Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
File: E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft (raw, json)
Hash identifier: IyD1HeywckOEZQrSH87KmBvk28sXLbZlgXXUQdXPNQA=
Subject key identifier: 2C:5A:D0:65:E7:BC:A6:9D:6D:43:93:9D:5D:9E:9C:2C:7B:B3:C3:61
Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
Certificate issuer: /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Certificate serial: 01A13E5CC93C59E3C272381DF4B6D25C5E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 07:00:30 +0000
Manifest this update: Thu 15 Oct 2026 07:00:30 +0000
Manifest next update: Fri 16 Oct 2026 07:00:30 +0000
Files and hashes: 1: E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl (hash: dsdtxqM2NCuZ+ZzKwRgAqib29ag3JLSRlwX/fdpfOtg=)
2: Kh2ibrrlvAJA0BPytF3vpct5nG8.roa (hash: 9S+B5OPrOVNMPF41i1ZV7e9GhndsXm9HajUBATSWGss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:c9:3c:59:e3:c2:72:38:1d:f4:b6:d2:5c:5e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Validity
Not Before: Oct 15 07:00:30 2026 GMT
Not After : Oct 16 07:00:30 2026 GMT
Subject: CN=2c5ad065e7bca69d6d43939d5d9e9c2c7bb3c361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:fc:96:b0:e3:aa:3a:c7:8d:82:9f:ab:9f:
f3:ed:05:b4:ba:3f:e9:ca:5a:7d:7e:37:56:2d:9c:
30:b6:14:c4:91:9e:78:68:d6:a8:a1:d4:e4:05:1d:
76:28:cb:19:87:6d:07:e8:0f:57:bd:21:0c:3a:bf:
70:38:4f:88:3d:6e:e7:4e:84:f3:d2:ef:31:24:db:
79:06:a2:b8:77:14:2a:a7:b6:cf:c1:c1:3c:d8:bb:
4b:79:33:65:d7:d1:77:ba:f0:2d:3e:ca:41:83:5f:
35:ac:c4:d7:84:46:18:b9:10:b4:26:b8:a6:b7:8b:
9e:f7:1e:f9:ae:83:c3:7b:08:b8:34:26:9e:27:db:
a1:2e:c9:59:48:3a:b0:7c:d8:2c:c6:01:10:5f:00:
f3:fd:bc:06:89:1e:af:bc:05:4b:65:56:01:3b:51:
ff:55:64:57:56:01:cd:1c:fd:c4:6e:3e:4a:32:cd:
58:e6:82:59:86:9b:33:d6:ad:f5:10:72:c5:ea:98:
fc:a9:e4:42:08:2c:5e:8f:ab:00:a7:dd:a3:dc:d0:
2f:ed:c6:ec:42:32:34:5b:b6:31:b9:72:72:d0:c6:
ce:e5:f5:9d:8c:73:29:25:cd:19:a2:02:30:35:eb:
8e:b1:e1:57:bb:5b:c3:91:d3:2f:1a:d8:e1:df:d3:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5A:D0:65:E7:BC:A6:9D:6D:43:93:9D:5D:9E:9C:2C:7B:B3:C3:61
X509v3 Authority Key Identifier:
keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c7:28:3d:30:e1:0a:78:7b:7a:1f:87:c1:cb:43:87:de:01:
6b:65:a1:14:2f:14:c8:8c:f6:27:e2:9b:70:4d:28:f7:cc:ee:
28:e7:fe:66:3f:9e:09:33:4e:5f:42:db:c2:27:b8:22:50:f0:
5f:20:07:11:60:02:08:67:c1:8a:8a:c4:8a:67:50:d9:9e:39:
ff:34:58:2c:e4:63:a5:ea:d9:89:e9:72:48:52:e2:3f:65:5a:
0f:fa:6c:33:ec:c2:3b:65:a7:ad:d5:fc:4a:57:00:3a:d4:fa:
7d:60:38:06:34:7c:d6:f1:9d:45:36:58:d7:92:ff:f4:86:a4:
5d:eb:0a:85:8c:57:51:ad:fd:f8:09:66:86:b4:65:9c:ea:ce:
5c:b0:a4:f3:3c:17:ca:07:d0:9b:f8:9a:39:c7:75:52:3f:ad:
2a:81:28:3e:c0:7c:9e:a2:f6:bc:ae:98:0f:85:17:d2:a7:14:
1c:a5:07:8d:09:59:39:c6:1e:bf:64:a6:62:b1:73:7a:c9:95:
4b:cf:a8:9c:56:1c:e7:76:75:de:1a:34:1a:3a:2b:0a:0b:2d:
ad:d6:63:39:b1:fa:3b:ca:fc:6a:b4:42:b5:6e:57:14:0e:8c:
88:83:7d:21:5b:a1:d3:32:6d:88:be:aa:69:8f:ca:0e:a4:a9:
90:d7:5e:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XMk8WePCcjgd9LbSXF51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYzlmZDM3Yzc0MzFjZTZhYTNjOTNhNjk1MmM2N2YwZjBj
OTg0NmUwHhcNMjYxMDE1MDcwMDMwWhcNMjYxMDE2MDcwMDMwWjAzMTEwLwYDVQQD
EygyYzVhZDA2NWU3YmNhNjlkNmQ0MzkzOWQ1ZDllOWMyYzdiYjNjMzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ78lrDjqjrHjYKfq5/z7QW0uj/p
ylp9fjdWLZwwthTEkZ54aNaoodTkBR12KMsZh20H6A9XvSEMOr9wOE+IPW7nToTz
0u8xJNt5BqK4dxQqp7bPwcE82LtLeTNl19F3uvAtPspBg181rMTXhEYYuRC0Jrim
t4ue9x75roPDewi4NCaeJ9uhLslZSDqwfNgsxgEQXwDz/bwGiR6vvAVLZVYBO1H/
VWRXVgHNHP3Ebj5KMs1Y5oJZhpsz1q31EHLF6pj8qeRCCCxej6sAp92j3NAv7cbs
QjI0W7YxuXJy0MbO5fWdjHMpJc0ZogIwNeuOseFXu1vDkdMvGtjh39OxewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxa0GXnvKadbUOTnV2enCx7s8NhMB8GA1UdIwQY
MBaAFBPJ/TfHQxzmqjyTppUsZ/DwyYRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84ZTgyMjctY2QyMC00ZGI4LWE0MGUt
NmEzZGZiNDdmOGM0LzEvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC84ZTgyMjctY2QyMC00ZGI4LWE0MGUtNmEzZGZiNDdmOGM0
LzEvRThuOU44ZERIT2FxUEpPbWxTeG44UERKaEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmccoPTDh
Cnh7eh+HwctDh94Ba2WhFC8UyIz2J+KbcE0o98zuKOf+Zj+eCTNOX0Lbwie4IlDw
XyAHEWACCGfBiorEimdQ2Z45/zRYLORjperZielySFLiP2VaD/psM+zCO2WnrdX8
SlcAOtT6fWA4BjR81vGdRTZY15L/9IakXesKhYxXUa39+AlmhrRlnOrOXLCk8zwX
ygfQm/iaOcd1Uj+tKoEoPsB8nqL2vK6YD4UX0qcUHKUHjQlZOcYev2SmYrFzesmV
S8+onFYc53Z13ho0GjorCgstrdZjObH6O8r8arRCtW5XFA6MiIN9IVuh0zJtiL6q
aY/KDqSpkNde1A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:29 2026 by rpki-client