Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: TA1xE9JjsqTLSeNZ55RkoqZqpli8DFSYX0Yh4ggRf5Q=
Subject key identifier: 09:80:2D:50:44:CF:58:E8:32:16:14:92:D6:D7:69:3C:48:21:A0:F1
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 01A001A65C3FC505E822705D03E3F5289625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 19:01:14 +0000
Manifest this update: Fri 14 Aug 2026 19:01:14 +0000
Manifest next update: Sat 15 Aug 2026 19:01:14 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: 3T9MctBo19CeeS/jtQXLuJqvPsuhJHkOYvQhJYaPgWI=)
2: gItw0vdqzg90tFpmlTqKM5Onxow.roa (hash: EIklKyUdyJ9hgAFeB37ndmxzyfrlZyuSiNL83eIkim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:5c:3f:c5:05:e8:22:70:5d:03:e3:f5:28:96:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Aug 14 19:01:14 2026 GMT
Not After : Aug 15 19:01:14 2026 GMT
Subject: CN=09802d5044cf58e832161492d6d7693c4821a0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:82:c5:bf:4b:ea:fc:cd:38:db:71:22:44:
e5:39:13:ff:70:ce:bc:54:40:7f:a8:5d:78:38:65:
c2:da:53:12:98:0e:7d:cb:9e:44:db:4b:27:69:75:
c5:99:5c:e5:37:3b:d5:57:ec:2f:92:16:f9:e6:0f:
14:65:37:9f:af:14:9c:b4:de:36:c2:9b:bc:b9:14:
ec:30:36:c4:c6:ec:8a:ea:60:80:9a:ab:c3:2e:d2:
ab:94:a7:d7:22:1c:da:7b:4c:e5:db:1d:82:6c:b8:
c1:3e:a5:d4:63:02:3d:2c:ea:33:35:5f:4b:7d:85:
00:b7:b9:75:3e:e8:fc:a2:5a:89:84:89:c6:31:fd:
dc:76:25:64:05:17:93:50:e1:37:cb:88:8e:a7:4c:
28:89:57:39:c9:b2:d2:11:87:00:5f:95:f9:ef:66:
fa:15:c4:cf:cc:49:ff:b5:de:9a:6b:90:ec:88:1a:
15:5d:94:c3:bb:8e:2c:d5:5d:49:6a:4f:5c:e3:f9:
47:a5:2e:11:48:a2:f7:27:1f:63:1c:06:90:31:84:
75:03:47:be:3b:6c:bc:bd:b0:fe:07:d0:ff:43:c2:
a6:2e:25:5f:aa:aa:6b:58:80:a6:e5:d9:0b:9a:ad:
1c:3f:c0:d3:01:3a:f4:de:c2:7d:41:e7:83:96:b3:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:80:2D:50:44:CF:58:E8:32:16:14:92:D6:D7:69:3C:48:21:A0:F1
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7c:71:cb:69:31:22:ed:a5:73:ab:f9:fb:b8:e7:52:15:1e:
f2:33:7b:71:1f:92:06:40:4f:7a:b5:23:3d:9e:af:9b:11:fd:
5f:6e:1a:ef:bd:bc:58:db:e8:e3:76:31:37:64:d5:5c:5d:f2:
36:4e:f7:79:23:22:de:c9:bc:77:b1:f6:40:54:68:09:33:3c:
9a:73:f4:00:75:60:b1:d1:c2:89:4e:dc:fe:eb:ca:42:39:eb:
95:4e:38:2a:30:ae:f0:96:4b:d7:85:79:f2:01:4f:af:a9:3a:
a5:a6:05:00:68:99:74:5e:04:ea:78:4c:0e:e9:3e:99:c8:10:
33:c6:3d:ee:cd:12:7e:f6:da:1f:a5:4c:ae:42:21:e8:af:57:
84:57:6f:3d:4f:73:86:e6:8a:e5:f5:fd:70:f4:a6:ee:0a:0b:
5b:cc:7a:e6:54:98:8c:79:b9:14:3d:7f:fe:d5:4d:88:05:fc:
3e:81:3e:9c:78:90:dc:24:6b:9a:0a:17:a6:a1:21:6c:69:17:
2d:04:43:f7:f8:71:43:a3:36:36:ac:f2:76:6f:d7:45:af:2c:
34:cf:23:df:4c:f1:ab:67:1e:54:22:a4:e6:a3:89:fc:35:d8:
50:c1:dc:f5:80:4e:02:40:06:33:17:bd:e6:92:6f:01:ee:8d:
cb:d1:a8:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABplw/xQXoInBdA+P1KJYlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNzlhM2U4NTRmMDEwMTVlOWQwZTAzZTg5ZDgwNzBjYzll
YmNmODkwHhcNMjYwODE0MTkwMTE0WhcNMjYwODE1MTkwMTE0WjAzMTEwLwYDVQQD
EygwOTgwMmQ1MDQ0Y2Y1OGU4MzIxNjE0OTJkNmQ3NjkzYzQ4MjFhMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubSCxb9L6vzNONtxIkTlORP/cM68
VEB/qF14OGXC2lMSmA59y55E20snaXXFmVzlNzvVV+wvkhb55g8UZTefrxSctN42
wpu8uRTsMDbExuyK6mCAmqvDLtKrlKfXIhzae0zl2x2CbLjBPqXUYwI9LOozNV9L
fYUAt7l1Puj8olqJhInGMf3cdiVkBReTUOE3y4iOp0woiVc5ybLSEYcAX5X572b6
FcTPzEn/td6aa5DsiBoVXZTDu44s1V1Jak9c4/lHpS4RSKL3Jx9jHAaQMYR1A0e+
O2y8vbD+B9D/Q8KmLiVfqqprWICm5dkLmq0cP8DTATr03sJ9QeeDlrOsPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmALVBEz1joMhYUktbXaTxIIaDxMB8GA1UdIwQY
MBaAFPJ5o+hU8BAV6dDgPonYBwzJ68+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84MzhkYjItMGM4OC00ZmY0LWI5YmMt
OGJhZTdlOWZkNzVjLzEvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84MzhkYjItMGM4OC00ZmY0LWI5YmMtOGJhZTdlOWZkNzVj
LzEvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3xxy2kx
Iu2lc6v5+7jnUhUe8jN7cR+SBkBPerUjPZ6vmxH9X24a7728WNvo43YxN2TVXF3y
Nk73eSMi3sm8d7H2QFRoCTM8mnP0AHVgsdHCiU7c/uvKQjnrlU44KjCu8JZL14V5
8gFPr6k6paYFAGiZdF4E6nhMDuk+mcgQM8Y97s0SfvbaH6VMrkIh6K9XhFdvPU9z
huaK5fX9cPSm7goLW8x65lSYjHm5FD1//tVNiAX8PoE+nHiQ3CRrmgoXpqEhbGkX
LQRD9/hxQ6M2Nqzydm/XRa8sNM8j30zxq2ceVCKk5qOJ/DXYUMHc9YBOAkAGMxe9
5pJvAe6Ny9Goeg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:42 2026 by rpki-client