Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: p5pT4FMclHZRoHuVCN/4RpAxPz5GDHRfl2V3NBXS7i0=
Subject key identifier: 4B:F1:89:2D:C1:F3:0E:5C:98:72:AF:BC:16:10:07:30:F8:FB:FD:9B
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 01A13D49FED7BCA371083155E02A5B701B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 1100
Signing time: Thu 15 Oct 2026 02:00:21 +0000
Manifest this update: Thu 15 Oct 2026 02:00:21 +0000
Manifest next update: Fri 16 Oct 2026 02:00:21 +0000
Files and hashes: 1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: /bnqcQJi8jeUztYb1eZw4QkZOqiUa6nsATBVapqv5mE=)
2: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (hash: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A=)
3: LwxlxO59sLpFilR69YBzUan2hpk.roa (hash: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:49:fe:d7:bc:a3:71:08:31:55:e0:2a:5b:70:1b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Oct 15 02:00:21 2026 GMT
Not After : Oct 16 02:00:21 2026 GMT
Subject: CN=4bf1892dc1f30e5c9872afbc16100730f8fbfd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:aa:71:1c:08:f6:65:72:66:ee:04:06:5a:
b0:f5:9b:17:48:01:a8:04:83:c8:41:a3:bf:7d:1b:
63:40:0e:8a:71:ba:64:25:92:11:c8:1e:02:c3:01:
48:a9:2d:38:26:7d:d3:29:dc:14:76:a4:6f:4d:50:
2f:f5:9b:92:e5:a8:54:72:0c:42:ad:2d:db:b0:b6:
7d:96:42:ba:74:2f:35:46:9b:71:dd:09:d3:b3:68:
30:94:cb:3c:1c:a2:1a:41:1d:e6:6e:55:6a:96:fc:
7d:1a:4d:79:8a:19:fb:a9:fe:6a:ac:e9:82:a8:8d:
75:1d:dc:6b:14:c4:40:4f:92:db:7e:07:56:4a:f4:
c6:dd:9f:ca:8d:cb:ee:a1:b2:22:cf:ba:e8:93:3c:
7e:85:23:36:39:0a:2c:8a:1a:c9:35:3b:5d:9b:34:
94:0a:ab:9f:3c:4b:c6:3f:1e:3c:85:b4:cd:26:90:
51:df:53:76:a0:18:8e:27:66:28:dd:bd:e1:d6:5c:
6f:33:f7:67:d0:31:01:2c:d6:9b:51:66:3e:66:57:
8f:d7:45:45:9a:45:1c:a3:93:6a:d7:20:ed:7c:9e:
fa:50:ab:a9:03:b3:5b:ba:ee:79:55:17:16:a2:fc:
0a:1f:a6:fa:85:bc:e6:d6:a4:2d:8f:4e:30:88:91:
36:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F1:89:2D:C1:F3:0E:5C:98:72:AF:BC:16:10:07:30:F8:FB:FD:9B
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fb:c5:1a:c4:5b:02:da:57:ff:58:97:21:9e:52:e7:2c:a9:
9f:5c:a7:1c:fe:a3:d0:10:24:c2:61:d7:33:46:00:67:4c:f5:
c0:8b:6d:fb:44:8d:03:eb:6c:dd:bc:d7:2a:85:a2:c0:bf:ba:
1b:58:5d:73:db:41:76:e6:16:9d:46:5a:56:f9:6b:42:34:89:
31:a1:9e:52:e1:4c:da:5f:7f:28:58:28:ed:ff:59:30:05:b9:
69:58:07:cd:35:1c:28:c8:56:bd:ce:c2:fd:30:4a:6f:7b:7d:
2c:ec:23:e5:7c:ff:d6:aa:c5:f1:1f:b1:11:c1:19:71:5e:ec:
19:53:f9:32:19:7e:29:25:c9:c6:38:13:d4:29:0a:77:00:00:
a4:f9:04:0c:75:24:d6:ba:6f:ff:d9:6a:af:20:73:b1:80:3a:
3f:db:f9:b8:e0:51:10:56:b2:cc:ae:96:2d:af:70:68:40:8e:
0a:8b:dc:42:48:b0:0e:5f:1b:fd:a0:e0:99:9e:b1:8a:e2:fd:
97:8e:87:da:c8:61:5e:dc:0b:24:3c:ae:11:39:ec:2f:a1:30:
33:87:3d:42:bc:13:e1:d4:8a:be:58:01:e6:dd:11:65:14:d1:
ee:98:a3:13:3a:79:5f:dc:54:01:fa:76:4b:07:2e:31:45:de:
73:88:48:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9Sf7XvKNxCDFV4CpbcBuFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2M5M2RkYjFhMTcxNTFjNTZmMjJkY2FmMzFkZDgyMjk0
NjM3NDIwHhcNMjYxMDE1MDIwMDIxWhcNMjYxMDE2MDIwMDIxWjAzMTEwLwYDVQQD
Eyg0YmYxODkyZGMxZjMwZTVjOTg3MmFmYmMxNjEwMDczMGY4ZmJmZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbeqcRwI9mVyZu4EBlqw9ZsXSAGo
BIPIQaO/fRtjQA6KcbpkJZIRyB4CwwFIqS04Jn3TKdwUdqRvTVAv9ZuS5ahUcgxC
rS3bsLZ9lkK6dC81Rptx3QnTs2gwlMs8HKIaQR3mblVqlvx9Gk15ihn7qf5qrOmC
qI11HdxrFMRAT5LbfgdWSvTG3Z/KjcvuobIiz7rokzx+hSM2OQosihrJNTtdmzSU
CqufPEvGPx48hbTNJpBR31N2oBiOJ2Yo3b3h1lxvM/dn0DEBLNabUWY+ZleP10VF
mkUco5Nq1yDtfJ76UKupA7Nbuu55VRcWovwKH6b6hbzm1qQtj04wiJE2NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvxiS3B8w5cmHKvvBYQBzD4+/2bMB8GA1UdIwQY
MBaAFPJ8k92xoXFRxW8i3K8x3YIpRjdCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5Mjkt
MzZlMGM4YWZlMjZhLzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5MjktMzZlMGM4YWZlMjZh
LzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPvFGsRb
AtpX/1iXIZ5S5yypn1ynHP6j0BAkwmHXM0YAZ0z1wItt+0SNA+ts3bzXKoWiwL+6
G1hdc9tBduYWnUZaVvlrQjSJMaGeUuFM2l9/KFgo7f9ZMAW5aVgHzTUcKMhWvc7C
/TBKb3t9LOwj5Xz/1qrF8R+xEcEZcV7sGVP5Mhl+KSXJxjgT1CkKdwAApPkEDHUk
1rpv/9lqryBzsYA6P9v5uOBREFayzK6WLa9waECOCovcQkiwDl8b/aDgmZ6xiuL9
l46H2shhXtwLJDyuETnsL6EwM4c9QrwT4dSKvlgB5t0RZRTR7pijEzp5X9xUAfp2
SwcuMUXec4hIOQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:21 2026 by rpki-client