Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: xryRz+rhCQFiLychmLkpM7hLW+YvkONO96Iu6pXkSvk=
Subject key identifier: 99:2D:A7:00:76:B3:80:36:75:D1:3B:C4:09:F8:4E:76:95:29:E2:B3
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 01A1562EFC324E8C8610242BEF84C94F4341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 1476
Signing time: Mon 19 Oct 2026 22:01:22 +0000
Manifest this update: Mon 19 Oct 2026 22:01:22 +0000
Manifest next update: Tue 20 Oct 2026 22:01:22 +0000
Files and hashes: 1: 2hKU1NYjNBDhpco5HEAK3um-kbE.roa (hash: YhjeByYxX6wVLssUtZI4v3Qulxa9a1zwl57K6O3z8yo=)
2: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: 9f2fPiwF43VqPEO0DMjX6xD7g0rk6Bn6hwJ+eJHIJG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:2e:fc:32:4e:8c:86:10:24:2b:ef:84:c9:4f:43:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Oct 19 22:01:22 2026 GMT
Not After : Oct 20 22:01:22 2026 GMT
Subject: CN=992da70076b3803675d13bc409f84e769529e2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:d9:c6:40:28:37:71:37:aa:84:02:75:45:
ff:68:0a:c1:eb:e0:ca:a2:08:86:65:e8:d1:38:cd:
9d:ff:8a:8b:8d:2a:0a:47:1c:1a:ba:6f:6b:21:27:
88:55:74:09:ba:23:52:b1:6b:04:d6:1e:9f:2c:bd:
04:e9:38:8d:c7:a0:16:82:bc:87:45:b3:da:f7:ae:
6e:f3:18:55:45:66:53:17:05:52:68:35:5b:44:59:
f2:76:d2:7a:4e:83:7c:27:4c:7c:52:10:88:03:1b:
ae:11:8c:5d:7c:ac:e9:05:13:2f:2f:01:17:1b:eb:
7b:c7:6b:81:9a:60:5d:5c:7c:84:6d:bb:29:80:4a:
4e:c1:94:a7:44:f3:58:d1:dd:cd:2a:a7:5d:7e:7f:
68:b0:ab:dd:ad:86:c4:4d:e4:a0:f2:e7:4f:e8:60:
3e:8f:1d:34:80:5e:4a:60:c9:6c:1e:70:67:29:2d:
99:f2:00:fb:be:b7:48:5c:d0:2a:6c:e4:4e:bc:ca:
d8:bf:b5:ec:8e:c1:b3:c5:c6:7c:92:df:f9:e4:8d:
78:e3:e5:d9:b0:1f:a3:ef:bb:98:db:56:e6:9e:8b:
fd:46:e1:5e:d7:ec:45:61:fc:6f:38:13:ba:c3:b6:
c3:99:76:a3:e1:91:2f:f4:62:30:fb:62:a1:8a:83:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2D:A7:00:76:B3:80:36:75:D1:3B:C4:09:F8:4E:76:95:29:E2:B3
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7f:d3:df:d5:ab:0f:67:73:7d:16:5c:46:19:be:34:9a:9e:
f8:2f:d7:96:a3:e3:43:8f:a2:31:6a:b5:f8:b1:13:18:62:2f:
68:d6:25:4d:e6:24:ce:61:40:56:5a:14:fb:3f:d9:f2:d3:dd:
0a:2a:c9:ad:ac:74:35:d5:e2:85:42:2e:d4:f2:c3:90:c2:c3:
2e:db:e2:d1:0d:32:a0:e9:c4:fb:d2:18:fb:a5:84:08:2f:ad:
5c:d8:b9:09:eb:cb:0c:6b:57:db:4b:ff:ef:ad:31:23:16:62:
56:8a:1d:da:8f:1f:1f:2d:d2:41:88:97:e6:88:c9:8d:fa:e9:
43:e9:20:5d:5e:8f:7a:22:f7:cf:76:ad:40:6b:67:b2:77:fd:
73:78:48:fe:8a:f8:fe:a8:22:e7:f6:35:d6:29:0a:76:a5:1d:
ee:fa:1b:e6:12:86:b6:2d:ed:86:44:fd:59:c7:b0:5d:16:9e:
d5:8a:a3:22:b8:5f:e7:20:48:cf:f7:59:bb:3d:3d:d8:21:88:
d1:89:36:61:7e:50:93:73:fa:8c:71:d4:f8:e6:d7:44:a7:78:
b1:fe:4c:05:4f:e2:65:d6:db:4f:eb:97:7a:66:52:bd:2a:f8:
f5:59:84:67:df:16:44:96:de:cc:db:03:1f:32:b3:ae:1b:19:
e0:3a:b8:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFWLvwyToyGECQr74TJT0NBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNzhhY2JjYzQ2ZjEzM2VmZDM5M2Y1MTE2MGZkYmI3NjA3
ZTFlMTYwHhcNMjYxMDE5MjIwMTIyWhcNMjYxMDIwMjIwMTIyWjAzMTEwLwYDVQQD
Eyg5OTJkYTcwMDc2YjM4MDM2NzVkMTNiYzQwOWY4NGU3Njk1MjllMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0DZxkAoN3E3qoQCdUX/aArB6+DK
ogiGZejROM2d/4qLjSoKRxwaum9rISeIVXQJuiNSsWsE1h6fLL0E6TiNx6AWgryH
RbPa965u8xhVRWZTFwVSaDVbRFnydtJ6ToN8J0x8UhCIAxuuEYxdfKzpBRMvLwEX
G+t7x2uBmmBdXHyEbbspgEpOwZSnRPNY0d3NKqddfn9osKvdrYbETeSg8udP6GA+
jx00gF5KYMlsHnBnKS2Z8gD7vrdIXNAqbOROvMrYv7XsjsGzxcZ8kt/55I144+XZ
sB+j77uY21bmnov9RuFe1+xFYfxvOBO6w7bDmXaj4ZEv9GIw+2KhioNQqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJktpwB2s4A2ddE7xAn4TnaVKeKzMB8GA1UdIwQY
MBaAFPJ4rLzEbxM+/Tk/URYP27dgfh4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81MzcyNjctYjI0My00NjU3LTk5ZmYt
OTRiNTE0NDMzYzExLzEvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS81MzcyNjctYjI0My00NjU3LTk5ZmYtOTRiNTE0NDMzYzEx
LzEvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjn/T39Wr
D2dzfRZcRhm+NJqe+C/XlqPjQ4+iMWq1+LETGGIvaNYlTeYkzmFAVloU+z/Z8tPd
CirJrax0NdXihUIu1PLDkMLDLtvi0Q0yoOnE+9IY+6WECC+tXNi5CevLDGtX20v/
760xIxZiVood2o8fHy3SQYiX5ojJjfrpQ+kgXV6PeiL3z3atQGtnsnf9c3hI/or4
/qgi5/Y11ikKdqUd7vob5hKGti3thkT9WcewXRae1YqjIrhf5yBIz/dZuz092CGI
0Yk2YX5Qk3P6jHHU+ObXRKd4sf5MBU/iZdbbT+uXemZSvSr49VmEZ98WRJbezNsD
HzKzrhsZ4Dq44A==
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:59:09 2026 by rpki-client