Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: 5Jcso8zB4aFT0nlGLji2zFCN6NIrddzJc14iHW3uT4s=
Subject key identifier: 2E:24:00:AD:37:AE:43:18:68:C9:79:D8:38:6D:92:37:67:44:67:E0
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 01A13F394900D79B07E43EB66DBD2A06A622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 11:01:21 +0000
Manifest this update: Thu 15 Oct 2026 11:01:21 +0000
Manifest next update: Fri 16 Oct 2026 11:01:21 +0000
Files and hashes: 1: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: OIUa9rVsXUHPDBWXKJjV9RxV5i5heCkdOXX9gSMYYDs=)
2: Rm3DWdCGv6N3AGtlgwwUaBhNvo8.roa (hash: mKMA8v5enBshub8zpH+FWCvpU25kENVUShbbazleOWE=)
3: U_rat5lH-1OBTjZW3Kpv35l2bnY.roa (hash: RWS/4jTw+B9QckGKnUwmlAnGx+MDkdaAdkO4bYQ9r8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:49:00:d7:9b:07:e4:3e:b6:6d:bd:2a:06:a6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Oct 15 11:01:21 2026 GMT
Not After : Oct 16 11:01:21 2026 GMT
Subject: CN=2e2400ad37ae431868c979d8386d9237674467e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:8d:f3:17:32:50:4d:7e:9d:d9:b4:b6:ca:
70:56:9c:3f:29:f2:32:74:01:4f:af:f9:10:53:85:
5d:c0:6d:6f:ab:c5:02:bf:c0:39:e5:6f:f7:3a:6e:
a9:ba:f7:95:d8:4d:b3:27:16:ae:db:05:40:10:c9:
c1:e0:19:d4:c7:fe:de:f7:f0:8d:c9:1a:e3:c4:13:
e9:7d:b8:a8:f6:53:03:c3:7d:19:2a:67:90:98:30:
ee:47:1a:8f:e6:e3:5f:31:86:e7:f7:34:a0:2d:ab:
0a:f5:a6:0c:0f:01:dc:89:b3:09:31:47:6a:74:56:
c0:f1:2b:eb:1e:83:6e:89:3a:ab:3d:1d:24:06:3c:
ac:d1:a7:a7:b1:5f:18:18:38:97:00:85:9d:5b:29:
0b:de:8b:79:45:dd:1b:91:fc:67:37:8e:c7:1e:2e:
86:b9:93:17:2d:87:42:8d:91:93:96:60:33:7b:0c:
6a:a5:84:21:81:06:f1:0f:c2:44:50:2d:18:dc:fc:
66:83:0d:f9:d5:66:04:be:d3:5b:62:37:40:15:4c:
ba:1c:fc:52:41:a5:0e:06:15:60:12:15:72:8e:84:
56:5e:a9:ab:74:a1:df:a8:5d:72:a1:d2:44:e1:21:
9e:9c:d0:df:ea:2f:b6:cb:4f:c7:4c:a9:ba:61:d4:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:24:00:AD:37:AE:43:18:68:C9:79:D8:38:6D:92:37:67:44:67:E0
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:89:c5:a8:eb:d0:a4:23:bd:8b:cf:9b:3c:f3:5e:9a:62:85:
2d:27:94:24:34:e9:a5:32:f5:bb:cf:53:57:26:1c:18:b4:2b:
4b:50:2f:11:28:44:ed:e9:a5:99:8f:1d:f5:75:19:5e:3d:e6:
de:64:8a:c1:e5:21:1f:ef:0a:90:10:46:49:03:79:c2:b4:df:
5e:a8:84:0c:7e:51:07:97:95:db:04:71:e9:80:d4:d2:af:04:
2d:8c:11:e0:4c:40:84:6d:b0:cc:d3:34:ac:3b:09:32:4b:74:
b3:6f:25:92:21:59:71:83:ff:55:26:19:c7:48:86:83:8d:6a:
70:e2:f9:3d:16:a7:d3:db:46:dc:00:eb:69:61:e2:28:db:8e:
59:2d:a3:c7:25:27:04:e0:9a:87:ac:d4:ba:32:a2:60:3b:a3:
ee:80:3d:42:50:da:55:33:27:20:d7:1e:f3:62:12:d9:f6:2b:
7d:a8:86:21:13:96:e3:5e:c3:de:6a:56:0c:49:08:8b:b4:a7:
6a:3e:cf:85:13:63:d4:ca:34:dd:06:89:98:44:1a:8a:d5:de:
ed:10:1f:e2:a9:e8:e1:12:6a:5d:a5:2f:60:9c:34:25:56:13:
1a:eb:da:ef:2b:e5:30:b2:1e:71:56:44:9e:ab:9f:02:21:50:
26:b7:3a:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/OUkA15sH5D62bb0qBqYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmUzMjI0ZTNlMzI5MjgxOTI2MjhkMjY0ODdkNTAwZjI3
MDc3NjUwHhcNMjYxMDE1MTEwMTIxWhcNMjYxMDE2MTEwMTIxWjAzMTEwLwYDVQQD
EygyZTI0MDBhZDM3YWU0MzE4NjhjOTc5ZDgzODZkOTIzNzY3NDQ2N2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaeN8xcyUE1+ndm0tspwVpw/KfIy
dAFPr/kQU4VdwG1vq8UCv8A55W/3Om6puveV2E2zJxau2wVAEMnB4BnUx/7e9/CN
yRrjxBPpfbio9lMDw30ZKmeQmDDuRxqP5uNfMYbn9zSgLasK9aYMDwHcibMJMUdq
dFbA8SvrHoNuiTqrPR0kBjys0aensV8YGDiXAIWdWykL3ot5Rd0bkfxnN47HHi6G
uZMXLYdCjZGTlmAzewxqpYQhgQbxD8JEUC0Y3Pxmgw351WYEvtNbYjdAFUy6HPxS
QaUOBhVgEhVyjoRWXqmrdKHfqF1yodJE4SGenNDf6i+2y0/HTKm6YdSiUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4kAK03rkMYaMl52DhtkjdnRGfgMB8GA1UdIwQY
MBaAFPAuMiTj4ykoGSYo0mSH1QDycHdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNjg4OTAtZDUwOS00NTFlLWI5ZWUt
ZmI5OTUzYzA3ZjE1LzEvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNjg4OTAtZDUwOS00NTFlLWI5ZWUtZmI5OTUzYzA3ZjE1
LzEvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsInFqOvQ
pCO9i8+bPPNemmKFLSeUJDTppTL1u89TVyYcGLQrS1AvEShE7emlmY8d9XUZXj3m
3mSKweUhH+8KkBBGSQN5wrTfXqiEDH5RB5eV2wRx6YDU0q8ELYwR4ExAhG2wzNM0
rDsJMkt0s28lkiFZcYP/VSYZx0iGg41qcOL5PRan09tG3ADraWHiKNuOWS2jxyUn
BOCah6zUujKiYDuj7oA9QlDaVTMnINce82IS2fYrfaiGIROW417D3mpWDEkIi7Sn
aj7PhRNj1Mo03QaJmEQaitXe7RAf4qno4RJqXaUvYJw0JVYTGuva7yvlMLIecVZE
nqufAiFQJrc6kw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:32 2026 by rpki-client