Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
File: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft (raw, json)
Hash identifier: AujuySicxw3pRaF4KkLLRxEDdDKAPgkeelx1w16zzJg=
Subject key identifier: 97:1B:B5:07:CE:31:33:BC:20:FA:92:06:D6:78:F2:FB:C9:83:B9:B3
Authority key identifier: F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
Certificate issuer: /CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Certificate serial: 01A03FA9B0D7A34399C5D2503D80DA5EFAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
Manifest number: 05DE
Signing time: Wed 26 Aug 2026 20:01:20 +0000
Manifest this update: Wed 26 Aug 2026 20:01:20 +0000
Manifest next update: Thu 27 Aug 2026 20:01:20 +0000
Files and hashes: 1: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl (hash: LWEVxkftFlRHW4TNDYwTJzCb6SwlnRlbBQHBGA5z+T0=)
2: o8MqcHzucQsFFcM064UV8vGpwI8.roa (hash: 7pKszhiXxG9eq/C8SaAv1aRWIQRMOmuuO6Lbmdi5cKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:b0:d7:a3:43:99:c5:d2:50:3d:80:da:5e:fa:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Validity
Not Before: Aug 26 20:01:20 2026 GMT
Not After : Aug 27 20:01:20 2026 GMT
Subject: CN=971bb507ce3133bc20fa9206d678f2fbc983b9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:11:0a:bb:96:fa:1b:9b:fc:00:67:73:8d:1e:
c2:b7:e8:a2:bb:6f:25:86:e0:65:c2:dc:2a:2b:f2:
ec:c7:50:a3:f3:83:41:b5:2e:39:bc:12:9f:15:03:
41:40:10:c7:79:77:93:2d:10:3d:60:a4:d1:e7:07:
ce:76:67:1d:03:7e:d2:57:c1:17:65:2d:4f:61:5f:
5f:d2:97:7f:76:23:68:b3:5d:cd:0c:79:5a:87:8c:
fa:87:66:51:be:8a:94:26:c4:f7:ef:3a:2c:e5:16:
9d:1c:1f:3d:87:6c:c0:b3:bb:77:4b:3a:b9:d5:b7:
21:12:e7:3b:26:12:0f:03:e2:77:8f:95:97:4a:22:
c9:57:43:93:fa:2b:34:f7:bd:9f:56:20:0a:b9:9e:
9b:99:8e:4a:44:73:b8:16:ee:e7:1d:ec:55:15:c8:
71:a2:3c:16:bd:72:ce:33:1b:c8:78:86:3b:ae:22:
63:4b:90:f5:f0:91:85:88:77:1b:86:49:63:af:fa:
3b:04:9b:9c:e5:b7:43:57:68:2a:5d:57:e7:8a:d3:
ff:de:15:21:52:dd:ed:8a:d3:7e:90:04:b1:db:02:
6d:e7:f4:cc:e7:b5:c8:7a:a6:a6:02:69:80:b4:23:
7b:89:8e:39:cf:08:a1:c1:06:85:df:b8:0d:0a:dc:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1B:B5:07:CE:31:33:BC:20:FA:92:06:D6:78:F2:FB:C9:83:B9:B3
X509v3 Authority Key Identifier:
keyid:F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:25:c1:ff:26:24:dc:70:dd:1a:c7:a7:36:cc:b7:18:71:7a:
a7:0a:c0:5a:bd:7a:44:49:ef:19:d9:1d:38:39:d1:2d:89:15:
69:15:1a:3a:3f:13:3a:8b:33:1c:9f:14:36:63:60:cb:ae:ca:
b5:fb:3a:17:0e:96:15:1b:d5:87:61:af:a0:cc:7d:57:13:99:
86:0e:38:01:5a:e5:2b:83:c8:78:07:ed:44:ce:42:f2:66:f0:
b3:8e:58:5a:42:8a:03:70:08:30:38:03:89:fe:65:d7:af:45:
1e:86:18:3e:01:2b:24:c3:88:07:34:7e:a1:44:54:82:28:cd:
ee:74:2c:d2:15:bd:25:5f:c8:63:74:2a:7b:83:39:e2:39:6c:
84:91:ea:a3:c8:7b:3e:53:00:e4:52:8f:f1:9f:82:d4:f6:14:
01:7d:57:66:e2:d0:41:28:26:85:26:f8:c7:0e:c7:a6:de:d7:
63:56:e9:26:4a:cc:50:42:66:92:31:58:99:81:3c:39:ae:ab:
61:29:4d:f7:62:65:36:d4:03:07:c2:99:7a:bd:da:a8:b5:3c:
5d:32:57:df:bf:6d:22:8e:30:34:15:d8:ef:21:bc:db:42:3c:
9f:f2:30:3c:61:09:e7:f1:2d:b5:51:ae:67:0d:de:ea:9a:ed:
7f:06:62:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/qbDXo0OZxdJQPYDaXvr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDMyM2FkNDhmNWE0NWJiY2E5ZTg3OTg4M2ZhZTkzMTRi
NThlOWQwHhcNMjYwODI2MjAwMTIwWhcNMjYwODI3MjAwMTIwWjAzMTEwLwYDVQQD
Eyg5NzFiYjUwN2NlMzEzM2JjMjBmYTkyMDZkNjc4ZjJmYmM5ODNiOWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BEKu5b6G5v8AGdzjR7Ct+iiu28l
huBlwtwqK/Lsx1Cj84NBtS45vBKfFQNBQBDHeXeTLRA9YKTR5wfOdmcdA37SV8EX
ZS1PYV9f0pd/diNos13NDHlah4z6h2ZRvoqUJsT37zos5RadHB89h2zAs7t3Szq5
1bchEuc7JhIPA+J3j5WXSiLJV0OT+is0972fViAKuZ6bmY5KRHO4Fu7nHexVFchx
ojwWvXLOMxvIeIY7riJjS5D18JGFiHcbhkljr/o7BJuc5bdDV2gqXVfnitP/3hUh
Ut3titN+kASx2wJt5/TM57XIeqamAmmAtCN7iY45zwihwQaF37gNCtwruQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcbtQfOMTO8IPqSBtZ48vvJg7mzMB8GA1UdIwQY
MBaAFPDTI61I9aRbvKnoeYg/rpMUtY6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy83ZGUyZGYtMTBkYi00YmJlLTkwNTIt
NWZhYmQ2ZGM1ZjkzLzEvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy83ZGUyZGYtMTBkYi00YmJlLTkwNTItNWZhYmQ2ZGM1Zjkz
LzEvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyXB/yYk
3HDdGsenNsy3GHF6pwrAWr16REnvGdkdODnRLYkVaRUaOj8TOoszHJ8UNmNgy67K
tfs6Fw6WFRvVh2GvoMx9VxOZhg44AVrlK4PIeAftRM5C8mbws45YWkKKA3AIMDgD
if5l169FHoYYPgErJMOIBzR+oURUgijN7nQs0hW9JV/IY3Qqe4M54jlshJHqo8h7
PlMA5FKP8Z+C1PYUAX1XZuLQQSgmhSb4xw7Hpt7XY1bpJkrMUEJmkjFYmYE8Oa6r
YSlN92JlNtQDB8KZer3aqLU8XTJX379tIo4wNBXY7yG820I8n/IwPGEJ5/EttVGu
Zw3e6prtfwZimg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:58 2026 by rpki-client