Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
File: 8MRc9qe7S199ocIiINBI2mFos-o.mft (raw, json)
Hash identifier: prZWLojqAw2RHZQ7ec3UWnvMnBgaPX/gPJOgP8i3eQ4=
Subject key identifier: E5:ED:0B:EF:93:A7:A2:0D:15:B2:56:6F:44:02:F0:DF:EC:4E:90:44
Authority key identifier: F0:C4:5C:F6:A7:BB:4B:5F:7D:A1:C2:22:20:D0:48:DA:61:68:B3:EA
Certificate issuer: /CN=f0c45cf6a7bb4b5f7da1c22220d048da6168b3ea
Certificate serial: 01A13559C5648E73439E119F8C3139D8294C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MRc9qe7S199ocIiINBI2mFos-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
Manifest number: 60
Signing time: Tue 13 Oct 2026 13:00:37 +0000
Manifest this update: Tue 13 Oct 2026 13:00:37 +0000
Manifest next update: Wed 14 Oct 2026 13:00:37 +0000
Files and hashes: 1: 8MRc9qe7S199ocIiINBI2mFos-o.crl (hash: oDaCvjXhZn8mpTAhEOnRuTB8k3onxDTUlQpRhCceZ8I=)
2: cDpQ-lup4UOfykLQM1uw9xBJXn0.roa (hash: YzUc6EeuXnL915saMdUCemojfhzBDlS0lYhMfgci5II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MRc9qe7S199ocIiINBI2mFos-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:59:c5:64:8e:73:43:9e:11:9f:8c:31:39:d8:29:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c45cf6a7bb4b5f7da1c22220d048da6168b3ea
Validity
Not Before: Oct 13 13:00:37 2026 GMT
Not After : Oct 14 13:00:37 2026 GMT
Subject: CN=e5ed0bef93a7a20d15b2566f4402f0dfec4e9044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:9f:e2:76:a0:2a:be:d9:53:7e:8d:f8:f1:
3f:71:fc:ce:0c:d3:dd:f1:97:a0:4c:ee:5b:26:27:
03:68:91:14:db:43:95:b0:36:6e:76:56:75:d1:86:
dc:c0:b0:e7:b9:a6:b7:df:2c:02:d9:3a:f0:d9:4f:
ce:80:2b:76:df:24:df:9d:a6:ec:96:61:22:f1:de:
a0:3e:63:f7:96:c1:f6:67:c4:2c:8a:ba:45:57:94:
eb:4a:0e:69:03:fb:31:6e:70:fe:40:ae:f6:9e:0c:
4d:26:40:2a:0d:85:de:87:a6:78:e2:73:87:62:81:
a4:bd:4e:4e:01:12:d2:b1:7b:3d:5e:35:a4:a1:4b:
a3:51:a5:ee:37:39:48:45:ed:05:1a:e4:00:34:1f:
6c:8f:26:fa:7e:37:64:17:00:63:63:09:56:c4:bd:
cc:d9:35:89:78:3a:73:5d:fa:5d:36:f0:db:a9:10:
e7:1a:fa:f9:a3:76:33:d6:c0:d0:66:93:33:30:56:
e0:5a:ca:1b:20:f2:26:5a:f6:a1:0c:77:a0:37:c9:
0b:1d:7d:16:7a:6e:d6:26:95:56:d0:24:71:90:6d:
17:0d:47:6d:7a:18:36:a3:59:ea:61:46:a4:64:16:
71:7e:9e:f0:a9:0f:44:75:92:b1:45:eb:bf:a1:5c:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:ED:0B:EF:93:A7:A2:0D:15:B2:56:6F:44:02:F0:DF:EC:4E:90:44
X509v3 Authority Key Identifier:
keyid:F0:C4:5C:F6:A7:BB:4B:5F:7D:A1:C2:22:20:D0:48:DA:61:68:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MRc9qe7S199ocIiINBI2mFos-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/30b9ae-c476-42e3-8a6e-3cdb45b9358a/1/8MRc9qe7S199ocIiINBI2mFos-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cf:37:f2:fa:37:8d:88:e1:43:82:ed:a8:1f:8e:9b:37:c5:
