Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File: i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier: PuAwo8nqcYCHBxq+e/GmVWoNErdp/+0iGrsmM9sTgaE=
Subject key identifier: FD:80:10:56:A2:10:0F:B2:84:68:75:7A:D0:F9:D7:B3:3E:A5:ED:52
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 019FFB369DAE4DFC30F6867E505FDFE2C712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number: 1A16
Signing time: Thu 13 Aug 2026 13:01:28 +0000
Manifest this update: Thu 13 Aug 2026 13:01:28 +0000
Manifest next update: Fri 14 Aug 2026 13:01:28 +0000
Files and hashes: 1: 4jNVPAJmLO9c6pL_yxre_7Qg83Q.asa (hash: 8bMdcGTnGljv1AHWzdlj2piSPGzoCzVunMnP41YGxLk=)
2: CwYtcY0RzoREVsUncN6feXvLhC8.roa (hash: ySt5zeOhGaWSVgsdZWXLp4TRyQYCT9hlwJu376Il+vE=)
3: Ju5bZFbzxZDEu6_EWVUu55SHf94.roa (hash: 3V3wg3sXHNBt7AEjJ/DpnJhsu+XXYKgeytuHR/IQBII=)
4: a2QkPtyL0SmdjP5zau-ugnaW-EU.roa (hash: gM4VfQdg6WpZhQD+HowobTuTX+TLbbelKQeacFg1zmA=)
5: aontSbFahoS7z7yeQkm0W4LHsPo.roa (hash: nj6whxPf9P8SD5zY0uyTbTulc/A+27qSNJjJoDzd5t0=)
6: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: VDvNrX88vFvl10HDAla/St8uEnFxz0nF5lgWnPROMrA=)
7: iZdJ0QX0G1vfk69oMHVFQ34W6Zg.asa (hash: oKspxLsKbdfZFXIMEqaNBaecIl0lk1KJLeO2odsQH/4=)
8: kZguNbKDxcwx7TTRhlYgy4TEeQ8.roa (hash: gALJSh2LcRXQqCp+dXvtYhynkz9C6FiHkuFaiMFg4sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:36:9d:ae:4d:fc:30:f6:86:7e:50:5f:df:e2:c7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Aug 13 13:01:28 2026 GMT
Not After : Aug 14 13:01:28 2026 GMT
Subject: CN=fd801056a2100fb28468757ad0f9d7b33ea5ed52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ed:78:a3:95:60:fa:89:cc:ae:97:91:93:22:
00:99:3c:20:91:41:83:4a:dc:9a:22:00:1e:60:77:
f3:90:39:25:6b:a0:c7:ef:c1:01:77:b2:38:b9:94:
c2:b6:1f:cb:0f:a6:c8:46:be:b2:04:54:a0:34:fb:
22:5b:46:93:67:0b:6d:43:14:22:f1:d1:2b:13:c1:
2e:9f:fe:59:80:c7:51:15:88:27:80:0d:5f:5b:65:
a1:23:16:a0:ef:a8:21:c7:09:11:a5:b6:ef:f9:df:
15:55:f3:99:cd:d1:36:02:a7:6b:99:56:87:d7:25:
f5:85:39:75:96:6a:8c:38:27:89:de:56:aa:1b:52:
3f:28:88:34:3d:13:12:2c:bb:46:c5:a7:ca:95:7b:
67:51:f5:6e:eb:10:1c:7c:de:41:2e:1c:d9:53:2c:
06:ad:7a:43:05:1f:7f:c1:45:69:22:90:e0:15:2b:
73:17:be:be:b8:d8:19:c7:66:23:db:26:7e:55:d2:
5c:1e:ae:76:46:c9:cc:37:c2:bf:f8:01:21:fa:81:
06:20:5d:90:b2:4d:87:b4:71:89:21:83:46:f3:d1:
34:4f:3e:2b:fb:bd:d8:e8:28:c2:d7:d0:d0:3a:54:
