Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: UWmMCLZrKOj+oNe+PF0/6iNDaRdxgMLvskNFfjbwNM0=
Subject key identifier: 18:62:77:3C:EC:4D:13:51:47:F1:B2:10:DB:23:68:E7:1C:F6:57:7B
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 01A1871B14315FD16DED626A17AC761AA1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 0B8B
Signing time: Thu 29 Oct 2026 10:01:01 +0000
Manifest this update: Thu 29 Oct 2026 10:01:01 +0000
Manifest next update: Fri 30 Oct 2026 10:01:01 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: 6t+1OXzRF9Or8Th8y7VgnZCrHUIyExIw32N3W7/pBLE=)
2: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (hash: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ=)
3: iLu5B9aeu4NSBPHA9ivJ0i8Z4AA.roa (hash: acJKMRQ5Omks2WW0pWsL2TS7UwZ6+sYIZuHt+6L6NH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1b:14:31:5f:d1:6d:ed:62:6a:17:ac:76:1a:a1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Oct 29 10:01:01 2026 GMT
Not After : Oct 30 10:01:01 2026 GMT
Subject: CN=1862773cec4d135147f1b210db2368e71cf6577b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:71:a8:3a:13:7e:bb:61:5b:c5:46:bd:59:
95:b3:12:e5:9b:ea:64:95:f8:9f:09:16:44:bb:be:
0d:b5:29:0a:6b:8e:1f:dc:0c:38:22:7a:a5:11:2c:
b4:b0:3f:77:68:84:ec:6f:89:98:cc:65:f4:ec:c9:
0b:95:2d:98:ac:62:33:8b:cb:01:9b:09:52:4a:31:
69:df:c3:0d:e0:62:a3:dc:1f:8c:c6:a5:60:54:4d:
6b:a5:6a:bb:80:d9:de:75:e2:eb:4f:3d:75:e2:33:
9b:21:80:f7:8b:c2:ec:f0:9d:7d:0a:71:78:11:93:
6e:7c:cd:e3:19:cd:9f:90:7b:55:58:a5:3d:c7:2c:
c2:77:ff:42:a0:d3:60:3f:15:74:07:ff:a3:bf:af:
62:52:ab:94:83:0f:4f:66:58:48:63:38:2f:32:c9:
6e:99:bb:3d:35:1c:e9:1a:42:a0:c3:13:da:be:79:
6d:64:73:49:30:36:dc:d1:b5:fc:e7:d4:37:88:57:
d3:d7:c1:cd:8c:5b:af:1a:2e:40:51:75:26:c1:c5:
2b:91:4b:03:29:d8:b6:15:97:8f:d8:cb:ba:2b:32:
d2:5e:f5:e1:20:0d:1b:26:41:3b:bc:23:fc:a3:89:
dd:94:06:83:3d:79:3a:88:1c:99:56:d9:1d:66:87:
66:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:62:77:3C:EC:4D:13:51:47:F1:B2:10:DB:23:68:E7:1C:F6:57:7B
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c7:0c:25:99:0e:90:3c:8a:06:ae:64:be:fa:a4:5b:09:e9:
8f:56:e8:b0:0d:2c:f0:f7:aa:c4:54:fb:dc:d3:24:ce:d4:2d:
f4:82:d7:10:0e:07:59:6f:07:74:5a:38:e2:7b:b5:63:bb:de:
df:7a:09:09:8f:0a:60:6d:fa:e4:a2:1e:2e:aa:d5:a2:8d:58:
ab:42:07:72:d5:d3:ac:d5:b3:ba:fc:a5:83:e2:01:eb:03:c7:
4d:45:ad:53:43:a3:a4:59:68:83:2c:b7:f1:23:3a:df:b7:c5:
01:a9:78:09:e8:3e:b3:39:c0:59:cc:32:89:98:9f:4e:3e:d9:
e8:cd:02:f8:22:25:94:3a:39:3f:bd:d2:f4:ad:59:e0:33:dd:
6d:0b:34:65:04:51:d6:1e:fa:dd:46:2b:61:ab:84:c3:ee:90:
ed:14:5f:44:4a:a4:92:66:fe:c2:67:46:53:7c:4c:3e:0b:3a:
ba:71:da:48:9f:37:c5:cb:60:0c:32:80:f2:13:aa:5c:fa:6e:
cd:6b:86:58:0c:0b:2b:13:59:63:96:82:97:e5:15:87:a3:d2:
17:d5:b4:3b:2e:52:4b:ab:c6:01:9e:93:42:10:37:97:c9:3f:
9c:f0:22:95:9f:2c:01:3b:2b:28:da:35:38:3a:d4:4c:2b:3c:
b2:bd:f8:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGHGxQxX9Ft7WJqF6x2GqGiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWQxYzA1YWJkNzE0YzY3YzMyOTFlMDEwZDIxYzcwYTM1
ZGQ1N2UwHhcNMjYxMDI5MTAwMTAxWhcNMjYxMDMwMTAwMTAxWjAzMTEwLwYDVQQD
EygxODYyNzczY2VjNGQxMzUxNDdmMWIyMTBkYjIzNjhlNzFjZjY1NzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp75xqDoTfrthW8VGvVmVsxLlm+pk
lfifCRZEu74NtSkKa44f3Aw4InqlESy0sD93aITsb4mYzGX07MkLlS2YrGIzi8sB
mwlSSjFp38MN4GKj3B+MxqVgVE1rpWq7gNnedeLrTz114jObIYD3i8Ls8J19CnF4
EZNufM3jGc2fkHtVWKU9xyzCd/9CoNNgPxV0B/+jv69iUquUgw9PZlhIYzgvMslu
mbs9NRzpGkKgwxPavnltZHNJMDbc0bX859Q3iFfT18HNjFuvGi5AUXUmwcUrkUsD
Kdi2FZeP2Mu6KzLSXvXhIA0bJkE7vCP8o4ndlAaDPXk6iByZVtkdZodmnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhidzzsTRNRR/GyENsjaOcc9ld7MB8GA1UdIwQY
MBaAFPMdHAWr1xTGfDKR4BDSHHCjXdV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMt
NTU1OWFjNDEwYWNlLzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMtNTU1OWFjNDEwYWNl
LzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8cMJZkO
kDyKBq5kvvqkWwnpj1bosA0s8PeqxFT73NMkztQt9ILXEA4HWW8HdFo44nu1Y7ve
33oJCY8KYG365KIeLqrVoo1Yq0IHctXTrNWzuvylg+IB6wPHTUWtU0OjpFlogyy3
8SM637fFAal4Ceg+sznAWcwyiZifTj7Z6M0C+CIllDo5P73S9K1Z4DPdbQs0ZQRR
1h763UYrYauEw+6Q7RRfREqkkmb+wmdGU3xMPgs6unHaSJ83xctgDDKA8hOqXPpu
zWuGWAwLKxNZY5aCl+UVh6PSF9W0Oy5SS6vGAZ6TQhA3l8k/nPAilZ8sATsrKNo1
ODrUTCs8sr340A==
-----END CERTIFICATE-----
Generated at Thu Oct 29 17:05:45 2026 by rpki-client