Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
File: iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft (raw, json)
Hash identifier: XuqEzaQ+l6ULwwz0aV6z8hlQcc06Y2ZwskJZQXBfmXA=
Subject key identifier: AB:1B:9E:DF:DB:37:D6:67:11:B9:07:76:46:28:15:33:FD:3E:9B:A3
Authority key identifier: 89:0F:3F:AB:23:49:C0:1B:1A:C8:FD:0B:92:1C:60:31:8C:E1:84:D6
Certificate issuer: /CN=890f3fab2349c01b1ac8fd0b921c60318ce184d6
Certificate serial: 01A18074844348F738E6244E6EF71D099076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
Manifest number: 0A9E
Signing time: Wed 28 Oct 2026 03:01:21 +0000
Manifest this update: Wed 28 Oct 2026 03:01:21 +0000
Manifest next update: Thu 29 Oct 2026 03:01:21 +0000
Files and hashes: 1: iQ8_qyNJwBsayP0LkhxgMYzhhNY.crl (hash: 4d4NGeEhprroopw8BdClEBtknKrMsT1ktTwLhFIZt3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:84:43:48:f7:38:e6:24:4e:6e:f7:1d:09:90:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890f3fab2349c01b1ac8fd0b921c60318ce184d6
Validity
Not Before: Oct 28 03:01:21 2026 GMT
Not After : Oct 29 03:01:21 2026 GMT
Subject: CN=ab1b9edfdb37d66711b9077646281533fd3e9ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8e:10:24:02:96:a9:6f:02:e0:c2:cd:d9:26:
7c:93:b7:28:e8:47:e7:e3:05:3b:ee:d8:01:ba:b7:
94:7e:09:9c:4b:4c:7b:d2:2a:22:bf:55:72:4c:14:
85:03:da:24:d0:5d:61:aa:ec:2f:f6:19:3c:95:54:
30:ea:de:e1:c7:12:f5:52:19:47:1e:3a:fc:3e:97:
fe:a9:9f:c3:67:c9:6f:47:02:6c:94:26:93:b7:d8:
70:23:b6:c0:c3:e4:c8:e5:5f:54:e2:06:c8:f9:52:
3c:40:e4:70:cb:70:3d:69:fb:df:72:fe:87:8e:bf:
7d:c0:9d:ba:06:48:6d:16:66:80:d3:85:75:58:47:
a9:51:bb:23:03:7b:65:0d:d5:6a:75:95:7c:e5:1a:
eb:7a:96:f9:99:35:40:73:0c:30:64:22:41:49:16:
34:0e:f7:e0:74:ea:36:bc:46:a5:20:d2:de:86:ba:
88:aa:40:ae:47:47:f0:5f:a0:44:5d:2c:8b:ba:1f:
ae:1d:19:03:ce:d8:2c:49:95:fe:67:9e:f5:37:b4:
03:3e:f0:75:6c:0f:db:28:8e:10:f4:41:6f:df:a4:
41:1e:1b:9e:f3:f9:08:74:f7:74:91:d0:22:3c:fc:
60:b1:a8:a5:9c:44:61:c0:5d:07:91:2a:76:31:22:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1B:9E:DF:DB:37:D6:67:11:B9:07:76:46:28:15:33:FD:3E:9B:A3
X509v3 Authority Key Identifier:
keyid:89:0F:3F:AB:23:49:C0:1B:1A:C8:FD:0B:92:1C:60:31:8C:E1:84:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a4:d7:0f:64:5a:6b:fb:f5:17:3d:a9:30:0a:46:8b:df:91:
da:5a:d6:e0:dc:cd:36:ef:de:74:3a:a2:4b:50:b3:80:74:34:
