Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
File: 8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft (raw, json)
Hash identifier: QctifvQIR0Zqo53ZUl+q+9zYyzgx1TTN2ZtNbu7OjDA=
Subject key identifier: D5:5D:31:B1:CD:AC:90:A5:C9:FE:B4:50:54:F0:F8:54:64:86:74:40
Authority key identifier: F0:60:DD:40:3D:DE:F7:E5:19:17:3B:3F:B4:DC:7E:8A:23:34:11:15
Certificate issuer: /CN=f060dd403ddef7e519173b3fb4dc7e8a23341115
Certificate serial: 01A040850C1DCD14EB85D49C7D49FED71661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
Manifest number: 021E
Signing time: Thu 27 Aug 2026 00:00:56 +0000
Manifest this update: Thu 27 Aug 2026 00:00:56 +0000
Manifest next update: Fri 28 Aug 2026 00:00:56 +0000
Files and hashes: 1: 4hUo9slD_WYqWgnSusuLi5aYgKk.roa (hash: Xmxn5Zro/2pB9LNtV2YLqCKLpWDCyVWpsb7YiPBgbM0=)
2: 8GDdQD3e9-UZFzs_tNx-iiM0ERU.crl (hash: 1DP38rZm0bqrh9uz9GfCKqJmoqdFDervKMNY8KZ9kpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:0c:1d:cd:14:eb:85:d4:9c:7d:49:fe:d7:16:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f060dd403ddef7e519173b3fb4dc7e8a23341115
Validity
Not Before: Aug 27 00:00:56 2026 GMT
Not After : Aug 28 00:00:56 2026 GMT
Subject: CN=d55d31b1cdac90a5c9feb45054f0f85464867440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:c5:68:5b:d0:38:38:96:2a:02:21:12:a2:
95:82:c2:82:6c:86:fd:2d:72:1b:9b:77:f0:e6:d3:
23:26:3a:77:91:ab:60:4d:e0:ba:82:78:64:fa:31:
70:27:50:a7:30:e6:3f:30:58:c9:8b:eb:fe:74:1d:
b5:2b:b6:ff:a4:4f:3a:af:fc:bf:59:84:a0:40:0d:
09:21:de:1d:9d:2a:24:12:61:5e:46:3d:ed:2c:27:
bc:ff:9b:73:b6:48:93:b6:b9:36:11:49:b2:b8:9e:
be:f8:5b:5f:40:07:85:ae:4b:9c:9b:d9:e6:a6:07:
57:6d:90:d4:a9:51:b7:5e:a9:5b:1a:7e:1c:7b:f7:
4a:50:23:42:77:ce:bf:65:ed:bf:72:d2:a1:5d:35:
59:2d:08:38:6e:cc:8d:31:52:12:00:4f:db:8f:0b:
f5:75:6c:2a:2d:68:20:e8:ad:06:c7:e9:1e:ce:0c:
e3:60:0c:5f:88:d2:69:91:ae:0f:19:94:c9:25:53:
42:69:fb:89:72:2d:d2:b7:73:b6:96:27:ad:29:0c:
31:12:df:0c:e2:fa:5d:ec:1b:b4:9f:fb:bd:b6:5e:
3f:c7:20:ea:85:5e:f4:a1:6b:8b:44:b6:f5:a1:d3:
6b:64:69:0b:15:03:b0:86:7e:bf:f6:c2:08:1a:a9:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5D:31:B1:CD:AC:90:A5:C9:FE:B4:50:54:F0:F8:54:64:86:74:40
X509v3 Authority Key Identifier:
keyid:F0:60:DD:40:3D:DE:F7:E5:19:17:3B:3F:B4:DC:7E:8A:23:34:11:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5e:f1:8c:c8:c4:10:2a:61:3b:06:4b:44:09:16:69:56:f6:
25:85:f7:29:95:35:3d:30:e8:41:34:ac:ec:db:ad:46:6e:3e:
fe:8a:29:82:c4:d6:85:f5:ec:9a:73:79:d0:2a:3f:b0:f4:cc:
66:cd:80:c6:8a:70:c9:a9:db:29:18:e8:82:80:03:34:f3:4e:
ff:91:26:82:dd:3d:0f:b8:a3:f3:33:31:72:6e:d3:fe:4f:6e:
46:01:70:78:48:0b:59:94:de:c5:50:d8:83:e0:7e:e3:27:ef:
e9:0f:46:5a:45:6b:2c:3d:10:b8:b3:2d:84:36:fd:b4:44:94:
8a:a6:70:92:01:46:d1:06:80:8f:43:dc:fe:49:b2:cd:f6:c6:
de:94:ee:49:6f:e2:c0:9f:80:a5:ef:91:7d:da:07:63:3a:a8:
12:24:dd:79:60:9c:3a:5c:3e:4f:ff:5e:cd:24:c4:c3:78:ef:
76:c8:9c:4b:54:d2:17:97:1e:7a:c5:af:2d:29:5b:ec:67:29:
cb:55:d3:55:38:30:63:cf:c6:56:3a:f9:14:a1:59:25:e8:4c:
56:3c:ec:33:82:1d:99:df:9c:4e:fc:77:4d:22:12:87:c2:62:
30:ad:8f:0b:87:81:2c:32:1f:8a:63:dd:53:8b:9e:4e:af:a9:
c3:bc:da:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAhQwdzRTrhdScfUn+1xZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNjBkZDQwM2RkZWY3ZTUxOTE3M2IzZmI0ZGM3ZThhMjMz
NDExMTUwHhcNMjYwODI3MDAwMDU2WhcNMjYwODI4MDAwMDU2WjAzMTEwLwYDVQQD
EyhkNTVkMzFiMWNkYWM5MGE1YzlmZWI0NTA1NGYwZjg1NDY0ODY3NDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZvFaFvQODiWKgIhEqKVgsKCbIb9
LXIbm3fw5tMjJjp3katgTeC6gnhk+jFwJ1CnMOY/MFjJi+v+dB21K7b/pE86r/y/
WYSgQA0JId4dnSokEmFeRj3tLCe8/5tztkiTtrk2EUmyuJ6++FtfQAeFrkucm9nm
pgdXbZDUqVG3XqlbGn4ce/dKUCNCd86/Ze2/ctKhXTVZLQg4bsyNMVISAE/bjwv1
dWwqLWgg6K0Gx+kezgzjYAxfiNJpka4PGZTJJVNCafuJci3St3O2lietKQwxEt8M
4vpd7Bu0n/u9tl4/xyDqhV70oWuLRLb1odNrZGkLFQOwhn6/9sIIGqnU6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVdMbHNrJClyf60UFTw+FRkhnRAMB8GA1UdIwQY
MBaAFPBg3UA93vflGRc7P7TcfoojNBEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEdEZFFEM2U5LVVaRnpzX3ROeC1paU0wRVJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kOWQxYjMtNTkxMS00OWU3LTgxYWEt
MGYwZDUzYWMwZTBkLzEvOEdEZFFEM2U5LVVaRnpzX3ROeC1paU0wRVJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kOWQxYjMtNTkxMS00OWU3LTgxYWEtMGYwZDUzYWMwZTBk
LzEvOEdEZFFEM2U5LVVaRnpzX3ROeC1paU0wRVJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWF7xjMjE
ECphOwZLRAkWaVb2JYX3KZU1PTDoQTSs7NutRm4+/oopgsTWhfXsmnN50Co/sPTM
Zs2AxopwyanbKRjogoADNPNO/5Emgt09D7ij8zMxcm7T/k9uRgFweEgLWZTexVDY
g+B+4yfv6Q9GWkVrLD0QuLMthDb9tESUiqZwkgFG0QaAj0Pc/kmyzfbG3pTuSW/i
wJ+Ape+RfdoHYzqoEiTdeWCcOlw+T/9ezSTEw3jvdsicS1TSF5ceesWvLSlb7Gcp
y1XTVTgwY8/GVjr5FKFZJehMVjzsM4Idmd+cTvx3TSISh8JiMK2PC4eBLDIfimPd
U4ueTq+pw7zayw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:43 2026 by rpki-client