Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: hRgfAb2lhWuPJwZYvJYXj0Ay/eZDpHBGQJZHjRXJIpk=
Subject key identifier: 9F:C6:0B:91:D2:57:43:2A:64:21:7F:73:32:50:9E:EA:D1:03:9F:0F
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 01A08E69F7CD414AA255928F97945F0BA5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 1A4D
Signing time: Fri 11 Sep 2026 03:01:44 +0000
Manifest this update: Fri 11 Sep 2026 03:01:44 +0000
Manifest next update: Sat 12 Sep 2026 03:01:44 +0000
Files and hashes: 1: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (hash: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU=)
2: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: drXOivrITpdpcV9RllkKSypYqHDphaun2DUVzGDcRdY=)
3: oGOv0O1ixZRdG92zwrspojU0VwY.roa (hash: IjgFyfvL9U08ADh5P0ZxxkAaF6oStHyHq7QR+Yuo9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:69:f7:cd:41:4a:a2:55:92:8f:97:94:5f:0b:a5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Sep 11 03:01:44 2026 GMT
Not After : Sep 12 03:01:44 2026 GMT
Subject: CN=9fc60b91d257432a64217f7332509eead1039f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:23:af:5d:30:f2:65:df:8a:dd:0c:c5:37:
c8:50:07:ce:ec:e8:c2:2a:84:8f:0c:87:70:b6:de:
81:0e:ee:ca:8f:d7:13:33:cf:6c:30:fe:54:57:8b:
b1:9b:96:0a:74:fb:0a:6e:d8:82:61:ce:ee:e2:c5:
80:98:2f:b6:2a:27:6f:97:95:be:5f:a0:c5:4c:ec:
9c:c5:53:6e:33:d8:0a:43:f4:18:4b:0e:3e:0b:8f:
d3:6b:c0:1e:0c:18:cc:4a:53:5b:d1:2a:4a:22:82:
b9:f0:9e:81:1a:a4:97:2a:15:39:4e:e7:65:83:d3:
bc:66:02:9e:21:48:2a:52:03:4b:cd:8d:27:3c:4e:
bf:7b:f1:56:db:0a:56:d9:aa:4a:69:b0:aa:dc:18:
ed:60:c6:f4:bc:5a:97:21:6a:ab:88:08:f9:01:34:
cf:93:07:7e:9c:9c:9d:78:01:0d:f8:19:66:b3:c8:
1b:47:4c:be:79:2e:45:4f:76:98:6a:0d:e4:66:41:
68:22:89:b8:1f:69:1f:b9:b1:ec:e5:db:84:88:b0:
1f:b9:31:d8:4e:44:c5:7f:c4:f3:10:23:8c:57:d0:
28:2e:77:da:26:f4:7a:94:c4:6c:0f:bb:0a:de:40:
0d:e9:5d:ef:1b:51:8b:41:da:13:b4:ad:52:e0:e6:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C6:0B:91:D2:57:43:2A:64:21:7F:73:32:50:9E:EA:D1:03:9F:0F
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:89:77:fc:0f:74:bb:f6:83:e8:05:6e:c9:fa:29:1e:1d:9c:
10:2c:23:87:94:6f:f3:d6:d0:a1:04:81:67:62:4e:d0:93:b1:
e0:96:e0:bc:63:54:b7:2d:f2:df:32:af:7f:9a:21:51:b9:3d:
58:41:e9:0f:8c:c4:8e:ae:71:79:ca:f7:1e:7f:b2:3e:1f:f6:
f3:2e:c1:fe:ae:9b:86:b6:a5:9d:5b:1d:0b:61:14:13:cf:ba:
f4:d9:dd:fc:c9:f0:a8:64:c9:ea:04:c3:27:e6:e9:ee:b7:0b:
46:0e:79:02:08:8b:1a:92:0d:48:95:d2:67:65:a6:2b:dd:e4:
61:17:5a:5f:1b:40:8b:7c:21:58:37:f0:0d:41:cd:e8:63:cf:
cc:71:07:1f:4d:ef:77:24:78:84:8e:7b:d7:bf:27:f2:e9:ce:
fd:df:93:3b:f3:f6:6d:97:32:9a:b5:31:25:a8:5f:fe:38:7b:
89:47:fe:62:8d:96:55:0d:a3:24:80:c7:7c:9a:67:06:48:2f:
08:5c:2d:d1:ba:6f:4c:d0:2c:34:61:b8:07:3b:99:de:de:95:
98:10:fe:bb:99:0c:92:bc:ef:f3:74:61:af:7b:3e:81:08:8d:
a0:91:c0:76:c6:94:17:42:59:d9:da:bd:16:7a:e1:ce:b3:41:
8d:b9:46:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCOaffNQUqiVZKPl5RfC6XaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmY2E5OTdkMzkwY2Q2ZTQ2ZTAxMjhlNTBkNzBiODRlN2Fi
Njc0MGYwHhcNMjYwOTExMDMwMTQ0WhcNMjYwOTEyMDMwMTQ0WjAzMTEwLwYDVQQD
Eyg5ZmM2MGI5MWQyNTc0MzJhNjQyMTdmNzMzMjUwOWVlYWQxMDM5ZjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Yjr10w8mXfit0MxTfIUAfO7OjC
KoSPDIdwtt6BDu7Kj9cTM89sMP5UV4uxm5YKdPsKbtiCYc7u4sWAmC+2Kidvl5W+
X6DFTOycxVNuM9gKQ/QYSw4+C4/Ta8AeDBjMSlNb0SpKIoK58J6BGqSXKhU5Tudl
g9O8ZgKeIUgqUgNLzY0nPE6/e/FW2wpW2apKabCq3BjtYMb0vFqXIWqriAj5ATTP
kwd+nJydeAEN+Blms8gbR0y+eS5FT3aYag3kZkFoIom4H2kfubHs5duEiLAfuTHY
TkTFf8TzECOMV9AoLnfaJvR6lMRsD7sK3kAN6V3vG1GLQdoTtK1S4OZnsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/GC5HSV0MqZCF/czJQnurRA58PMB8GA1UdIwQY
MBaAFP/KmX05DNbkbgEo5Q1wuE56tnQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTkt
ODE5YjdhN2VjNDM0LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTktODE5YjdhN2VjNDM0
LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYl3/A90
u/aD6AVuyfopHh2cECwjh5Rv89bQoQSBZ2JO0JOx4JbgvGNUty3y3zKvf5ohUbk9
WEHpD4zEjq5xecr3Hn+yPh/28y7B/q6bhralnVsdC2EUE8+69Nnd/MnwqGTJ6gTD
J+bp7rcLRg55AgiLGpINSJXSZ2WmK93kYRdaXxtAi3whWDfwDUHN6GPPzHEHH03v
dyR4hI57178n8unO/d+TO/P2bZcymrUxJahf/jh7iUf+Yo2WVQ2jJIDHfJpnBkgv
CFwt0bpvTNAsNGG4BzuZ3t6VmBD+u5kMkrzv83Rhr3s+gQiNoJHAdsaUF0JZ2dq9
FnrhzrNBjblGTQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:15 2026 by rpki-client