Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: YJvgVwKgC5+8UdTA2zmmDJWcQMDi67dr77ZwhpLm6M0=
Subject key identifier: 03:B8:AD:16:C9:85:5D:7A:C5:94:C7:E3:22:7B:05:7A:43:6F:FE:91
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 01A13D13A0C72E1C310A1BEC618B16A126C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 0AB9
Signing time: Thu 15 Oct 2026 01:00:58 +0000
Manifest this update: Thu 15 Oct 2026 01:00:58 +0000
Manifest next update: Fri 16 Oct 2026 01:00:58 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: l47cS5iw5CmiYLtrvjOmpiTiJ/f50GN6YDnMg4OF3jA=)
2: il7H5XRLlPOMcGmUaTO99BZFn2I.roa (hash: Df3NCzCkDFx+xfWB8WmONNlOHJhDormcIJSvLVXSXWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:a0:c7:2e:1c:31:0a:1b:ec:61:8b:16:a1:26:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: Oct 15 01:00:58 2026 GMT
Not After : Oct 16 01:00:58 2026 GMT
Subject: CN=03b8ad16c9855d7ac594c7e3227b057a436ffe91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:40:e1:6b:bf:d0:5d:1d:74:3b:81:22:f2:
25:d4:72:28:6b:4d:fb:48:f1:94:7f:6d:43:e5:30:
1e:fd:8a:b7:e7:8d:4a:bd:59:35:0f:1e:40:bd:b0:
73:40:6e:2b:da:db:eb:26:d7:e5:77:02:c2:73:50:
28:52:9b:03:c1:6f:ba:9a:b5:2d:ec:7d:99:e7:cd:
6c:04:4d:92:58:78:1d:b5:1c:dc:14:43:52:94:28:
f7:51:0a:f8:dd:b1:83:28:a4:62:eb:8d:2c:49:9d:
9e:fd:27:a3:cd:22:02:73:c6:e6:69:8d:98:b9:95:
f3:43:67:fe:28:76:cb:a7:c8:e8:ea:3f:38:cb:58:
50:01:ba:7d:c8:d3:ab:a2:36:1b:35:7b:e0:57:5c:
3e:63:b1:6c:f3:fe:e4:67:74:8b:d9:0b:93:44:e0:
c7:51:e3:92:70:7e:fb:76:81:0e:f1:5e:26:62:42:
2d:22:ac:61:d8:f8:74:23:51:43:d2:bb:01:70:d4:
2c:52:f1:90:63:d6:d9:ff:96:b3:17:1a:b6:d2:82:
5d:93:3a:9f:d4:4c:b1:5e:3a:89:5f:18:1f:45:e0:
5c:a1:3a:7c:e6:f3:1f:ee:bd:cc:15:c7:c8:79:c1:
6c:3e:7d:1b:d5:c7:95:0b:dc:35:c8:28:63:e1:f6:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B8:AD:16:C9:85:5D:7A:C5:94:C7:E3:22:7B:05:7A:43:6F:FE:91
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:58:18:a2:c7:0f:33:f0:ae:61:33:e3:da:0b:f0:39:0e:fd:
b2:ec:9d:e7:42:5c:1d:0c:91:40:48:43:28:1a:c5:e8:e3:39:
5c:6f:91:5c:bf:8d:45:7c:a1:61:9a:36:4c:10:4a:09:db:21:
ef:8c:a9:7e:a4:d9:12:d3:15:a5:93:01:59:8e:5d:32:56:e1:
eb:12:ff:2c:4a:48:bf:ab:d9:9e:d2:bd:b8:cc:a6:23:fd:dc:
25:8c:84:ea:a7:39:13:52:37:ae:d9:f2:6f:c8:90:06:5f:75:
8d:d6:78:73:ac:bd:e3:f4:93:d3:02:a7:69:08:53:35:3f:41:
65:1d:81:f9:df:1f:d8:f1:50:ff:26:10:99:e3:51:1f:63:ef:
cb:92:f2:dc:75:1d:0c:6d:56:19:4f:70:f6:af:de:dc:a6:5c:
1a:d5:1e:25:9b:5c:4a:cc:90:50:b5:ae:91:02:f9:a6:2c:04:
f8:0a:05:f5:6b:b4:bc:ac:3e:5b:7d:a1:23:bf:04:16:d4:8c:
26:e1:b3:63:0c:b1:d1:9a:b4:16:90:a6:0c:9b:ac:7c:b9:5f:
a8:ac:9d:11:33:62:03:46:b9:18:58:9e:bb:81:1f:19:6c:dc:
13:f3:6e:21:34:e0:df:77:ad:da:64:0f:2b:d8:96:02:5a:bf:
6a:93:d5:af
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaE9E6DHLhwxChvsYYsWoSbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YjE2ODY4ZjMyMmFiNjc5YWVjNzMzNzAyYmYwNjhlOTYz
N2ZjNGYwHhcNMjYxMDE1MDEwMDU4WhcNMjYxMDE2MDEwMDU4WjAzMTEwLwYDVQQD
EygwM2I4YWQxNmM5ODU1ZDdhYzU5NGM3ZTMyMjdiMDU3YTQzNmZmZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PpA4Wu/0F0ddDuBIvIl1HIoa037
SPGUf21D5TAe/Yq3541KvVk1Dx5AvbBzQG4r2tvrJtfldwLCc1AoUpsDwW+6mrUt
7H2Z581sBE2SWHgdtRzcFENSlCj3UQr43bGDKKRi640sSZ2e/SejzSICc8bmaY2Y
uZXzQ2f+KHbLp8jo6j84y1hQAbp9yNOrojYbNXvgV1w+Y7Fs8/7kZ3SL2QuTRODH
UeOScH77doEO8V4mYkItIqxh2Ph0I1FD0rsBcNQsUvGQY9bZ/5azFxq20oJdkzqf
1EyxXjqJXxgfReBcoTp85vMf7r3MFcfIecFsPn0b1ceVC9w1yChj4fZ6mQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAO4rRbJhV16xZTH4yJ7BXpDb/6RMB8GA1UdIwQY
MBaAFPmxaGjzIqtnmuxzNwK/Bo6WN/xPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1iRm9hUE1pcTJlYTdITTNBcjhHanBZM19FOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvOGI1Zjg4LTMwNzEtNGE0NC05ZjBj
LTI0MmEyOTQ1OTRlMC8xLzEtYkZvYVBNaXEyZWE3SE0zQXI4R2pwWTNfRTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0LzhiNWY4OC0zMDcxLTRhNDQtOWYwYy0yNDJhMjk0NTk0
ZTAvMS8xLWJGb2FQTWlxMmVhN0hNM0FyOEdqcFkzX0U4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVgY
oscPM/CuYTPj2gvwOQ79suyd50JcHQyRQEhDKBrF6OM5XG+RXL+NRXyhYZo2TBBK
Cdsh74ypfqTZEtMVpZMBWY5dMlbh6xL/LEpIv6vZntK9uMymI/3cJYyE6qc5E1I3
rtnyb8iQBl91jdZ4c6y94/ST0wKnaQhTNT9BZR2B+d8f2PFQ/yYQmeNRH2Pvy5Ly
3HUdDG1WGU9w9q/e3KZcGtUeJZtcSsyQULWukQL5piwE+AoF9Wu0vKw+W32hI78E
FtSMJuGzYwyx0Zq0FpCmDJusfLlfqKydETNiA0a5GFieu4EfGWzcE/NuITTg33et
2mQPK9iWAlq/apPVrw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:14:12 2026 by rpki-client