Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
File: 1-w8AoW8RYMy3oFQNkqyohm6YeI.mft (raw, json)
Hash identifier: RRdc9QxPB5w1PA/NWXR8OZ1yNBJn5Tt7qfYJqBQcA88=
Subject key identifier: 32:2A:DD:5C:36:0B:09:5F:AF:01:12:45:86:4E:9D:6F:7A:BF:03:38
Authority key identifier: D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
Certificate issuer: /CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Certificate serial: 01A03FE02BE477B618D9B60832695941CC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
Manifest number: 03C0
Signing time: Wed 26 Aug 2026 21:00:50 +0000
Manifest this update: Wed 26 Aug 2026 21:00:50 +0000
Manifest next update: Thu 27 Aug 2026 21:00:50 +0000
Files and hashes: 1: 1-w8AoW8RYMy3oFQNkqyohm6YeI.crl (hash: HDqtw5Y/6ibS/bAZkHLltZe4A4efb9FJd9FB4srM1lA=)
2: fGmytEtcKCBxP_COaX3EzxixmEo.roa (hash: 91bs2HcwyIQ9LFJt+Drla5dzPgI0WfHKEyPyA0R0pa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:2b:e4:77:b6:18:d9:b6:08:32:69:59:41:cc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Validity
Not Before: Aug 26 21:00:50 2026 GMT
Not After : Aug 27 21:00:50 2026 GMT
Subject: CN=322add5c360b095faf011245864e9d6f7abf0338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:8d:94:31:88:48:62:c1:b2:39:47:42:42:
ef:f9:04:61:1b:42:39:fa:37:83:82:8a:05:d1:73:
77:76:65:a4:60:b4:0f:a8:3d:d3:04:b2:f5:6b:ca:
50:fd:aa:f8:e2:13:11:39:0f:b9:40:72:59:91:76:
0b:72:db:3b:11:c8:b7:34:9b:95:43:a7:3e:d6:c8:
97:dc:e1:d0:c1:8d:a4:5e:9f:65:e2:42:7f:3b:7c:
e1:85:d8:c9:67:a8:1a:27:5a:9e:c4:d7:4b:cc:41:
6c:c0:bf:22:2a:bf:2d:c8:f1:c0:e1:d0:6e:3d:72:
71:61:e6:52:d9:ac:1f:17:ea:8a:11:6f:63:26:04:
94:f1:09:b1:e2:77:50:4e:d0:30:e1:4e:85:cc:c8:
e3:c1:bb:21:f5:aa:1b:5e:f9:fa:ca:2e:61:fd:56:
bc:fd:26:e0:3b:27:cd:16:cb:f7:97:88:d9:c1:bb:
de:d3:4a:17:a5:18:e7:42:ac:64:a0:03:ec:e5:01:
c3:d4:d8:fb:e8:d6:8b:11:9d:d6:a7:64:c3:1d:bc:
aa:3e:c9:af:fc:af:d5:f6:b8:35:50:f1:3d:16:7e:
5e:39:d5:da:aa:18:d9:79:ed:7f:53:74:03:17:51:
d2:f2:9d:be:ff:08:4d:e4:ea:68:08:fe:b8:54:7a:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2A:DD:5C:36:0B:09:5F:AF:01:12:45:86:4E:9D:6F:7A:BF:03:38
X509v3 Authority Key Identifier:
keyid:D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:26:fe:4c:50:c1:fd:40:dd:42:74:b7:9e:20:ec:6f:c9:22:
c6:47:56:51:2b:9a:89:5f:fd:d1:28:62:e3:8c:f7:43:d0:54:
bd:09:51:48:dd:0a:23:f8:11:85:45:80:b8:f5:b2:4e:8e:7b:
55:1b:a1:74:ae:c9:bd:c1:61:4c:81:40:16:fb:05:a2:80:c1:
5d:d6:82:4c:43:c0:c3:fd:e8:01:a0:04:50:08:7e:37:b2:3d:
e9:5f:4d:21:68:54:cd:fe:79:66:a6:dd:9c:57:71:fa:e7:36:
10:1c:64:98:75:bc:6c:46:55:ee:e7:bc:ce:89:82:d5:1d:cb:
45:b5:90:c7:18:61:1e:d1:54:27:a4:cc:3b:eb:fd:fd:64:6b:
1c:e0:db:ed:a3:53:73:6f:c6:32:de:7a:9c:b2:9b:ab:a1:52:
9f:ff:6e:86:24:cb:ec:eb:3d:e4:1b:27:02:e6:86:b9:dc:db:
b3:79:b1:67:51:ef:ce:c0:a8:7b:6b:0e:5e:0d:35:70:a7:92:
56:e7:fc:6c:f6:69:28:67:75:62:87:fc:74:65:23:20:6b:66:
1b:19:ca:40:0e:59:a3:de:c2:3e:a5:66:dc:9a:b5:be:0e:b0:
65:1d:95:b7:e2:48:61:44:b1:a6:97:a1:eb:ba:ec:a2:99:8d:
1f:a6:67:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/4Cvkd7YY2bYIMmlZQcxAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZWMzYzAyODViYzQ1ODMzMmRlODE1MDM2NGFiMmEyMTli
YTYxZTIwHhcNMjYwODI2MjEwMDUwWhcNMjYwODI3MjEwMDUwWjAzMTEwLwYDVQQD
EygzMjJhZGQ1YzM2MGIwOTVmYWYwMTEyNDU4NjRlOWQ2ZjdhYmYwMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqECNlDGISGLBsjlHQkLv+QRhG0I5
+jeDgooF0XN3dmWkYLQPqD3TBLL1a8pQ/ar44hMROQ+5QHJZkXYLcts7Eci3NJuV
Q6c+1siX3OHQwY2kXp9l4kJ/O3zhhdjJZ6gaJ1qexNdLzEFswL8iKr8tyPHA4dBu
PXJxYeZS2awfF+qKEW9jJgSU8Qmx4ndQTtAw4U6FzMjjwbsh9aobXvn6yi5h/Va8
/SbgOyfNFsv3l4jZwbve00oXpRjnQqxkoAPs5QHD1Nj76NaLEZ3Wp2TDHbyqPsmv
/K/V9rg1UPE9Fn5eOdXaqhjZee1/U3QDF1HS8p2+/whN5OpoCP64VHpvPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIq3Vw2CwlfrwESRYZOnW96vwM4MB8GA1UdIwQY
MBaAFNfsPAKFvEWDMt6BUDZKsqIZumHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13OEFvVzhSWU15M29GUU5rcXlvaG02WWVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iNTlkM2MtOWRlZi00Y2NmLWE5ZGEt
MWIzMzc5YWZmNTFkLzEvMS13OEFvVzhSWU15M29GUU5rcXlvaG02WWVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iNTlkM2MtOWRlZi00Y2NmLWE5ZGEtMWIzMzc5YWZmNTFk
LzEvMS13OEFvVzhSWU15M29GUU5rcXlvaG02WWVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSb+TFDB
/UDdQnS3niDsb8kixkdWUSuaiV/90Shi44z3Q9BUvQlRSN0KI/gRhUWAuPWyTo57
VRuhdK7JvcFhTIFAFvsFooDBXdaCTEPAw/3oAaAEUAh+N7I96V9NIWhUzf55Zqbd
nFdx+uc2EBxkmHW8bEZV7ue8zomC1R3LRbWQxxhhHtFUJ6TMO+v9/WRrHODb7aNT
c2/GMt56nLKbq6FSn/9uhiTL7Os95BsnAuaGudzbs3mxZ1HvzsCoe2sOXg01cKeS
Vuf8bPZpKGd1Yof8dGUjIGtmGxnKQA5Zo97CPqVm3Jq1vg6wZR2Vt+JIYUSxppeh
67rsopmNH6Znow==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:46 2026 by rpki-client