Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier: 298BAY1iAzuAuQVyidtYMgzoLvxuJivksEvBvdOfFIs=
Subject key identifier: 8E:28:86:29:C3:F9:B4:36:3C:B6:6C:0E:4D:4F:EA:9B:E0:07:08:9F
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial: 01A11CE3155D2B8AD7BAC585A82726A196F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number: 1A93
Signing time: Thu 08 Oct 2026 19:00:06 +0000
Manifest this update: Thu 08 Oct 2026 19:00:06 +0000
Manifest next update: Fri 09 Oct 2026 19:00:06 +0000
Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: agbryxOWMj/P1oVaHsUPj6jbhR94le9oGT/7OvgZqKo=)
2: r1byiiD8E5kv1tORv9SHaYWDCX8.roa (hash: Y7mEKt3t/ouKCUEMiF9nKEKnQJXCe30KkTBF7TaOr+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:e3:15:5d:2b:8a:d7:ba:c5:85:a8:27:26:a1:96:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Validity
Not Before: Oct 8 19:00:06 2026 GMT
Not After : Oct 9 19:00:06 2026 GMT
Subject: CN=8e288629c3f9b4363cb66c0e4d4fea9be007089f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:02:e9:99:3a:c1:51:02:ae:c5:99:08:fa:
88:e0:d5:97:94:e3:f6:58:fc:18:ff:8d:c6:cc:54:
52:4f:30:fa:12:8b:2e:aa:dc:d0:88:9b:bc:80:d2:
9a:0f:de:e0:dc:c7:49:19:70:9f:c7:cd:bc:e7:38:
f0:b4:47:8b:dc:ee:a9:9a:30:cc:31:e7:d5:48:49:
83:e3:66:a3:89:b9:6d:ff:9a:e2:f2:03:1c:07:90:
5d:61:03:79:ad:49:4a:b8:79:9c:2b:97:ff:6e:89:
f8:26:d1:c4:56:d0:39:6a:c0:9e:76:80:84:c8:da:
9b:54:72:58:18:81:04:cc:48:9c:53:b8:75:a4:5e:
67:25:f5:ba:21:d0:3a:a9:72:67:07:e5:78:94:39:
8c:fb:b0:9b:bf:45:f3:75:42:14:95:91:36:74:e5:
d5:1e:32:a6:22:2e:cd:f9:2a:07:84:35:a8:49:32:
19:3e:bd:ba:f6:75:be:a4:7d:f9:dd:a0:f5:b7:66:
1f:2f:c6:ee:5d:66:69:44:3e:5e:50:52:ff:8f:0f:
2c:55:16:e4:9d:a1:4d:bc:a1:7a:84:83:f1:63:57:
80:ac:b6:f3:ff:5b:fc:5b:b3:b0:a1:74:4d:70:a7:
22:ea:64:24:45:f5:92:e7:b2:cc:c5:89:20:3d:1a:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:28:86:29:C3:F9:B4:36:3C:B6:6C:0E:4D:4F:EA:9B:E0:07:08:9F
X509v3 Authority Key Identifier:
keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:16:83:6a:1c:37:b9:45:03:a0:f9:40:43:bc:40:a6:0f:2b:
b4:9c:06:38:ef:ea:34:5d:52:e4:95:c8:d1:4e:ab:54:58:2e:
5b:b6:57:58:35:9f:9c:6c:30:92:89:c0:a7:bd:ec:48:e9:9b:
80:ff:1b:45:97:bf:c3:9f:4a:c6:ed:68:b5:27:f4:dc:af:29:
7a:ca:02:9b:60:f6:de:79:56:af:e1:ca:f2:5c:3a:e9:76:6f:
be:1b:4d:09:7c:9a:3f:8f:40:c1:9e:19:ab:9f:64:fc:17:e7:
5d:41:b7:dd:f1:92:b8:ea:5e:43:1b:81:6b:f4:ed:d1:d5:58:
88:e8:d0:b8:85:49:cf:95:b0:11:13:37:54:e5:f1:91:1b:85:
14:f5:c9:07:0e:1c:80:f4:34:98:5a:21:58:81:73:6d:ff:0a:
a8:8f:df:ed:0a:c3:c9:47:7a:99:21:9b:f9:ea:4a:02:ca:78:
f0:ab:2b:ac:7f:4e:93:10:e6:e2:d9:22:10:d3:35:27:a4:6a:
15:5c:29:bd:10:dc:e4:00:ee:36:bd:ff:00:44:31:73:05:75:
50:e7:7c:b0:bd:e8:91:ad:08:f5:b4:b2:f5:e6:bb:b7:d4:31:
02:60:67:42:f1:f2:d2:85:84:c4:d6:1f:f7:8b:40:63:24:fb:
b4:d3:c7:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEc4xVdK4rXusWFqCcmoZb2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDU5ZjEyMWZjN2VmYTBjMTBiN2RkNjE0ZDk1YTg3NTZk
NTM2MDYwHhcNMjYxMDA4MTkwMDA2WhcNMjYxMDA5MTkwMDA2WjAzMTEwLwYDVQQD
Eyg4ZTI4ODYyOWMzZjliNDM2M2NiNjZjMGU0ZDRmZWE5YmUwMDcwODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXIC6Zk6wVECrsWZCPqI4NWXlOP2
WPwY/43GzFRSTzD6EosuqtzQiJu8gNKaD97g3MdJGXCfx8285zjwtEeL3O6pmjDM
MefVSEmD42ajiblt/5ri8gMcB5BdYQN5rUlKuHmcK5f/bon4JtHEVtA5asCedoCE
yNqbVHJYGIEEzEicU7h1pF5nJfW6IdA6qXJnB+V4lDmM+7Cbv0XzdUIUlZE2dOXV
HjKmIi7N+SoHhDWoSTIZPr269nW+pH353aD1t2YfL8buXWZpRD5eUFL/jw8sVRbk
naFNvKF6hIPxY1eArLbz/1v8W7OwoXRNcKci6mQkRfWS57LMxYkgPRoz2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4ohinD+bQ2PLZsDk1P6pvgBwifMB8GA1UdIwQY
MBaAFPDVnxIfx++gwQt91hTZWodW1TYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjct
NmVlZmU1YjMzNWFhLzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjctNmVlZmU1YjMzNWFh
LzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBaDahw3
uUUDoPlAQ7xApg8rtJwGOO/qNF1S5JXI0U6rVFguW7ZXWDWfnGwwkonAp73sSOmb
gP8bRZe/w59Kxu1otSf03K8pesoCm2D23nlWr+HK8lw66XZvvhtNCXyaP49AwZ4Z
q59k/BfnXUG33fGSuOpeQxuBa/Tt0dVYiOjQuIVJz5WwERM3VOXxkRuFFPXJBw4c
gPQ0mFohWIFzbf8KqI/f7QrDyUd6mSGb+epKAsp48KsrrH9OkxDm4tkiENM1J6Rq
FVwpvRDc5ADuNr3/AEQxcwV1UOd8sL3oka0I9bSy9ea7t9QxAmBnQvHy0oWExNYf
94tAYyT7tNPHsg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:55:33 2026 by rpki-client