bb:e3:7c:ef:4d:66:f4:d3:d7:49:38:7f:c5:5d:a5:33:bf:29:
52:37:65:5b:7c:30:50:19:31:6d:d2:c5:67:5a:b3:40:c6:c0:
ef:d2:2e:9b:b0:55:e0:82:18:b8:08:23:1a:1b:6b:60:72:85:
4d:63:1f:01:24:38:52:57:97:1b:64:45:d6:5b:58:50:ea:63:
e2:cd:d1:4d:c3:db:5e:ce:f9:87:b1:e3:d3:5c:f9:de:b4:c1:
a4:ff:c9:78:c0:cd:41:1e:2a:aa:15:79:12:a6:bf:31:c9:38:
e1:fa:09:09:fd:00:82:f0:af:29:5c:9f:3f:b0:1a:e1:58:0c:
79:d3:26:d0:11:87:9e:04:dd:d5:1b:bc:cd:4f:bf:be:ed:0a:
ca:4c:b3:5f:7b:ab:32:f8:e5:43:78:15:48:fb:63:d7:98:b5:
77:39:c6:bc:12:ad:77:33:67:b8:5a:6d:18:2f:4b:3a:04:bb:
a5:e4:59:0d:c5:ad:66:bd:78:80:4d:61:f9:b4:64:23:fb:19:
3e:c1:b7:96:31:1e:de:29:10:95:a8:87:af:09:e4:70:ee:25:
e4:83:ec:c7:92:72:48:79:b0:03:5e:47:a7:6b:28:ff:4f:8f:
c7:62:bb:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1WcVkjnNDnhGfjDE52ClMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzQ1Y2Y2YTdiYjRiNWY3ZGExYzIyMjIwZDA0OGRhNjE2
OGIzZWEwHhcNMjYxMDEzMTMwMDM3WhcNMjYxMDE0MTMwMDM3WjAzMTEwLwYDVQQD
EyhlNWVkMGJlZjkzYTdhMjBkMTViMjU2NmY0NDAyZjBkZmVjNGU5MDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYGf4nagKr7ZU36N+PE/cfzODNPd
8ZegTO5bJicDaJEU20OVsDZudlZ10YbcwLDnuaa33ywC2Trw2U/OgCt23yTfnabs
lmEi8d6gPmP3lsH2Z8QsirpFV5TrSg5pA/sxbnD+QK72ngxNJkAqDYXeh6Z44nOH
YoGkvU5OARLSsXs9XjWkoUujUaXuNzlIRe0FGuQANB9sjyb6fjdkFwBjYwlWxL3M
2TWJeDpzXfpdNvDbqRDnGvr5o3Yz1sDQZpMzMFbgWsobIPImWvahDHegN8kLHX0W
em7WJpVW0CRxkG0XDUdtehg2o1nqYUakZBZxfp7wqQ9EdZKxReu/oVyu0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXtC++Tp6INFbJWb0QC8N/sTpBEMB8GA1UdIwQY
MBaAFPDEXPanu0tffaHCIiDQSNphaLPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1SYzlxZTdTMTk5b2NJaUlOQkkybUZvcy1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zMGI5YWUtYzQ3Ni00MmUzLThhNmUt
M2NkYjQ1YjkzNThhLzEvOE1SYzlxZTdTMTk5b2NJaUlOQkkybUZvcy1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zMGI5YWUtYzQ3Ni00MmUzLThhNmUtM2NkYjQ1YjkzNThh
LzEvOE1SYzlxZTdTMTk5b2NJaUlOQkkybUZvcy1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAos838vo3
jYjhQ4LtqB+OmzfFu+N8701m9NPXSTh/xV2lM78pUjdlW3wwUBkxbdLFZ1qzQMbA
79Ium7BV4IIYuAgjGhtrYHKFTWMfASQ4UleXG2RF1ltYUOpj4s3RTcPbXs75h7Hj
01z53rTBpP/JeMDNQR4qqhV5Eqa/Mck44foJCf0AgvCvKVyfP7Aa4VgMedMm0BGH
ngTd1Ru8zU+/vu0KykyzX3urMvjlQ3gVSPtj15i1dznGvBKtdzNnuFptGC9LOgS7
peRZDcWtZr14gE1h+bRkI/sZPsG3ljEe3ikQlaiHrwnkcO4l5IPsx5JySHmwA15H
p2so/0+Px2K7+w==
-----END CERTIFICATE-----
Generated at Tue Oct 13 20:55:18 2026 by rpki-client