Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
File: 8grs7rj8hZw3YvMTcflKAE24zEI.mft (raw, json)
Hash identifier: ++S386Zge9B2SDhpzUDeRQVfswSHH2eiTCz41jO3J+Y=
Subject key identifier: 3C:BE:A8:73:18:35:E8:C5:0C:E5:9E:F8:17:50:6B:25:B9:72:5E:8C
Authority key identifier: F2:0A:EC:EE:B8:FC:85:9C:37:62:F3:13:71:F9:4A:00:4D:B8:CC:42
Certificate issuer: /CN=f20aeceeb8fc859c3762f31371f94a004db8cc42
Certificate serial: 01A0404E5F00A8D5DAAFC0CE0F3E428A21AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
Manifest number: 01DA
Signing time: Wed 26 Aug 2026 23:01:12 +0000
Manifest this update: Wed 26 Aug 2026 23:01:12 +0000
Manifest next update: Thu 27 Aug 2026 23:01:12 +0000
Files and hashes: 1: 8grs7rj8hZw3YvMTcflKAE24zEI.crl (hash: Tp9VKps/oso94DyBi1U0KCOLs2P5K0h3FIPgxeZuweU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:5f:00:a8:d5:da:af:c0:ce:0f:3e:42:8a:21:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20aeceeb8fc859c3762f31371f94a004db8cc42
Validity
Not Before: Aug 26 23:01:12 2026 GMT
Not After : Aug 27 23:01:12 2026 GMT
Subject: CN=3cbea8731835e8c50ce59ef817506b25b9725e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:77:16:81:75:ec:c2:75:18:8c:b4:68:1c:
3d:12:4c:f4:cc:69:10:52:31:9a:4f:19:a1:c7:b0:
1f:87:ec:cc:a6:7a:ec:e1:de:8b:9f:ec:64:26:0f:
e8:89:c5:f4:3f:a2:ce:73:45:6f:7f:eb:96:4e:de:
bb:5a:cd:ba:00:c9:3b:ba:46:c0:95:c4:c2:8e:99:
c3:bc:04:8b:73:50:22:8f:83:88:51:2f:38:dc:66:
5b:95:a8:2c:43:11:fa:4c:db:c9:1a:79:da:48:0b:
74:e9:65:6a:93:17:c8:cd:e3:30:3f:6e:87:c5:72:
fb:93:1f:52:2a:4a:cc:9f:87:ea:0f:d5:53:62:e1:
b3:de:d3:74:2b:e6:35:ce:9e:8b:fc:46:e6:25:2f:
18:df:f3:3e:16:0b:78:ef:3b:df:aa:17:68:9c:84:
b7:cf:de:23:6b:e7:ef:03:1b:3f:57:f0:29:81:0f:
fe:f7:93:0f:0f:a5:8f:58:1b:f3:f3:85:ab:fb:cf:
49:41:b5:ce:00:83:9d:8d:84:8c:ce:88:76:8d:a1:
6d:f9:c5:74:98:0d:62:3e:af:e1:94:74:fa:81:f0:
a1:47:d6:1e:fa:55:e7:8b:e3:2f:69:17:ee:ee:a4:
65:bd:63:13:4c:da:1a:55:ff:9d:06:b2:71:9a:ab:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BE:A8:73:18:35:E8:C5:0C:E5:9E:F8:17:50:6B:25:B9:72:5E:8C
X509v3 Authority Key Identifier:
keyid:F2:0A:EC:EE:B8:FC:85:9C:37:62:F3:13:71:F9:4A:00:4D:B8:CC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ba:ec:a7:c5:19:c1:3f:f7:1c:dc:64:db:c2:ae:fa:93:e3:
8a:11:8b:26:ca:33:c8:53:4c:8e:bc:e3:ec:56:bd:69:35:a8:
