Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: FwxAA5tL1CAvTUSmVtW3m6MP9w3NhN9s2sh3bsLx+5s=
Subject key identifier: FA:17:C1:94:F0:F9:1B:78:63:84:78:64:6B:51:53:39:5F:94:DD:BB
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 01A0404DF354A4E787473E4124879061C2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 1A1F
Signing time: Wed 26 Aug 2026 23:00:45 +0000
Manifest this update: Wed 26 Aug 2026 23:00:45 +0000
Manifest next update: Thu 27 Aug 2026 23:00:45 +0000
Files and hashes: 1: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: QRAPQp6efqsASrK9Kyqwcx2MCOrrJPl/k2q+nBSIZYw=)
2: jCsyE7PeO8MwI0WSmbdCicVhzBc.roa (hash: tv7EyDQ+IoB8bLb4GNx3/nwZP+BAJaSjfG7GlSBQTM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:f3:54:a4:e7:87:47:3e:41:24:87:90:61:c2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Aug 26 23:00:45 2026 GMT
Not After : Aug 27 23:00:45 2026 GMT
Subject: CN=fa17c194f0f91b78638478646b5153395f94ddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:aa:3b:cd:05:a9:f5:a1:0d:00:18:35:b5:
ec:33:bf:aa:cc:49:41:c2:36:ac:3d:9d:a4:aa:10:
03:d6:d1:f9:65:31:1c:7a:9b:2e:a7:f1:8b:cc:4c:
2a:c1:00:3e:00:0d:84:15:d4:2f:9c:c6:1d:fa:5c:
d3:fa:dd:94:ad:06:72:d5:76:bd:fd:5d:e1:6e:2c:
1d:7b:bd:10:7c:30:c4:b9:e0:c6:34:83:cc:09:74:
e0:8c:e1:6b:e3:65:88:98:97:e9:7d:61:61:ca:c2:
b4:c9:13:d5:0a:aa:39:52:76:e7:6a:31:fc:8d:f8:
f1:3f:9f:d0:16:3d:af:a6:6f:da:06:f7:4b:a3:c4:
26:30:67:16:b5:9c:b6:39:6b:27:5e:65:89:99:32:
e2:32:17:96:5f:bb:d3:91:a8:2d:ad:ce:0d:ff:ca:
5d:54:45:51:bd:49:6b:c3:e4:50:93:7e:48:76:cf:
f2:4d:6c:24:13:78:9e:46:f8:ad:f6:e1:a7:28:a1:
53:25:ff:72:1c:4f:b5:59:8c:cf:ee:ae:92:04:f6:
a2:a0:d8:36:f2:f7:37:78:42:15:50:02:50:fa:72:
b2:80:27:71:8c:a4:ab:32:85:1a:d6:09:6d:ca:1c:
1a:5a:00:7c:76:f5:0a:ec:16:52:5c:a4:eb:e9:36:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:17:C1:94:F0:F9:1B:78:63:84:78:64:6B:51:53:39:5F:94:DD:BB
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8f:24:97:22:d5:88:af:f5:54:2b:60:48:38:1f:30:08:84:
90:5b:80:cc:95:0b:df:0a:99:60:c5:27:52:d8:89:79:72:c3:
73:bb:d9:c4:e1:6b:9d:af:44:d4:ce:c3:a9:40:fa:75:70:52:
96:c2:77:5a:30:4b:cb:03:0a:66:57:cb:2a:08:54:e6:46:44:
0e:70:c4:58:d2:9d:2d:48:72:02:48:b4:44:4d:34:be:0b:ee:
8e:d6:d3:91:be:66:1d:02:93:ea:f5:71:d0:1e:ae:a1:a1:02:
b0:37:fa:9f:85:b4:de:66:39:58:67:dc:50:44:b1:b7:b6:2c:
2e:d9:bb:3b:ce:0a:83:79:71:2a:69:85:c8:8c:cf:92:c2:fd:
f7:dd:a3:5f:86:a7:90:c8:d3:d7:dc:8b:6f:bd:3b:fc:2a:ce:
dd:69:05:67:b3:50:86:28:2d:e2:3e:08:bc:bb:49:be:c9:de:
1b:dd:ad:f7:ba:e0:df:d1:85:f9:03:b5:b5:f1:ad:6e:73:57:
1d:59:ee:9e:7f:22:ec:0c:dd:24:47:1a:af:05:e5:83:82:fd:
75:7d:3a:45:40:95:ac:a6:3c:b9:cf:61:ca:ba:f9:95:dc:31:
5e:a5:ae:79:56:c8:da:9e:05:3e:af:66:a9:b0:af:d8:db:41:
2c:ff:57:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATfNUpOeHRz5BJIeQYcKxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYzIwYmU2MTY3ODkwMjQ3MzAzMjE0MTk3NjU4Y2E3Yzk2
NzYxNTAwHhcNMjYwODI2MjMwMDQ1WhcNMjYwODI3MjMwMDQ1WjAzMTEwLwYDVQQD
EyhmYTE3YzE5NGYwZjkxYjc4NjM4NDc4NjQ2YjUxNTMzOTVmOTRkZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TaqO80FqfWhDQAYNbXsM7+qzElB
wjasPZ2kqhAD1tH5ZTEcepsup/GLzEwqwQA+AA2EFdQvnMYd+lzT+t2UrQZy1Xa9
/V3hbiwde70QfDDEueDGNIPMCXTgjOFr42WImJfpfWFhysK0yRPVCqo5UnbnajH8
jfjxP5/QFj2vpm/aBvdLo8QmMGcWtZy2OWsnXmWJmTLiMheWX7vTkagtrc4N/8pd
VEVRvUlrw+RQk35Ids/yTWwkE3ieRvit9uGnKKFTJf9yHE+1WYzP7q6SBPaioNg2
8vc3eEIVUAJQ+nKygCdxjKSrMoUa1gltyhwaWgB8dvUK7BZSXKTr6TYziwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoXwZTw+Rt4Y4R4ZGtRUzlflN27MB8GA1UdIwQY
MBaAFC/CC+YWeJAkcwMhQZdljKfJZ2FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYt
MjQ0OWEzZWM5MjNlLzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYtMjQ0OWEzZWM5MjNl
LzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgo8klyLV
iK/1VCtgSDgfMAiEkFuAzJUL3wqZYMUnUtiJeXLDc7vZxOFrna9E1M7DqUD6dXBS
lsJ3WjBLywMKZlfLKghU5kZEDnDEWNKdLUhyAki0RE00vgvujtbTkb5mHQKT6vVx
0B6uoaECsDf6n4W03mY5WGfcUESxt7YsLtm7O84Kg3lxKmmFyIzPksL9992jX4an
kMjT19yLb707/CrO3WkFZ7NQhigt4j4IvLtJvsneG92t97rg39GF+QO1tfGtbnNX
HVnunn8i7AzdJEcarwXlg4L9dX06RUCVrKY8uc9hyrr5ldwxXqWueVbI2p4FPq9m
qbCv2NtBLP9XFw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 08:45:58 2026 by rpki-client