfdm57MB8GA1UdIwQY
MBaAFNPGF4+wNJBRMK8M4c0nUVTytZt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83OGZkZTktNmRmMC00YWUyLTliMzct
YTdjNGIyZjZlMjc2LzEvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83OGZkZTktNmRmMC00YWUyLTliMzctYTdjNGIyZjZlMjc2
LzEvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnJMTawl
D9JeBtssMeVCRX4nYCreWkvHg7vNvHYT5EWQ5PbguEIsjuXTjkltUyuqOCMPiLMF
vjkMT6oJw1RkRNnaJNDIfh6HEcNBEjmGlfs7KFW1SFSMlMUmQD/sGx7RZAqWsDBH
X0OGFPZVC5VhaX6w4uJXpAuXiTFHEZxucjfNAClCpnYG6G/ZRGeIatt3RYDqxQFc
ESapfu5X7p2Hn3hLHpbz6EL9JBCACMo+LXIcj9dkvHwLSIz1eRhyayiqLFaAFiG0
NBRPkfDmXurtduu88oJ7vDl/yziY0UXCKjXUABBH/fUwBcUwvceKD13rywkzuuJq
Y6Y5OlGBnccfXg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:49 2026 by rpki-client