
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
File: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft (raw, json)
Hash identifier: w/LWyMgUq6AmpKXSF17aPeRZDu2scffEOtSBGJHNe+8=
Subject key identifier: B0:95:72:45:47:64:A5:CB:88:E1:06:BD:48:76:82:C4:9D:92:0F:DB
Authority key identifier: F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
Certificate issuer: /CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Certificate serial: 01A13E25D122D88F726F2AA67FC884E5BE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
Manifest number: 0F84
Signing time: Thu 15 Oct 2026 06:00:28 +0000
Manifest this update: Thu 15 Oct 2026 06:00:28 +0000
Manifest next update: Fri 16 Oct 2026 06:00:28 +0000
Files and hashes: 1: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl (hash: J37XnHrmMcqwLHqBG3Lm5Nm4kT5foy6FfqRq06I4KH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:d1:22:d8:8f:72:6f:2a:a6:7f:c8:84:e5:be:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Validity
Not Before: Oct 15 06:00:28 2026 GMT
Not After : Oct 16 06:00:28 2026 GMT
Subject: CN=b09572454764a5cb88e106bd487682c49d920fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:16:37:ce:f1:b9:f3:fd:e9:38:35:41:c3:
30:63:be:71:2c:16:7d:13:7d:03:09:4d:51:fd:d7:
48:15:60:ff:9f:08:63:da:8d:50:4a:0e:05:b4:7a:
b5:3d:fe:a8:b2:b3:eb:ae:a0:dc:8d:c4:fb:85:92:
41:d6:af:c4:c6:45:ab:a0:7a:d6:d0:8f:3b:66:01:
3e:06:eb:e2:ca:17:dc:c7:25:53:39:78:3f:4b:6b:
81:ad:1d:c2:4f:99:46:c0:df:bd:bd:72:60:bb:f3:
ee:68:b2:96:57:57:7c:dd:4b:d7:64:35:93:0d:24:
94:71:bc:02:ed:3b:7a:26:15:34:e5:a4:2f:bb:6f:
a5:36:aa:6d:a4:52:bc:2e:86:31:c6:22:b9:7e:6c:
ee:6c:1c:51:c1:49:ae:7e:aa:b6:44:42:98:24:e7:
e5:31:c3:9d:f5:e1:63:20:28:92:9d:e1:3b:25:9e:
56:b6:44:33:b5:16:d8:a8:60:85:14:28:02:db:4d:
9d:14:87:36:21:bf:6d:91:03:33:af:9f:d2:cb:4b:
fe:05:18:0d:48:32:dd:fb:7f:cc:c7:b1:49:40:48:
d6:b4:6e:21:13:35:00:be:2d:c4:cd:8b:c6:bc:8d:
d0:4a:74:91:21:59:db:26:5c:ec:9d:e3:c7:92:e1:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:95:72:45:47:64:A5:CB:88:E1:06:BD:48:76:82:C4:9D:92:0F:DB
X509v3 Authority Key Identifier:
keyid:F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:93:41:f7:79:0a:51:1d:4d:a2:60:60:4d:cf:fe:7c:07:47:
17:9c:3e:32:f1:e1:49:3b:12:25:2c:2a:55:b2:23:81:9f:94:
33:fc:2b:a5:72:25:3b:6d:31:b6:7e:89:4a:c1:a7:cb:a8:12:
2a:97:79:48:67:69:4b:1a:83:8a:ae:59:5a:22:f7:09:a5:10:
d0:be:84:a9:75:a7:39:6d:10:2f:af:73:fa:85:66:64:e6:9f:
b7:ab:32:25:45:2e:d0:18:01:ca:eb:75:9c:5d:a3:ae:5a:a4:
78:f2:29:a4:05:5a:a4:62:80:1d:d1:27:9a:26:00:9d:db:f6:
1f:66:7a:da:4b:23:30:59:ba:6e:ec:5e:f9:9f:45:75:19:8e:
ee:4a:8f:99:2e:c3:68:f3:79:09:28:79:bb:db:83:f7:99:cf:
ee:3c:77:5f:4d:fc:79:00:92:42:76:b7:9c:51:07:4a:d1:a8:
81:2b:fa:5b:b9:2c:27:d7:8d:3c:8d:1c:2a:6f:97:7a:ca:7d:
26:20:78:3b:b2:5f:43:fe:5b:40:13:75:e2:da:50:fb:0e:f8:
eb:8e:ad:fa:f9:f8:b1:67:a4:59:9c:fa:37:8d:e2:47:ad:85:
aa:7f:cd:4a:95:d3:66:21:89:68:64:7d:9e:b4:72:4f:66:32:
ef:49:a4:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JdEi2I9ybyqmf8iE5b4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzc3NGEyNzYyMTRiODZlMGE1YjRmYTc3MjFiZGIwZTMy
MmUwODAwHhcNMjYxMDE1MDYwMDI4WhcNMjYxMDE2MDYwMDI4WjAzMTEwLwYDVQQD
EyhiMDk1NzI0NTQ3NjRhNWNiODhlMTA2YmQ0ODc2ODJjNDlkOTIwZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOAWN87xufP96Tg1QcMwY75xLBZ9
E30DCU1R/ddIFWD/nwhj2o1QSg4FtHq1Pf6osrPrrqDcjcT7hZJB1q/ExkWroHrW
0I87ZgE+BuviyhfcxyVTOXg/S2uBrR3CT5lGwN+9vXJgu/PuaLKWV1d83UvXZDWT
DSSUcbwC7Tt6JhU05aQvu2+lNqptpFK8LoYxxiK5fmzubBxRwUmufqq2REKYJOfl
McOd9eFjICiSneE7JZ5WtkQztRbYqGCFFCgC202dFIc2Ib9tkQMzr5/Sy0v+BRgN
SDLd+3/Mx7FJQEjWtG4hEzUAvi3EzYvGvI3QSnSRIVnbJlzsnePHkuHMewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCVckVHZKXLiOEGvUh2gsSdkg/bMB8GA1UdIwQY
MBaAFPA3dKJ2IUuG4KW0+nchvbDjIuCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERkMG9uWWhTNGJncGJUNmR5RzlzT01pNElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xZWQ4ODMtMzc2YS00NWY5LTg4ODQt
YjgxNjIyNjAxMjRmLzEvOERkMG9uWWhTNGJncGJUNmR5RzlzT01pNElBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xZWQ4ODMtMzc2YS00NWY5LTg4ODQtYjgxNjIyNjAxMjRm
LzEvOERkMG9uWWhTNGJncGJUNmR5RzlzT01pNElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5NB93kK
UR1NomBgTc/+fAdHF5w+MvHhSTsSJSwqVbIjgZ+UM/wrpXIlO20xtn6JSsGny6gS
Kpd5SGdpSxqDiq5ZWiL3CaUQ0L6EqXWnOW0QL69z+oVmZOaft6syJUUu0BgByut1
nF2jrlqkePIppAVapGKAHdEnmiYAndv2H2Z62ksjMFm6buxe+Z9FdRmO7kqPmS7D
aPN5CSh5u9uD95nP7jx3X038eQCSQna3nFEHStGogSv6W7ksJ9eNPI0cKm+Xesp9
JiB4O7JfQ/5bQBN14tpQ+w74646t+vn4sWekWZz6N43iR62Fqn/NSpXTZiGJaGR9
nrRyT2Yy70mktg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:37 2026 by rpki-client