Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
File: P5oSEPUJkiOdOn8uXoATtatJH_8.mft (raw, json)
Hash identifier: 7e68Butcwyn6sv9GjoVCGqOzNR/uyTPO8rABJ6gqFhM=
Subject key identifier: 70:E0:81:3C:9B:34:87:A6:64:49:BA:E9:BA:62:4E:03:E2:F8:A5:AE
Authority key identifier: 3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
Certificate issuer: /CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Certificate serial: 01A08B68C044879DE3CFFB28FD0D24E46D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
Manifest number: 1616
Signing time: Thu 10 Sep 2026 13:01:32 +0000
Manifest this update: Thu 10 Sep 2026 13:01:32 +0000
Manifest next update: Fri 11 Sep 2026 13:01:32 +0000
Files and hashes: 1: P5oSEPUJkiOdOn8uXoATtatJH_8.crl (hash: bQGKbZ7jyAlawGxICrQjnM+TAM5CMxJ+CGTFYmclbsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:c0:44:87:9d:e3:cf:fb:28:fd:0d:24:e4:6d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Validity
Not Before: Sep 10 13:01:32 2026 GMT
Not After : Sep 11 13:01:32 2026 GMT
Subject: CN=70e0813c9b3487a66449bae9ba624e03e2f8a5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d5:fc:69:06:09:24:ad:9b:ef:36:18:47:5d:
d9:62:cd:8f:29:35:92:6a:26:c1:52:37:03:41:75:
6c:75:9f:5d:87:a9:06:b3:ce:f0:0f:c5:79:9e:c8:
cd:88:c9:2c:dd:e1:1f:8b:f4:3b:db:f4:62:57:9f:
db:8a:af:53:d2:21:c9:37:9f:10:50:22:ca:b6:65:
e5:4c:13:8a:e2:4d:c2:98:05:b5:c8:8e:c6:71:54:
e2:d2:6a:89:5a:9c:3a:5f:ad:78:e4:64:b3:90:96:
8a:b9:73:5b:8d:cd:98:4d:a9:e8:eb:67:4a:79:61:
0a:3b:40:56:bd:64:42:de:a5:54:fe:15:7f:7a:78:
a3:ee:7b:6e:01:ec:7c:32:df:9b:f4:e0:f0:58:2a:
57:56:92:99:0f:08:8a:78:7e:63:0b:92:49:ef:fe:
09:ba:bc:0f:41:03:fe:83:cf:9c:43:46:47:3a:f3:
fb:b7:45:74:bc:ea:34:61:ad:17:cc:2d:3f:d4:66:
ed:0b:89:85:d5:9b:94:40:97:39:f1:61:40:c1:d9:
5f:69:88:65:28:a8:17:7b:6d:04:5e:b2:00:e4:df:
c1:1b:4e:54:0f:da:ef:08:5a:54:b9:7d:2d:ec:19:
43:6e:61:6d:9c:53:0f:03:8e:cf:31:bb:ec:c9:38:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E0:81:3C:9B:34:87:A6:64:49:BA:E9:BA:62:4E:03:E2:F8:A5:AE
X509v3 Authority Key Identifier:
keyid:3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ca:1a:20:58:f6:d0:c8:77:8d:ac:89:7d:64:e3:31:20:30:
53:a8:5e:01:9a:c2:f2:2f:0a:0e:53:06:e1:57:3c:fd:a8:a7:
ea:e4:22:c5:1f:e0:e0:5d:57:4f:fd:25:c7:20:6d:63:83:0d:
88:b5:36:16:3a:4e:cc:16:e6:2d:f4:de:fb:cf:2c:78:c4:74:
3a:0d:b2:e1:eb:fe:d0:34:ef:4f:12:a1:55:99:e8:c1:18:52:
7d:b7:40:36:dc:23:95:04:61:3d:e7:ba:f9:ea:2d:82:a9:39:
fb:82:10:64:a3:29:eb:75:9d:11:38:ec:bd:ef:d3:18:9b:1f:
d8:a0:ff:10:25:61:3a:c7:e1:f9:a7:af:5e:38:90:d9:18:e0:
45:cb:e3:d5:6a:76:41:dc:25:bd:dc:3f:a0:e5:80:80:a9:f0:
74:d9:61:f9:ed:b1:84:10:e7:1d:0b:e2:34:6b:69:19:c9:68:
82:d0:c0:81:c0:ce:80:84:fb:35:5d:23:4b:c3:2e:af:55:1e:
f5:8b:4e:8f:2e:d5:c6:77:3a:25:88:5c:c4:fe:e0:0b:81:9c:
d6:8c:d6:b9:5c:1d:df:2c:e1:64:79:ff:c7:4b:ca:0e:b2:e3:
66:18:be:e0:1d:33:89:a0:71:12:ef:88:34:50:a5:6a:8a:69:
0c:a6:2b:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaMBEh53jz/so/Q0k5G0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOWExMjEwZjUwOTkyMjM5ZDNhN2YyZTVlODAxM2I1YWI0
OTFmZmYwHhcNMjYwOTEwMTMwMTMyWhcNMjYwOTExMTMwMTMyWjAzMTEwLwYDVQQD
Eyg3MGUwODEzYzliMzQ4N2E2NjQ0OWJhZTliYTYyNGUwM2UyZjhhNWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNX8aQYJJK2b7zYYR13ZYs2PKTWS
aibBUjcDQXVsdZ9dh6kGs87wD8V5nsjNiMks3eEfi/Q72/RiV5/biq9T0iHJN58Q
UCLKtmXlTBOK4k3CmAW1yI7GcVTi0mqJWpw6X6145GSzkJaKuXNbjc2YTano62dK
eWEKO0BWvWRC3qVU/hV/enij7ntuAex8Mt+b9ODwWCpXVpKZDwiKeH5jC5JJ7/4J
urwPQQP+g8+cQ0ZHOvP7t0V0vOo0Ya0XzC0/1GbtC4mF1ZuUQJc58WFAwdlfaYhl
KKgXe20EXrIA5N/BG05UD9rvCFpUuX0t7BlDbmFtnFMPA47PMbvsyTjjvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDggTybNIemZEm66bpiTgPi+KWuMB8GA1UdIwQY
MBaAFD+aEhD1CZIjnTp/Ll6AE7WrSR//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNGE1ZTgtZjNiZi00MmY5LWEyODUt
YTg3MzRmNzAzYjk4LzEvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNGE1ZTgtZjNiZi00MmY5LWEyODUtYTg3MzRmNzAzYjk4
LzEvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvcoaIFj2
0Mh3jayJfWTjMSAwU6heAZrC8i8KDlMG4Vc8/ain6uQixR/g4F1XT/0lxyBtY4MN
iLU2FjpOzBbmLfTe+88seMR0Og2y4ev+0DTvTxKhVZnowRhSfbdANtwjlQRhPee6
+eotgqk5+4IQZKMp63WdETjsve/TGJsf2KD/ECVhOsfh+aevXjiQ2RjgRcvj1Wp2
Qdwlvdw/oOWAgKnwdNlh+e2xhBDnHQviNGtpGclogtDAgcDOgIT7NV0jS8Mur1Ue
9YtOjy7Vxnc6JYhcxP7gC4Gc1ozWuVwd3yzhZHn/x0vKDrLjZhi+4B0ziaBxEu+I
NFClaoppDKYrDw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:13:30 2026 by rpki-client