Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
File: 8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft (raw, json)
Hash identifier: Bxrzkh3WagA5q3eJp5S4dkovozueltGqWKMbs1ivlR8=
Subject key identifier: 8D:A1:98:B4:0A:54:83:FC:2A:17:3E:D4:9C:81:1F:43:F5:69:C3:0E
Authority key identifier: F0:19:8D:5F:BD:25:23:E2:2D:B8:2F:10:C3:DA:37:A9:43:5B:6C:BB
Certificate issuer: /CN=f0198d5fbd2523e22db82f10c3da37a9435b6cbb
Certificate serial: 01A16C7FD800A6105334EC4646FFE262B27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
Manifest number: 0136
Signing time: Sat 24 Oct 2026 06:01:20 +0000
Manifest this update: Sat 24 Oct 2026 06:01:20 +0000
Manifest next update: Sun 25 Oct 2026 06:01:20 +0000
Files and hashes: 1: 8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl (hash: aw8Owb9uIWXKxW+QKrdlhdndSoGPZv0+aV/Rog5AAIc=)
2: f85ANWeKKEbi4pK19Z060OvY_XI.roa (hash: qV+HKaGs2anI4Q/Iy3DcGeZYfOs1cg3GI50On0iw4rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:7f:d8:00:a6:10:53:34:ec:46:46:ff:e2:62:b2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0198d5fbd2523e22db82f10c3da37a9435b6cbb
Validity
Not Before: Oct 24 06:01:20 2026 GMT
Not After : Oct 25 06:01:20 2026 GMT
Subject: CN=8da198b40a5483fc2a173ed49c811f43f569c30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:55:db:12:b3:c1:43:78:93:72:17:9e:0f:
a4:60:a7:f6:28:71:12:77:c2:0f:26:06:41:1d:15:
14:f2:67:38:12:50:16:c9:fd:1e:94:cc:06:b1:e9:
cf:74:21:55:1b:f2:36:4a:4b:87:0f:fc:e2:d9:02:
3f:11:b6:97:de:13:6d:ff:71:01:2d:55:3f:2c:4e:
2c:9f:d5:4c:92:1b:1a:f2:28:44:80:67:51:d9:dd:
9b:e4:b7:77:2f:f4:a8:db:f3:5d:19:f4:85:2d:a1:
4b:26:05:c0:22:cc:2b:0b:c4:b5:e5:10:be:9b:56:
35:1f:c0:33:48:e4:e1:06:4e:72:bb:c1:67:90:11:
07:2e:e9:20:6e:35:26:31:bc:3f:b0:b5:02:74:16:
26:6d:71:02:ea:60:a5:df:19:d4:74:c5:23:e2:3d:
30:4c:70:6a:15:0c:a0:ee:23:cf:44:14:23:e5:cd:
fa:ed:68:b5:8d:81:8b:f7:f9:2b:3e:c9:45:09:d4:
39:f8:c0:e8:b9:a6:d1:00:b2:3b:e9:fa:ff:21:30:
9b:14:a8:16:39:f6:eb:36:a3:06:7f:bc:15:19:cd:
02:29:b9:a3:8a:5a:2f:c7:a6:a4:75:82:08:4b:ea:
9f:6d:b1:9a:ab:08:11:d2:22:b4:f0:95:9d:b9:5d:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A1:98:B4:0A:54:83:FC:2A:17:3E:D4:9C:81:1F:43:F5:69:C3:0E
X509v3 Authority Key Identifier:
keyid:F0:19:8D:5F:BD:25:23:E2:2D:B8:2F:10:C3:DA:37:A9:43:5B:6C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c5:6d:5b:a6:04:a3:43:f7:26:c1:f3:4e:25:2f:1a:3c:ba:
