Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
File: R8zghicbSUmlCfHjcYDpioCkVOU.mft (raw, json)
Hash identifier: 3UWkWnnKpYFVX/iHngO6vaErvCIiOCduFmmbh0TMgX8=
Subject key identifier: 8F:69:6A:C2:E4:E9:66:21:D6:CE:D2:99:69:6A:10:7B:8E:61:84:31
Authority key identifier: 47:CC:E0:86:27:1B:49:49:A5:09:F1:E3:71:80:E9:8A:80:A4:54:E5
Certificate issuer: /CN=47cce086271b4949a509f1e37180e98a80a454e5
Certificate serial: 01A08A8D0DF608BDE05C5A63E0EACF579418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:34 +0000
Manifest this update: Thu 10 Sep 2026 09:01:34 +0000
Manifest next update: Fri 11 Sep 2026 09:01:34 +0000
Files and hashes: 1: 84nImxweqqr5ryKumI1pSxwnVkY.roa (hash: +HbQ4MWmkmjb64P4pJWJRCcWwhVgoZJ30TVPJhtlbcM=)
2: R8zghicbSUmlCfHjcYDpioCkVOU.crl (hash: YyIvTdYDv+kSMzM+YPKtYpYsMISd3xK+8MskyRrlMKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:0d:f6:08:bd:e0:5c:5a:63:e0:ea:cf:57:94:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cce086271b4949a509f1e37180e98a80a454e5
Validity
Not Before: Sep 10 09:01:34 2026 GMT
Not After : Sep 11 09:01:34 2026 GMT
Subject: CN=8f696ac2e4e96621d6ced299696a107b8e618431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:ca:0b:d3:a3:c3:26:0c:3c:a4:57:55:09:
55:dc:9c:e9:64:bd:32:c8:d5:46:8b:57:7f:ed:4a:
5f:c2:05:6f:80:ca:c7:c2:98:c5:63:8f:6d:dd:d9:
90:10:83:3d:0b:63:6a:af:d8:a9:e6:52:ed:de:be:
83:49:5e:5a:95:05:cf:60:32:15:c8:cf:a3:c7:d1:
b1:60:cf:32:1c:de:22:b9:67:e3:70:49:dc:03:64:
ed:8a:13:e0:fc:15:e9:23:86:20:32:ba:52:10:b3:
da:40:5e:e6:a5:a0:d6:10:f2:02:58:bf:0c:c8:ef:
fa:4d:e8:13:54:dc:ef:38:73:45:55:18:e6:23:5f:
f5:02:f1:0f:51:ed:96:c3:0f:60:6f:58:5e:bb:7e:
9c:e1:83:5f:af:53:7c:b3:08:02:66:3f:f4:47:62:
46:7f:de:d3:5e:a5:4b:3b:fd:37:7a:a4:aa:9f:43:
5e:c8:26:f9:7a:5c:cd:a2:34:5b:ed:eb:49:28:4d:
71:e3:d3:c8:09:b2:d3:9d:b7:e7:bc:3e:6f:2b:cc:
6e:cd:f3:7d:5d:31:2e:42:09:41:d6:3a:dc:84:51:
3c:17:b9:dc:ff:d6:77:15:39:34:7d:41:cc:3e:95:
57:a0:ab:8c:0e:3c:52:87:a2:6a:06:05:18:a0:a0:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:69:6A:C2:E4:E9:66:21:D6:CE:D2:99:69:6A:10:7B:8E:61:84:31
X509v3 Authority Key Identifier:
keyid:47:CC:E0:86:27:1B:49:49:A5:09:F1:E3:71:80:E9:8A:80:A4:54:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fd:12:3b:89:92:58:26:31:b9:3f:77:a7:19:31:3c:c2:d9:
