Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: BISwOJ87ol7dHjYO+31uFW5k0r3A6gg4stbPKb4CF8w=
Subject key identifier: 98:28:3D:6A:C2:27:DF:5A:77:BB:8F:2C:FF:0C:06:29:AB:2B:AE:01
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 019DCFE36FAC8766E88B27FC896CA88937A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0EE4
Signing time: Mon 27 Apr 2026 17:01:22 +0000
Manifest this update: Mon 27 Apr 2026 17:01:22 +0000
Manifest next update: Tue 28 Apr 2026 17:01:22 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: muvdMLWWJoabPMhzWQHTScWmTem6EqzAfUjhBEu0KYM=)
2: EKzVr1AvNpYiprsqEkvQMIL5W4E.asa (hash: Ipa5Hr4X/R8wDhVGPsZEgzWXdPPvkLWg6IkVPIMaQqY=)
3: aW0GLfMs8RiqQkgroqb6Dpcu-TM.roa (hash: UsXuprIqiJrTmGsZFEzdkex7OcaYkNomgnQMK988aG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:6f:ac:87:66:e8:8b:27:fc:89:6c:a8:89:37:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Apr 27 17:01:22 2026 GMT
Not After : Apr 28 17:01:22 2026 GMT
Subject: CN=98283d6ac227df5a77bb8f2cff0c0629ab2bae01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a1:f2:ad:3e:c5:41:07:b4:8b:72:9c:41:93:
af:21:e7:7f:80:27:d4:ac:f4:4f:8f:64:c9:b8:05:
00:97:57:29:53:67:ba:1a:92:2b:9f:f5:c7:f7:f7:
e7:2e:be:ef:07:8e:54:ba:c5:a6:fe:f3:27:f5:dc:
cd:ad:8e:7a:78:a5:7b:e7:46:0e:9c:b7:8d:2b:55:
9e:fb:e6:db:ce:c2:5a:57:25:69:2a:1b:f2:e8:30:
45:1a:4d:c8:2b:98:97:a6:bc:39:91:9f:e4:2f:6f:
76:d5:24:ec:67:d0:47:a6:f8:61:85:75:67:4a:11:
53:10:05:a7:2a:12:0d:8d:d7:dd:6e:e5:08:ce:d8:
b5:f0:2d:ca:8c:b8:8b:85:cb:7a:7e:c7:0b:af:47:
4c:2b:2f:f2:a7:c9:21:bb:3b:84:ee:1e:5f:e3:0a:
f1:eb:3d:87:ae:28:9d:b9:9d:d9:03:b7:c9:50:65:
4c:73:a0:32:63:2c:e4:18:2d:a5:62:e5:ae:45:6f:
58:b7:a6:44:52:d7:52:38:23:c5:c6:d9:39:8d:86:
db:02:e6:04:f9:21:b3:94:01:30:c5:46:2d:80:24:
a5:6d:f0:88:65:7b:28:93:02:89:f5:13:0f:f3:59:
a2:dd:33:9f:8f:c4:c0:75:28:34:0b:a9:12:84:e9:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:28:3D:6A:C2:27:DF:5A:77:BB:8F:2C:FF:0C:06:29:AB:2B:AE:01
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b5:d5:cd:e8:d1:36:ac:81:b0:38:0a:c9:2f:10:9b:84:53:
cf:c6:71:2d:28:fd:1b:2a:82:56:08:a5:c1:d5:ef:1e:bf:23:
71:15:e5:92:fd:df:7f:14:01:59:f3:81:01:71:33:28:1c:d7:
78:f7:f2:e5:0f:1e:ff:92:77:46:c2:80:1b:06:58:5d:a9:82:
a1:0d:3d:e1:cc:ae:f3:c5:f1:87:22:5c:1f:96:a0:8e:f7:e7:
d8:56:19:66:4e:7f:16:4d:56:f0:8d:5f:c5:c3:6e:79:d2:3c:
d8:85:00:67:5c:1a:3e:48:ba:e4:19:1c:2a:86:00:68:aa:20:
03:d5:12:c4:9a:06:5a:61:64:87:1d:24:22:12:a0:bc:39:48:
f0:d5:ec:2c:f2:07:a1:73:ff:73:06:f8:bc:e8:1d:0e:d4:a8:
86:5d:7b:be:7d:62:72:e0:1e:d7:9e:27:96:8d:d4:47:85:c7:
c7:aa:a4:63:46:db:84:01:4f:98:94:46:7d:95:51:54:33:eb:
53:b1:fd:84:8e:a9:95:c9:d9:8a:fb:07:31:f4:18:7a:ca:c0:
a8:6c:43:ba:5f:4f:36:9a:1c:56:b5:dc:b2:6d:00:16:39:8d:
cc:a0:45:de:94:42:51:98:2f:4b:b2:be:f8:97:ee:9d:f4:53:
bd:20:f8:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P42+sh2boiyf8iWyoiTekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjRkMGY0NzI5NzY4MDUzNWViMjc5OTE4OWRiODg4YjQw
NjY3ODIwHhcNMjYwNDI3MTcwMTIyWhcNMjYwNDI4MTcwMTIyWjAzMTEwLwYDVQQD
Eyg5ODI4M2Q2YWMyMjdkZjVhNzdiYjhmMmNmZjBjMDYyOWFiMmJhZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KHyrT7FQQe0i3KcQZOvIed/gCfU
rPRPj2TJuAUAl1cpU2e6GpIrn/XH9/fnLr7vB45UusWm/vMn9dzNrY56eKV750YO
nLeNK1We++bbzsJaVyVpKhvy6DBFGk3IK5iXprw5kZ/kL2921STsZ9BHpvhhhXVn
ShFTEAWnKhINjdfdbuUIzti18C3KjLiLhct6fscLr0dMKy/yp8khuzuE7h5f4wrx
6z2HriiduZ3ZA7fJUGVMc6AyYyzkGC2lYuWuRW9Yt6ZEUtdSOCPFxtk5jYbbAuYE
+SGzlAEwxUYtgCSlbfCIZXsokwKJ9RMP81mi3TOfj8TAdSg0C6kShOlijQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgoPWrCJ99ad7uPLP8MBimrK64BMB8GA1UdIwQY
MBaAFPMk0PRyl2gFNesnmRiduIi0BmeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85MGQzNjYtMmZhYi00N2U1LTkwYjkt
MDI2NWU1Y2Q2OTY2LzEvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC85MGQzNjYtMmZhYi00N2U1LTkwYjktMDI2NWU1Y2Q2OTY2
LzEvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrXVzejR
NqyBsDgKyS8Qm4RTz8ZxLSj9GyqCVgilwdXvHr8jcRXlkv3ffxQBWfOBAXEzKBzX
ePfy5Q8e/5J3RsKAGwZYXamCoQ094cyu88XxhyJcH5agjvfn2FYZZk5/Fk1W8I1f
xcNuedI82IUAZ1waPki65BkcKoYAaKogA9USxJoGWmFkhx0kIhKgvDlI8NXsLPIH
oXP/cwb4vOgdDtSohl17vn1icuAe154nlo3UR4XHx6qkY0bbhAFPmJRGfZVRVDPr
U7H9hI6plcnZivsHMfQYesrAqGxDul9PNpocVrXcsm0AFjmNzKBF3pRCUZgvS7K+
+JfunfRTvSD41w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:43:15 2026 by rpki-client