Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: I5pYibV8+915WMiu4tlLGKkAvVgXUmFfeq9cq+/n1AU=
Subject key identifier: 2F:8E:13:59:DD:98:43:14:39:F9:0A:6E:E6:5C:B1:E7:8E:DF:9B:96
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 01A001A5FCFA972554D0324F80460F089E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0E70
Signing time: Fri 14 Aug 2026 19:00:50 +0000
Manifest this update: Fri 14 Aug 2026 19:00:50 +0000
Manifest next update: Sat 15 Aug 2026 19:00:50 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: CSXH+IvDdF7Pcj4Scy/Mi9PgWxrbGzOLnClGl4w6F/c=)
2: _3UhzExQEW793JDsh27iQiX2gzM.roa (hash: nUWtF1fCDoH/Q/BMxd3xXb0PCP4p5vb9AuqBRhyl6Ic=)
3: w5-KHcw5iW2dZ4Gu6lDIZSylhAw.roa (hash: Mh4CtHCCAyOEQHT+0GZL5DrmI0KACaziKJcUGyMXvcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:fc:fa:97:25:54:d0:32:4f:80:46:0f:08:9e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Aug 14 19:00:50 2026 GMT
Not After : Aug 15 19:00:50 2026 GMT
Subject: CN=2f8e1359dd98431439f90a6ee65cb1e78edf9b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:01:8c:51:46:3a:1e:54:61:ed:c7:31:0f:
9b:8e:68:e3:e3:1e:6f:a1:95:2c:00:2a:4e:97:62:
ab:7a:d7:74:b8:31:56:cb:53:57:e3:c4:a9:27:cb:
d7:7a:aa:cd:08:c9:31:7b:03:07:dd:7b:ef:90:63:
fd:87:ba:f8:a1:fd:49:05:6c:25:66:c9:a0:45:d0:
5a:f7:af:aa:61:4c:8e:d2:10:be:25:2f:8c:ed:de:
c4:8d:19:69:55:41:cf:b8:eb:38:39:db:8e:18:be:
62:97:3d:1b:92:22:8a:88:c8:6b:ae:9e:0a:8a:b9:
40:c4:2a:a8:d9:1c:29:46:64:48:12:81:2b:17:f9:
8c:c0:3b:42:d8:93:62:22:b2:19:fc:e8:75:06:70:
c7:c1:20:38:ee:22:32:cc:7b:f3:59:5d:80:e9:6e:
6d:d2:7f:b1:ac:6b:b7:23:16:9b:bb:81:41:af:d9:
68:db:3a:11:fa:d8:f8:bd:3c:77:4a:b6:8a:b5:5c:
ad:fa:68:51:99:0f:79:39:5b:3b:f5:99:a2:fb:d3:
53:af:38:33:f1:a8:cf:d9:89:76:f0:9f:46:d8:31:
2f:dd:4c:75:49:04:37:8a:53:e5:19:39:6c:2f:23:
2a:77:94:4f:d7:3c:e4:62:6b:16:74:2f:c3:29:12:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8E:13:59:DD:98:43:14:39:F9:0A:6E:E6:5C:B1:E7:8E:DF:9B:96
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bc:a2:88:e5:ec:ad:a2:5a:f3:44:b4:5b:71:20:2b:e8:77:
6c:3a:de:e7:7f:45:bf:7e:cb:f7:aa:dd:91:18:66:61:7c:d1:
a7:c9:3e:3e:5c:ca:e1:66:40:31:5e:b0:c1:28:2f:14:70:e5:
b1:52:48:71:57:a2:7b:9b:c5:a4:b1:c6:3b:b5:5e:29:ba:f4:
c8:09:6c:fd:83:77:c0:d7:cf:ca:10:eb:c8:74:55:df:14:23:
fe:83:ff:e8:a9:63:9b:f9:65:a2:d9:a2:1b:82:07:2e:4d:9a:
ff:03:fd:13:56:5f:48:49:b7:ed:f8:26:23:66:e7:57:7d:37:
30:60:16:84:d6:c3:7e:f0:19:e0:1f:93:12:9b:e2:12:6e:ef:
12:24:bb:bb:33:24:3c:d1:1c:42:29:97:25:5c:c5:79:69:b9:
79:d6:62:e1:dd:42:12:4d:1d:3f:1f:8b:03:f9:78:3c:e1:7f:
ba:12:f7:ef:0f:b1:32:2d:4b:56:76:72:77:a4:7d:e8:c0:be:
32:80:5d:77:42:c2:34:c6:4b:1c:3a:14:f0:e4:7c:f7:0c:f5:
b8:60:f2:37:0d:df:91:62:ab:09:7e:12:58:94:3f:a8:33:78:
23:85:05:42:23:60:d9:9e:01:fa:88:5c:44:89:68:f1:99:34:
ad:b0:d8:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpfz6lyVU0DJPgEYPCJ5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzcxZGYxNmRkMGI0N2NkMGFmOTcxZjE0ZDFkY2E2ZDgy
MDZiYjEwHhcNMjYwODE0MTkwMDUwWhcNMjYwODE1MTkwMDUwWjAzMTEwLwYDVQQD
EygyZjhlMTM1OWRkOTg0MzE0MzlmOTBhNmVlNjVjYjFlNzhlZGY5Yjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzUBjFFGOh5UYe3HMQ+bjmjj4x5v
oZUsACpOl2Kretd0uDFWy1NX48SpJ8vXeqrNCMkxewMH3XvvkGP9h7r4of1JBWwl
ZsmgRdBa96+qYUyO0hC+JS+M7d7EjRlpVUHPuOs4OduOGL5ilz0bkiKKiMhrrp4K
irlAxCqo2RwpRmRIEoErF/mMwDtC2JNiIrIZ/Oh1BnDHwSA47iIyzHvzWV2A6W5t
0n+xrGu3Ixabu4FBr9lo2zoR+tj4vTx3SraKtVyt+mhRmQ95OVs79Zmi+9NTrzgz
8ajP2Yl28J9G2DEv3Ux1SQQ3ilPlGTlsLyMqd5RP1zzkYmsWdC/DKRJyJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+OE1ndmEMUOfkKbuZcseeO35uWMB8GA1UdIwQY
MBaAFAvHHfFt0LR80K+XHxTR3KbYIGuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2It
NWI0OTNhYTA3MjY4LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2ItNWI0OTNhYTA3MjY4
LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALryiiOXs
raJa80S0W3EgK+h3bDre539Fv37L96rdkRhmYXzRp8k+PlzK4WZAMV6wwSgvFHDl
sVJIcVeie5vFpLHGO7VeKbr0yAls/YN3wNfPyhDryHRV3xQj/oP/6Kljm/llotmi
G4IHLk2a/wP9E1ZfSEm37fgmI2bnV303MGAWhNbDfvAZ4B+TEpviEm7vEiS7uzMk
PNEcQimXJVzFeWm5edZi4d1CEk0dPx+LA/l4POF/uhL37w+xMi1LVnZyd6R96MC+
MoBdd0LCNMZLHDoU8OR89wz1uGDyNw3fkWKrCX4SWJQ/qDN4I4UFQiNg2Z4B+ohc
RIlo8Zk0rbDYOQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:50 2026 by rpki-client