87:21:fa:ee:81:42:52:5f:e7:1a:a0:be:fe:35:6f:e5:bd:8d:
15:20:d6:4e:8d:a9:1e:64:75:97:71:7a:c0:fa:e3:94:b2:d0:
97:d6:63:ae:31:33:9f:16:04:b6:d0:1b:a3:02:ac:39:70:90:
1f:95:6e:27:f2:f4:96:56:74:ad:72:f8:68:7b:93:46:fa:2f:
66:47:26:c0:9e:53:c4:35:68:3e:8d:0c:cf:98:14:d3:08:75:
23:49:56:6a:4b:67:29:c6:b7:10:a3:d4:68:d8:70:ca:55:af:
04:d9:ea:01:22:2f:b0:8e:f1:c2:23:6d:53:1e:f5:56:bf:94:
bf:88:4a:e0:90:ca:c9:bc:a0:26:cc:08:28:c3:35:9e:5d:d0:
93:50:f2:fa:49:03:5c:c2:ca:95:12:76:01:16:63:95:bf:a6:
90:d5:d8:1c:9c:9b:60:91:04:9c:b8:f9:97:12:47:21:b2:6f:
d0:81:2f:5e:0a:1c:91:30:37:63:4d:a9:93:97:51:dc:f6:a2:
1d:44:37:1c:d4:47:df:c0:a1:68:05:62:83:79:0f:5b:36:db:
be:d8:00:c3:b9:4e:f1:59:c1:90:21:95:a2:c6:2c:64:0d:fb:
a4:72:62:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjQ32CL3gXFpj4OrPV5QYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Y2NlMDg2MjcxYjQ5NDlhNTA5ZjFlMzcxODBlOThhODBh
NDU0ZTUwHhcNMjYwOTEwMDkwMTM0WhcNMjYwOTExMDkwMTM0WjAzMTEwLwYDVQQD
Eyg4ZjY5NmFjMmU0ZTk2NjIxZDZjZWQyOTk2OTZhMTA3YjhlNjE4NDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrXKC9OjwyYMPKRXVQlV3JzpZL0y
yNVGi1d/7UpfwgVvgMrHwpjFY49t3dmQEIM9C2Nqr9ip5lLt3r6DSV5alQXPYDIV
yM+jx9GxYM8yHN4iuWfjcEncA2TtihPg/BXpI4YgMrpSELPaQF7mpaDWEPICWL8M
yO/6TegTVNzvOHNFVRjmI1/1AvEPUe2Www9gb1heu36c4YNfr1N8swgCZj/0R2JG
f97TXqVLO/03eqSqn0NeyCb5elzNojRb7etJKE1x49PICbLTnbfnvD5vK8xuzfN9
XTEuQglB1jrchFE8F7nc/9Z3FTk0fUHMPpVXoKuMDjxSh6JqBgUYoKAlQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9pasLk6WYh1s7SmWlqEHuOYYQxMB8GA1UdIwQY
MBaAFEfM4IYnG0lJpQnx43GA6YqApFTlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjh6Z2hpY2JTVW1sQ2ZIamNZRHBpb0NrVk9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMt
N2Y4NjZkYWE1NDY0LzEvUjh6Z2hpY2JTVW1sQ2ZIamNZRHBpb0NrVk9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMtN2Y4NjZkYWE1NDY0
LzEvUjh6Z2hpY2JTVW1sQ2ZIamNZRHBpb0NrVk9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXP0SO4mS
WCYxuT93pxkxPMLZhyH67oFCUl/nGqC+/jVv5b2NFSDWTo2pHmR1l3F6wPrjlLLQ
l9ZjrjEznxYEttAbowKsOXCQH5VuJ/L0llZ0rXL4aHuTRvovZkcmwJ5TxDVoPo0M
z5gU0wh1I0lWaktnKca3EKPUaNhwylWvBNnqASIvsI7xwiNtUx71Vr+Uv4hK4JDK
ybygJswIKMM1nl3Qk1Dy+kkDXMLKlRJ2ARZjlb+mkNXYHJybYJEEnLj5lxJHIbJv
0IEvXgockTA3Y02pk5dR3PaiHUQ3HNRH38ChaAVig3kPWzbbvtgAw7lO8VnBkCGV
osYsZA37pHJisw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:30 2026 by rpki-client