Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: 5vebC6WC/RUUYwEAFMB5YwqaR/RhQdBZpVQtgkaCVFY=
Subject key identifier: 0C:21:4C:68:4D:04:45:56:88:0D:CA:14:CB:3C:C9:7F:DA:FB:DC:C3
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 01A13D4A1D8E6460AA3F8AE1DA24D5CEAAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 17E2
Signing time: Thu 15 Oct 2026 02:00:29 +0000
Manifest this update: Thu 15 Oct 2026 02:00:29 +0000
Manifest next update: Fri 16 Oct 2026 02:00:29 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: TR8NH6y/dNz3k3ADoRXEhhIj1HwveerMQVg3+qyY1+c=)
2: 2ztr66xhOcOr2Kq6L1D4fEoRjwo.roa (hash: amz+yTvX9x7rzj0FFfB2aTlKhOEfzIXqA7tCgNwl8L8=)
3: ypNsMEiA0eytbHpILkkUcrUHiuI.asa (hash: MB36B+UQExuZ+YHIlLlB3WxM9/xtf1qsLE+t7spjDH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:1d:8e:64:60:aa:3f:8a:e1:da:24:d5:ce:aa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Oct 15 02:00:29 2026 GMT
Not After : Oct 16 02:00:29 2026 GMT
Subject: CN=0c214c684d044556880dca14cb3cc97fdafbdcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:12:65:05:c3:18:b0:58:8f:3a:dd:ea:0e:
a6:f9:d0:29:2b:26:f6:7b:b4:1a:3d:94:10:c3:a2:
94:a4:e5:e2:e8:36:df:be:06:6b:1e:9e:2f:84:da:
c7:d4:68:5a:00:a1:4e:78:fb:52:d1:9d:fa:5b:79:
58:f9:b2:b7:a7:a4:2a:6e:45:ac:ac:22:f9:ca:cd:
3d:a8:e4:07:0f:78:2a:8f:03:1a:23:30:f6:15:4c:
4c:dc:31:b2:e9:46:6d:3b:a0:46:95:8b:30:6c:f4:
e2:c6:ca:ad:27:ad:e9:1f:8c:03:5f:8d:b6:6b:fb:
d6:ef:4c:92:a0:9f:75:8b:9a:f9:06:d3:82:20:bd:
7d:9e:a4:f1:b3:da:ec:df:7c:e8:f6:16:50:3d:ee:
be:6b:9e:8b:26:63:8d:97:ca:77:91:cc:fa:44:a2:
5e:b6:bd:65:6b:be:33:56:34:48:7d:95:06:08:06:
e2:9e:a0:75:d2:46:b7:04:d9:c6:27:04:d5:96:3e:
c8:f3:db:47:db:ef:3c:17:6e:9a:e2:84:51:83:b9:
ad:f3:92:25:8f:33:4c:e6:dd:ba:9a:60:cf:fd:88:
55:77:21:1e:36:a6:e4:89:90:91:7d:d1:ac:f6:92:
dd:69:da:6c:4a:34:33:f6:ab:c8:9f:54:aa:77:93:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:21:4C:68:4D:04:45:56:88:0D:CA:14:CB:3C:C9:7F:DA:FB:DC:C3
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:20:79:58:5c:26:f2:9c:f0:62:06:5e:c1:41:42:66:8a:c5:
a5:6d:bd:9b:7b:60:18:8d:22:cc:a1:05:20:c8:e2:46:4f:1a:
96:6b:10:e0:9f:6b:d5:b4:00:44:cd:be:c2:e0:31:e0:ff:5a:
0a:04:91:fe:7d:90:fe:e3:22:ed:7c:7e:58:51:e9:d1:88:dc:
bb:e3:bb:d7:71:cd:cc:9a:ff:35:13:e0:0f:a4:f1:57:38:3f:
64:42:fe:71:4e:9f:d0:d1:bc:d4:69:e6:23:9d:22:d6:72:d5:
80:8e:14:f6:83:15:83:99:86:ad:1d:67:c5:54:a4:78:48:f0:
2c:74:59:23:27:45:ea:08:c2:80:ed:65:80:b1:f6:76:b8:fd:
be:39:42:2b:dc:82:fd:84:62:da:d5:b4:84:fa:2e:af:ab:6c:
1a:61:61:c4:99:67:d1:c5:3c:5d:21:25:bb:e5:a8:72:5f:39:
c2:4f:cb:d3:cf:68:94:28:75:55:12:f4:33:a5:f7:ce:8a:92:
af:99:d2:f3:10:e6:a9:87:93:e9:7a:29:08:8a:6e:35:bc:40:
42:31:68:e7:64:8b:d6:79:6a:bf:10:4f:f5:9c:72:bf:d1:65:
04:70:1e:ed:be:ce:db:56:9d:8a:a1:f7:d7:89:ad:75:0f:a5:
17:a4:0a:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9Sh2OZGCqP4rh2iTVzqrXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2YwZmJkNWY2ZTE3NTk5MDNjYzY5ZGUwZGM0ZWEyNGMx
ZjgzZGYwHhcNMjYxMDE1MDIwMDI5WhcNMjYxMDE2MDIwMDI5WjAzMTEwLwYDVQQD
EygwYzIxNGM2ODRkMDQ0NTU2ODgwZGNhMTRjYjNjYzk3ZmRhZmJkY2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEkSZQXDGLBYjzrd6g6m+dApKyb2
e7QaPZQQw6KUpOXi6DbfvgZrHp4vhNrH1GhaAKFOePtS0Z36W3lY+bK3p6QqbkWs
rCL5ys09qOQHD3gqjwMaIzD2FUxM3DGy6UZtO6BGlYswbPTixsqtJ63pH4wDX422
a/vW70ySoJ91i5r5BtOCIL19nqTxs9rs33zo9hZQPe6+a56LJmONl8p3kcz6RKJe
tr1la74zVjRIfZUGCAbinqB10ka3BNnGJwTVlj7I89tH2+88F26a4oRRg7mt85Il
jzNM5t26mmDP/YhVdyEeNqbkiZCRfdGs9pLdadpsSjQz9qvIn1Sqd5PKfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwhTGhNBEVWiA3KFMs8yX/a+9zDMB8GA1UdIwQY
MBaAFNTPD71fbhdZkDzGneDcTqJMH4PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMt
NTg1N2YxYzE3NjI0LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMtNTg1N2YxYzE3NjI0
LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyB5WFwm
8pzwYgZewUFCZorFpW29m3tgGI0izKEFIMjiRk8almsQ4J9r1bQARM2+wuAx4P9a
CgSR/n2Q/uMi7Xx+WFHp0Yjcu+O713HNzJr/NRPgD6TxVzg/ZEL+cU6f0NG81Gnm
I50i1nLVgI4U9oMVg5mGrR1nxVSkeEjwLHRZIydF6gjCgO1lgLH2drj9vjlCK9yC
/YRi2tW0hPour6tsGmFhxJln0cU8XSElu+Wocl85wk/L089olCh1VRL0M6X3zoqS
r5nS8xDmqYeT6XopCIpuNbxAQjFo52SL1nlqvxBP9Zxyv9FlBHAe7b7O21adiqH3
14mtdQ+lF6QKtA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:22:42 2026 by rpki-client