ec:ac:8c:eb:7f:88:fe:4a:f4:a3:e7:54:89:78:7f:3e:a9:2a:
be:88:7d:40:5b:27:64:51:2d:52:e3:f2:52:00:df:64:7d:c5:
1d:4b:97:64:a7:89:f3:8b:c0:f4:e8:88:96:0f:e6:0a:b8:ba:
02:99:3d:4e:e9:52:3a:2b:c2:45:a7:6d:42:c5:b8:4e:88:fb:
b4:21:d1:cd:1f:2a:01:b5:87:7d:2b:cd:76:45:4c:68:f9:14:
1c:25:b6:af:34:ac:04:99:65:fe:72:e3:88:02:04:ca:8f:5f:
68:c8:76:99:85:74:37:a3:ed:2d:94:8f:62:0b:a2:a1:3c:78:
43:f2:53:73:b5:2b:dd:49:f0:9f:94:70:40:8e:23:d4:9a:0e:
42:7a:d3:1e:88:7e:a3:d8:5a:8c:ec:37:5e:9d:cf:55:58:f9:
de:bd:79:6c:d8:12:9a:19:bd:d4:a3:6c:dc:44:67:63:8b:d4:
de:7d:64:f8:bd:1a:11:68:35:49:19:54:d3:70:92:e6:6c:a7:
7c:56:23:31:0e:4a:37:89:0a:ea:84:6e:0c:dc:66:ab:bb:3c:
3d:10:8e:9c:3d:ab:9a:48:60:f5:77:36:5a:93:cb:49:1c:35:
f3:32:3c:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFsf9gAphBTNOxGRv/iYrJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMTk4ZDVmYmQyNTIzZTIyZGI4MmYxMGMzZGEzN2E5NDM1
YjZjYmIwHhcNMjYxMDI0MDYwMTIwWhcNMjYxMDI1MDYwMTIwWjAzMTEwLwYDVQQD
Eyg4ZGExOThiNDBhNTQ4M2ZjMmExNzNlZDQ5YzgxMWY0M2Y1NjljMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug5V2xKzwUN4k3IXng+kYKf2KHES
d8IPJgZBHRUU8mc4ElAWyf0elMwGsenPdCFVG/I2SkuHD/zi2QI/EbaX3hNt/3EB
LVU/LE4sn9VMkhsa8ihEgGdR2d2b5Ld3L/So2/NdGfSFLaFLJgXAIswrC8S15RC+
m1Y1H8AzSOThBk5yu8FnkBEHLukgbjUmMbw/sLUCdBYmbXEC6mCl3xnUdMUj4j0w
THBqFQyg7iPPRBQj5c367Wi1jYGL9/krPslFCdQ5+MDouabRALI76fr/ITCbFKgW
OfbrNqMGf7wVGc0CKbmjilovx6akdYIIS+qfbbGaqwgR0iK08JWduV2QnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2hmLQKVIP8Khc+1JyBH0P1acMOMB8GA1UdIwQY
MBaAFPAZjV+9JSPiLbgvEMPaN6lDW2y7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJtTlg3MGxJLUl0dUM4UXc5bzNxVU5iYkxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NmEwMDYtOTE5Zi00ODdjLTkzMTYt
MGJiNmE4M2Y5ZjQwLzEvOEJtTlg3MGxJLUl0dUM4UXc5bzNxVU5iYkxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81NmEwMDYtOTE5Zi00ODdjLTkzMTYtMGJiNmE4M2Y5ZjQw
LzEvOEJtTlg3MGxJLUl0dUM4UXc5bzNxVU5iYkxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8VtW6YE
o0P3JsHzTiUvGjy67KyM63+I/kr0o+dUiXh/Pqkqvoh9QFsnZFEtUuPyUgDfZH3F
HUuXZKeJ84vA9OiIlg/mCri6Apk9TulSOivCRadtQsW4Toj7tCHRzR8qAbWHfSvN
dkVMaPkUHCW2rzSsBJll/nLjiAIEyo9faMh2mYV0N6PtLZSPYguioTx4Q/JTc7Ur
3Unwn5RwQI4j1JoOQnrTHoh+o9hajOw3Xp3PVVj53r15bNgSmhm91KNs3ERnY4vU
3n1k+L0aEWg1SRlU03CS5mynfFYjMQ5KN4kK6oRuDNxmq7s8PRCOnD2rmkhg9Xc2
WpPLSRw18zI8yw==
-----END CERTIFICATE-----
Generated at Sat Oct 24 09:28:05 2026 by rpki-client