Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: JqN/2fxZS5oRK4xsLveqXR1EDoRFsLWGotkgAvBXVLc=
Subject key identifier: 1F:EE:11:9D:6B:C1:2F:C0:2C:A8:D3:B3:8F:B7:95:AE:F5:E6:E0:AC
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 01A163EAD18ECB4A76CE7116A4B4906CFF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 1415
Signing time: Thu 22 Oct 2026 14:01:35 +0000
Manifest this update: Thu 22 Oct 2026 14:01:35 +0000
Manifest next update: Fri 23 Oct 2026 14:01:35 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: VSeUR7bELzTvydSpjV6eOim35TG4KC7XsJ+VzejJE3U=)
2: NqvF_ewz1u5-ZwyZsvZfVCcv9eM.roa (hash: XSYe/oEdzIZhvEhSL0EIgTMEviLDbp4F9Od9G/pHsq4=)
3: RBXbDndLRayTNoddQBWUejwx-wI.roa (hash: fhavU3Dt7X4ridK/2PshYap/5RK0EYTK4ZX4zuqJn9E=)
4: kfIkh8JRl0CLg8N2X34fKzfAAIY.roa (hash: LNo3ChQs7isxQdfvX/1Vp1a9WnepBnzSUSjWncB8U/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:ea:d1:8e:cb:4a:76:ce:71:16:a4:b4:90:6c:ff:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Oct 22 14:01:35 2026 GMT
Not After : Oct 23 14:01:35 2026 GMT
Subject: CN=1fee119d6bc12fc02ca8d3b38fb795aef5e6e0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:62:34:78:76:99:73:7b:ea:5e:08:24:8c:
21:f9:8c:1e:e0:49:48:5d:2a:d6:ed:8d:ce:44:d9:
7e:e7:5c:d6:da:70:f1:ab:d0:8e:71:e9:38:4e:5e:
32:ce:b4:68:77:ec:58:e1:c8:e1:60:17:0d:e5:01:
c0:f2:9c:c6:82:bf:9c:20:97:9f:f9:27:af:f5:eb:
44:68:21:3f:60:e9:36:63:9f:3c:0c:c7:bd:45:46:
06:f6:4a:3f:20:b3:0f:b4:df:7f:8b:76:b9:6f:73:
72:8c:74:39:cd:9d:0b:9e:93:cd:65:d7:ab:dc:bb:
77:83:09:08:36:da:fa:fa:c9:86:b2:0d:ba:97:3d:
28:b9:66:35:f8:f8:cf:17:a3:9f:ff:c1:be:b0:49:
ad:d4:76:17:f5:f2:2d:ea:4f:a3:63:d7:d2:6e:24:
d6:15:82:a6:e5:d7:92:6c:7f:b6:bd:d4:85:30:38:
68:f9:07:de:81:34:7b:b7:f8:ff:de:bb:5f:b9:f8:
61:4e:42:af:2c:8c:a2:6b:8a:47:88:34:44:67:a5:
ca:27:4c:56:92:ae:5d:28:d0:03:b8:3d:99:46:d8:
24:22:45:91:01:ee:df:f2:ef:bb:3d:25:8c:c7:23:
9a:f4:5d:30:7a:5d:30:f3:50:3f:dc:99:1e:53:b7:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EE:11:9D:6B:C1:2F:C0:2C:A8:D3:B3:8F:B7:95:AE:F5:E6:E0:AC
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:42:fd:ad:e5:29:b4:b7:04:13:77:fd:2d:cc:34:a4:a7:b4:
99:13:85:f6:cf:79:9c:2e:18:a9:8f:fe:05:46:7b:8f:0a:22:
db:c0:ce:d9:f8:f8:76:40:96:58:01:cb:d8:85:6c:ee:3f:00:
1e:48:ff:15:dc:3e:6b:6f:76:8c:cb:ff:06:9d:9a:6c:37:06:
bd:08:96:e9:45:c9:39:4e:01:c6:e7:81:f9:33:bb:a1:ba:bf:
c5:f2:a4:71:bb:67:01:e1:39:3f:49:aa:a7:40:ee:5b:fd:0d:
84:05:0d:81:15:0e:b9:32:f4:6a:41:ab:2e:9a:b1:30:fa:d7:
ad:fd:b2:c6:a4:e3:96:ea:2b:02:37:62:ce:f8:79:39:28:29:
e0:c4:05:4e:56:23:64:43:69:c8:50:84:5a:23:33:44:c4:af:
aa:cb:5a:86:60:6c:55:39:0e:be:b9:6b:e7:87:f0:6c:7b:86:
4f:e8:06:4c:57:2d:eb:c7:f8:74:ac:26:3e:34:5f:4f:60:07:
b4:5b:e6:2c:a8:96:86:7e:f7:5f:e3:83:d5:b3:06:3b:5a:6e:
9c:c1:e6:e0:6b:e0:09:6d:f3:6a:83:40:ff:31:30:cf:50:ff:
9d:58:38:a3:84:8b:c9:07:b2:fe:e5:dd:eb:bc:8a:d9:ef:2e:
d1:25:89:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFj6tGOy0p2znEWpLSQbP9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZGYyNDVlYWQ5OTgwZDJiMzk1MzM3ODJmNjVkNzU2NmQw
NDYyZDEwHhcNMjYxMDIyMTQwMTM1WhcNMjYxMDIzMTQwMTM1WjAzMTEwLwYDVQQD
EygxZmVlMTE5ZDZiYzEyZmMwMmNhOGQzYjM4ZmI3OTVhZWY1ZTZlMGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWtiNHh2mXN76l4IJIwh+Ywe4ElI
XSrW7Y3ORNl+51zW2nDxq9COcek4Tl4yzrRod+xY4cjhYBcN5QHA8pzGgr+cIJef
+Sev9etEaCE/YOk2Y588DMe9RUYG9ko/ILMPtN9/i3a5b3NyjHQ5zZ0LnpPNZder
3Lt3gwkINtr6+smGsg26lz0ouWY1+PjPF6Of/8G+sEmt1HYX9fIt6k+jY9fSbiTW
FYKm5deSbH+2vdSFMDho+QfegTR7t/j/3rtfufhhTkKvLIyia4pHiDREZ6XKJ0xW
kq5dKNADuD2ZRtgkIkWRAe7f8u+7PSWMxyOa9F0wel0w81A/3JkeU7cwDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/uEZ1rwS/ALKjTs4+3la715uCsMB8GA1UdIwQY
MBaAFCHfJF6tmYDSs5UzeC9l11ZtBGLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQt
MGVjNTIzNWQ0ZTlmLzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQtMGVjNTIzNWQ0ZTlm
LzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkL9reUp
tLcEE3f9Lcw0pKe0mROF9s95nC4YqY/+BUZ7jwoi28DO2fj4dkCWWAHL2IVs7j8A
Hkj/Fdw+a292jMv/Bp2abDcGvQiW6UXJOU4BxueB+TO7obq/xfKkcbtnAeE5P0mq
p0DuW/0NhAUNgRUOuTL0akGrLpqxMPrXrf2yxqTjluorAjdizvh5OSgp4MQFTlYj
ZENpyFCEWiMzRMSvqstahmBsVTkOvrlr54fwbHuGT+gGTFct68f4dKwmPjRfT2AH
tFvmLKiWhn73X+OD1bMGO1punMHm4GvgCW3zaoNA/zEwz1D/nVg4o4SLyQey/uXd
67yK2e8u0SWJDA==
-----END CERTIFICATE-----
Generated at Thu Oct 22 16:48:15 2026 by rpki-client