10:ff:9e:e8:f7:62:50:bb:e0:6e:e8:b2:27:68:be:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:80:10:56:A2:10:0F:B2:84:68:75:7A:D0:F9:D7:B3:3E:A5:ED:52
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:42:06:75:fc:29:61:03:7f:eb:e8:e6:d7:02:6d:c9:56:e3:
1d:4f:d3:29:06:ed:a7:ad:6f:db:57:d8:ec:bb:65:fe:64:24:
83:a6:18:83:4f:34:24:71:66:85:e5:b7:f9:a3:de:b4:c3:64:
e5:e3:08:25:ae:4d:3b:4d:af:00:74:01:42:a7:4f:24:e7:f2:
40:7a:1d:98:95:b8:b6:a5:f1:fb:b8:81:84:17:26:3a:08:23:
5f:81:20:0e:ca:c6:88:7b:2b:5d:ed:f4:65:12:33:23:f4:45:
05:e1:7e:f2:12:13:71:85:6b:62:1a:d3:74:29:d8:70:b3:84:
6a:d9:ea:8d:15:7b:41:40:9b:f6:fd:37:9e:30:61:47:f2:36:
3e:d9:0c:fb:b2:e4:c8:a0:9e:af:aa:01:5b:04:53:b3:b7:00:
e9:e9:ef:b2:76:24:b6:e8:57:9c:0a:0a:58:8a:74:2b:8f:68:
d7:87:c6:6f:99:b9:5c:03:6f:8d:24:9e:17:12:5d:ac:ff:08:
74:b7:88:d5:3e:35:37:0c:52:0a:7a:f5:67:e1:07:34:0f:3a:
a3:da:ae:78:72:3a:ba:1c:3f:ba:a4:d8:df:53:23:6c:72:05:
0b:d0:8d:36:18:2d:e4:9c:fb:ff:5e:27:d7:92:eb:96:81:1d:
84:a8:9f:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/7Np2uTfww9oZ+UF/f4scSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjlmYzYxMjhiZTU5MTQwMWFjZjgyYmMyNDYxYWY2MzZl
YmU4ZTYwHhcNMjYwODEzMTMwMTI4WhcNMjYwODE0MTMwMTI4WjAzMTEwLwYDVQQD
EyhmZDgwMTA1NmEyMTAwZmIyODQ2ODc1N2FkMGY5ZDdiMzNlYTVlZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye14o5Vg+onMrpeRkyIAmTwgkUGD
StyaIgAeYHfzkDkla6DH78EBd7I4uZTCth/LD6bIRr6yBFSgNPsiW0aTZwttQxQi
8dErE8Eun/5ZgMdRFYgngA1fW2WhIxag76ghxwkRpbbv+d8VVfOZzdE2AqdrmVaH
1yX1hTl1lmqMOCeJ3laqG1I/KIg0PRMSLLtGxafKlXtnUfVu6xAcfN5BLhzZUywG
rXpDBR9/wUVpIpDgFStzF76+uNgZx2Yj2yZ+VdJcHq52RsnMN8K/+AEh+oEGIF2Q
sk2HtHGJIYNG89E0Tz4r+73Y6CjC19DQOlQQ/57o92JQu+Bu6LInaL5pZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2AEFaiEA+yhGh1etD517M+pe1SMB8GA1UdIwQY
MBaAFItp/GEovlkUAaz4K8JGGvY26+jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUt
MjY1ZjJiZDBmOGYzLzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUtMjY1ZjJiZDBmOGYz
LzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUIGdfwp
YQN/6+jm1wJtyVbjHU/TKQbtp61v21fY7Ltl/mQkg6YYg080JHFmheW3+aPetMNk
5eMIJa5NO02vAHQBQqdPJOfyQHodmJW4tqXx+7iBhBcmOggjX4EgDsrGiHsrXe30
ZRIzI/RFBeF+8hITcYVrYhrTdCnYcLOEatnqjRV7QUCb9v03njBhR/I2PtkM+7Lk
yKCer6oBWwRTs7cA6envsnYktuhXnAoKWIp0K49o14fGb5m5XANvjSSeFxJdrP8I
dLeI1T41NwxSCnr1Z+EHNA86o9queHI6uhw/uqTY31MjbHIFC9CNNhgt5Jz7/14n
15LrloEdhKifbQ==
-----END CERTIFICATE-----
Generated at Thu Aug 13 17:13:30 2026 by rpki-client