Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier: KYsUxML+U17C2WnRZ0lObt4zjCs7RnJ6EtVYW0Stv6g=
Subject key identifier: 96:6A:F2:FA:75:13:4B:84:D7:8F:14:78:1D:6D:5E:90:0C:C3:FD:72
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 01A15FD62E92296C6E2BD335DF208BA70474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number: 174B
Signing time: Wed 21 Oct 2026 19:00:34 +0000
Manifest this update: Wed 21 Oct 2026 19:00:34 +0000
Manifest next update: Thu 22 Oct 2026 19:00:34 +0000
Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: G2Pa6KTR3ZVvTOWrdvhzaY/SFjDJfMrNkeZNseQpR8Q=)
2: pC6yrC521DUSFdHvnN6nZBgdl4c.roa (hash: z+BhB5WQOVSUH87uyCcKJiZh6jGZu+fv92loh3SKjUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:d6:2e:92:29:6c:6e:2b:d3:35:df:20:8b:a7:04:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: Oct 21 19:00:34 2026 GMT
Not After : Oct 22 19:00:34 2026 GMT
Subject: CN=966af2fa75134b84d78f14781d6d5e900cc3fd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:c9:b2:86:0f:f7:a2:74:0e:68:37:6c:a9:
4d:fe:6f:c7:93:5f:d9:a2:14:c6:87:f8:27:ae:81:
0e:e4:d3:cc:d5:ad:f1:24:e0:f5:aa:26:dd:76:a8:
81:8c:12:c3:5f:18:23:c1:c6:bb:da:1a:1b:dd:de:
13:79:0f:7f:cb:b4:5a:16:17:05:0e:c7:bb:a6:fe:
43:ec:16:fd:59:8d:2a:da:45:59:d5:01:41:d2:33:
bc:54:8e:5b:12:d7:21:3b:dc:af:c9:09:84:09:77:
ff:ab:00:41:60:02:4e:08:ef:85:02:cf:be:ed:16:
24:63:e1:5e:64:65:28:14:6b:ca:de:12:f0:01:40:
9a:3c:29:cb:6f:db:f5:03:9b:cf:b6:03:de:9f:c6:
c5:90:bd:22:e7:3e:fe:00:27:a2:97:54:d4:77:60:
c0:29:7b:a9:dc:48:a1:06:15:38:f4:f3:5f:78:9e:
4a:f7:b8:a6:88:dc:52:67:00:25:f2:65:48:c9:e1:
7d:17:ad:0a:b6:b7:45:c4:48:16:eb:20:95:c1:74:
73:95:73:70:64:e1:70:ea:be:83:08:14:e6:40:0d:
d5:5f:af:ff:cf:c8:03:50:3a:e0:76:66:3e:27:14:
5c:aa:78:c1:fe:18:e7:1d:e4:0a:89:12:5a:c5:7c:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6A:F2:FA:75:13:4B:84:D7:8F:14:78:1D:6D:5E:90:0C:C3:FD:72
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7a:26:e3:6f:bb:9e:79:07:23:cd:d3:54:d2:7c:55:47:4d:
04:d6:c9:40:b9:05:75:f8:bc:58:1f:70:f7:a7:95:b3:79:9d:
b8:fd:b0:3b:12:92:dd:e0:ef:f5:7c:11:b1:86:2b:57:31:6d:
f7:d9:9e:40:70:20:1b:f8:57:2e:62:c7:ca:44:a2:66:8d:7e:
47:56:b4:91:73:c6:87:ac:4e:af:5b:ed:75:63:eb:5e:2c:68:
6e:f0:1d:af:b8:8b:0a:79:f3:83:7c:18:6b:3b:82:11:c7:46:
65:8f:49:d9:e6:c3:bd:45:1b:b1:3a:54:90:30:1f:87:48:41:
00:92:af:db:1a:c3:c9:56:67:91:88:e8:10:13:f2:06:b6:03:
3f:ca:dd:bf:d9:e0:f8:20:6f:bf:09:1d:ae:59:fd:05:a3:52:
d8:10:23:26:ed:3f:2e:77:b9:1d:2d:f3:62:10:60:71:59:9a:
07:be:fc:e2:45:6e:4e:d6:ba:40:e8:8d:e0:e6:d9:50:28:3d:
c5:22:b4:6d:f8:24:23:39:e8:49:76:bd:3e:ba:1f:a6:08:d2:
29:45:53:b2:8d:89:1c:f8:a5:01:77:d4:7a:b4:d6:6b:34:2b:
06:f8:05:74:9d:ed:2d:d6:b9:09:3d:fb:6f:e2:12:29:a2:a9:
be:2e:05:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFf1i6SKWxuK9M13yCLpwR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzU5ZmYxMGMxNTY0NDIxZTk3NDU3M2FjZTFiYTYyMzMz
YjgyYTcwHhcNMjYxMDIxMTkwMDM0WhcNMjYxMDIyMTkwMDM0WjAzMTEwLwYDVQQD
Eyg5NjZhZjJmYTc1MTM0Yjg0ZDc4ZjE0NzgxZDZkNWU5MDBjYzNmZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwTJsoYP96J0Dmg3bKlN/m/Hk1/Z
ohTGh/gnroEO5NPM1a3xJOD1qibddqiBjBLDXxgjwca72hob3d4TeQ9/y7RaFhcF
Dse7pv5D7Bb9WY0q2kVZ1QFB0jO8VI5bEtchO9yvyQmECXf/qwBBYAJOCO+FAs++
7RYkY+FeZGUoFGvK3hLwAUCaPCnLb9v1A5vPtgPen8bFkL0i5z7+ACeil1TUd2DA
KXup3EihBhU49PNfeJ5K97imiNxSZwAl8mVIyeF9F60KtrdFxEgW6yCVwXRzlXNw
ZOFw6r6DCBTmQA3VX6//z8gDUDrgdmY+JxRcqnjB/hjnHeQKiRJaxXyJHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZq8vp1E0uE148UeB1tXpAMw/1yMB8GA1UdIwQY
MBaAFPE1n/EMFWRCHpdFc6zhumIzO4KnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAt
YWI0YmEzMzJmZTE1LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mOGRmZjktNmRhYy00MzEzLTk5ODAtYWI0YmEzMzJmZTE1
LzEvOFRXZjhRd1ZaRUllbDBWenJPRzZZak03Z3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnom42+7
nnkHI83TVNJ8VUdNBNbJQLkFdfi8WB9w96eVs3mduP2wOxKS3eDv9XwRsYYrVzFt
99meQHAgG/hXLmLHykSiZo1+R1a0kXPGh6xOr1vtdWPrXixobvAdr7iLCnnzg3wY
azuCEcdGZY9J2ebDvUUbsTpUkDAfh0hBAJKv2xrDyVZnkYjoEBPyBrYDP8rdv9ng
+CBvvwkdrln9BaNS2BAjJu0/Lne5HS3zYhBgcVmaB7784kVuTta6QOiN4ObZUCg9
xSK0bfgkIznoSXa9ProfpgjSKUVTso2JHPilAXfUerTWazQrBvgFdJ3tLda5CT37
b+ISKaKpvi4FgA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 21:51:59 2026 by rpki-client