ba:b9:34:4e:a0:8b:df:c2:f5:a7:a9:e8:e1:fa:4d:cd:5a:68:
c3:ba:25:91:c8:b6:d2:8e:d4:03:a6:ed:fc:ce:77:5f:26:b5:
49:9b:08:d2:f5:1a:d2:1a:bb:3a:40:63:bb:c6:82:48:1e:b4:
a4:88:88:ec:4d:c0:99:e8:30:b3:2a:2e:3e:ff:73:1f:d0:45:
e7:07:4c:ad:f3:5d:cc:b8:49:f6:24:35:46:88:c0:2c:5f:e7:
40:7c:1c:b0:5b:f2:e0:6f:13:f9:87:32:ed:55:3b:9c:1f:4a:
26:dc:3b:3f:f1:d2:2a:40:f8:b4:ad:42:4c:7a:83:27:ea:ea:
2b:ea:39:12:73:50:d3:3f:2d:25:37:cd:94:13:f9:5a:96:33:
f8:64:85:5e:4d:c6:3e:a5:ec:25:e5:6b:5b:ee:ce:e9:d0:68:
e7:3d:f5:b2:e3:0a:09:22:14:a2:ca:4f:1c:e1:82:0f:79:99:
de:c6:6e:af:34:df:d5:8a:9c:5a:b4:b2:0d:2b:7a:4a:05:d2:
c5:0c:7b:fa:5d:0c:3a:ba:88:43:58:38:be:bf:74:a9:4d:bb:
b6:09:17:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATl8AqNXar8DODz5CiiGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMGFlY2VlYjhmYzg1OWMzNzYyZjMxMzcxZjk0YTAwNGRi
OGNjNDIwHhcNMjYwODI2MjMwMTEyWhcNMjYwODI3MjMwMTEyWjAzMTEwLwYDVQQD
EygzY2JlYTg3MzE4MzVlOGM1MGNlNTllZjgxNzUwNmIyNWI5NzI1ZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDJ3FoF17MJ1GIy0aBw9Ekz0zGkQ
UjGaTxmhx7Afh+zMpnrs4d6Ln+xkJg/oicX0P6LOc0Vvf+uWTt67Ws26AMk7ukbA
lcTCjpnDvASLc1Aij4OIUS843GZblagsQxH6TNvJGnnaSAt06WVqkxfIzeMwP26H
xXL7kx9SKkrMn4fqD9VTYuGz3tN0K+Y1zp6L/EbmJS8Y3/M+Fgt47zvfqhdonIS3
z94ja+fvAxs/V/ApgQ/+95MPD6WPWBvz84Wr+89JQbXOAIOdjYSMzoh2jaFt+cV0
mA1iPq/hlHT6gfChR9Ye+lXni+MvaRfu7qRlvWMTTNoaVf+dBrJxmquaMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDy+qHMYNejFDOWe+BdQayW5cl6MMB8GA1UdIwQY
MBaAFPIK7O64/IWcN2LzE3H5SgBNuMxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdyczdyajhoWnczWXZNVGNmbEtBRTI0ekVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xMDYyZTctNDM1ZC00YTkxLWExZTQt
YmQ2ZmFmMDIyYmY2LzEvOGdyczdyajhoWnczWXZNVGNmbEtBRTI0ekVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8xMDYyZTctNDM1ZC00YTkxLWExZTQtYmQ2ZmFmMDIyYmY2
LzEvOGdyczdyajhoWnczWXZNVGNmbEtBRTI0ekVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLrsp8UZ
wT/3HNxk28Ku+pPjihGLJsozyFNMjrzj7Fa9aTWourk0TqCL38L1p6no4fpNzVpo
w7olkci20o7UA6bt/M53Xya1SZsI0vUa0hq7OkBju8aCSB60pIiI7E3Amegwsyou
Pv9zH9BF5wdMrfNdzLhJ9iQ1RojALF/nQHwcsFvy4G8T+Ycy7VU7nB9KJtw7P/HS
KkD4tK1CTHqDJ+rqK+o5EnNQ0z8tJTfNlBP5WpYz+GSFXk3GPqXsJeVrW+7O6dBo
5z31suMKCSIUospPHOGCD3mZ3sZurzTf1YqcWrSyDSt6SgXSxQx7+l0MOrqIQ1g4
vr90qU27tgkXzg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:36 2026 by rpki-client