5a:0a:22:70:0b:0b:3f:5a:c9:b1:a4:7f:b0:6b:d5:1b:6d:e6:
f6:bd:a3:9e:af:28:4e:d6:98:f5:5b:ad:97:8b:34:42:2e:21:
3f:30:f9:e7:f3:ba:3a:b7:bf:98:14:ac:f4:f1:a8:46:36:0a:
91:63:b4:ac:b3:3a:9d:4b:00:0e:1a:a0:d9:65:6d:d7:b3:ff:
3e:48:bc:e0:d8:b4:76:1e:d8:f5:cc:41:73:f1:e7:10:bc:4c:
47:ac:16:f7:a1:a7:f2:b2:44:c8:fc:8c:12:1e:7a:88:e4:fe:
52:b7:35:1a:4e:e8:3b:b9:0a:d7:22:54:1f:84:d8:80:3e:32:
43:76:e1:52:12:c1:b6:c0:d3:20:3a:b2:37:b4:7e:2f:e4:cb:
7c:4b:ef:8c:4f:77:50:00:68:5a:83:65:b5:1f:3e:2f:a2:cc:
49:bc:bc:c0:e7:94:55:5d:e6:24:92:ba:ff:b5:3f:b4:da:3a:
3f:78:33:3a:30:7d:d4:56:c3:1b:9a:46:29:13:21:6b:b3:0e:
cf:ca:e7:0c:d9:48:c0:6e:60:19:ca:43:55:76:82:7b:ca:3c:
a7:45:fb:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAdIRDSPc45iRObvcdCZB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MGYzZmFiMjM0OWMwMWIxYWM4ZmQwYjkyMWM2MDMxOGNl
MTg0ZDYwHhcNMjYxMDI4MDMwMTIxWhcNMjYxMDI5MDMwMTIxWjAzMTEwLwYDVQQD
EyhhYjFiOWVkZmRiMzdkNjY3MTFiOTA3NzY0NjI4MTUzM2ZkM2U5YmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I4QJAKWqW8C4MLN2SZ8k7co6Efn
4wU77tgBureUfgmcS0x70ioiv1VyTBSFA9ok0F1hquwv9hk8lVQw6t7hxxL1UhlH
Hjr8Ppf+qZ/DZ8lvRwJslCaTt9hwI7bAw+TI5V9U4gbI+VI8QORwy3A9afvfcv6H
jr99wJ26BkhtFmaA04V1WEepUbsjA3tlDdVqdZV85Rrrepb5mTVAcwwwZCJBSRY0
DvfgdOo2vEalINLehrqIqkCuR0fwX6BEXSyLuh+uHRkDztgsSZX+Z571N7QDPvB1
bA/bKI4Q9EFv36RBHhue8/kIdPd0kdAiPPxgsailnERhwF0HkSp2MSLITwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsbnt/bN9ZnEbkHdkYoFTP9PpujMB8GA1UdIwQY
MBaAFIkPP6sjScAbGsj9C5IcYDGM4YTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVE4X3F5Tkp3QnNheVAwTGtoeGdNWXpoaE5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xY2UzZTMtYzg1OS00YjcxLWI2ZDIt
OTM1OWQ4ZGUyOTc1LzEvaVE4X3F5Tkp3QnNheVAwTGtoeGdNWXpoaE5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8xY2UzZTMtYzg1OS00YjcxLWI2ZDItOTM1OWQ4ZGUyOTc1
LzEvaVE4X3F5Tkp3QnNheVAwTGtoeGdNWXpoaE5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqTXD2Ra
a/v1Fz2pMApGi9+R2lrW4NzNNu/edDqiS1CzgHQ0WgoicAsLP1rJsaR/sGvVG23m
9r2jnq8oTtaY9Vutl4s0Qi4hPzD55/O6Ore/mBSs9PGoRjYKkWO0rLM6nUsADhqg
2WVt17P/Pki84Ni0dh7Y9cxBc/HnELxMR6wW96Gn8rJEyPyMEh56iOT+Urc1Gk7o
O7kK1yJUH4TYgD4yQ3bhUhLBtsDTIDqyN7R+L+TLfEvvjE93UABoWoNltR8+L6LM
Sby8wOeUVV3mJJK6/7U/tNo6P3gzOjB91FbDG5pGKRMha7MOz8rnDNlIwG5gGcpD
VXaCe8o8p0X7VQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:46:21 2026 by rpki-client