Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: N5bT59k4gAPuSFFYFii56gclelhV9E3OLEs5yfbHS9c=
Subject key identifier: 67:D4:DE:4B:03:12:E4:64:EE:53:AA:53:3C:80:E9:C5:A6:FD:61:96
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 01A149BD914633DDAA4BBD49F9F7A6F3F0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 11E5
Signing time: Sat 17 Oct 2026 12:02:02 +0000
Manifest this update: Sat 17 Oct 2026 12:02:02 +0000
Manifest next update: Sun 18 Oct 2026 12:02:02 +0000
Files and hashes: 1: XEPF7uppLjcGaqRN3wLfKBoo6xs.roa (hash: rUx2aHlQsnFopfmDQOlAInYswjrrWcWiZT3IoOgNBhk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: 2G/SMejucA0brVPDyS8r2PVpjk6SD3ypHOLjYgnp19w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:bd:91:46:33:dd:aa:4b:bd:49:f9:f7:a6:f3:f0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Oct 17 12:02:02 2026 GMT
Not After : Oct 18 12:02:02 2026 GMT
Subject: CN=67d4de4b0312e464ee53aa533c80e9c5a6fd6196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:1e:b5:58:cb:fd:f5:f4:05:5c:5f:47:ee:
60:c7:ce:48:68:d1:3e:64:be:cc:48:42:5f:4c:43:
86:b9:86:71:ee:06:1a:cc:ac:d9:e6:6f:e2:59:e9:
25:a6:52:ea:54:8b:4f:ae:07:80:32:93:fc:56:15:
b6:b8:48:ec:41:33:f1:94:92:f7:5b:c7:9f:99:f2:
b4:cf:f4:ae:94:ff:53:9f:68:58:c6:25:9e:82:4a:
bd:68:c3:1b:b2:6f:51:bd:49:01:5d:f0:49:03:9f:
fd:83:62:be:f4:c2:e6:fc:38:ea:26:f4:cf:8a:a3:
36:e7:96:b7:27:80:16:5a:84:5e:88:39:5b:9b:93:
b4:a2:e3:f9:a5:86:14:ae:b9:0d:6e:6f:9b:8b:80:
db:0f:a9:45:fc:18:81:e2:78:58:c2:44:5e:c0:4a:
75:53:22:37:b7:58:fa:e6:69:74:0f:6c:cb:d1:ab:
88:e0:cd:f4:8b:8d:b1:6e:06:de:22:4d:11:16:62:
8d:fd:f6:fe:f7:9e:74:ec:04:41:68:b7:a9:30:30:
9b:db:81:d5:45:87:ab:14:5b:0c:71:e3:e9:c1:fa:
c4:01:56:e1:a3:af:0c:d6:2b:fd:7d:8a:e0:2d:dc:
16:b9:86:6f:20:cf:9c:bd:9b:19:16:42:26:34:b8:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D4:DE:4B:03:12:E4:64:EE:53:AA:53:3C:80:E9:C5:A6:FD:61:96
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8a:ba:77:ea:05:f3:32:d0:c0:1c:6b:95:8d:9f:de:be:4c:
b3:19:e8:d1:7d:8f:68:6c:4a:46:50:a8:37:8f:12:82:6c:e0:
22:5d:6e:a7:ad:df:ec:fd:b6:ef:72:e6:68:2a:d5:8c:9e:0c:
a4:c9:68:3d:d4:c3:fe:14:13:9c:5f:03:d6:9d:97:bb:f2:d9:
93:a4:cb:b0:74:42:bc:78:59:b9:25:f3:2a:e3:d4:b5:08:d8:
94:78:51:9d:cf:c3:81:a8:ce:71:a1:58:64:e2:fd:5c:3e:c2:
e8:ae:48:1f:9b:5b:24:ff:ab:2c:e3:9b:41:ea:bd:a3:8f:cf:
c0:f0:a1:6b:76:de:39:d8:93:b9:27:98:a7:35:4b:e3:50:df:
9c:71:de:07:c2:79:6b:0a:ec:46:41:b8:08:f7:b8:af:4f:c7:
13:b3:ee:81:76:91:90:e3:d3:0b:ca:5b:f9:78:47:22:5d:a7:
3e:d0:24:bc:2c:88:2f:6d:b6:7b:95:e2:90:46:81:98:d3:ea:
20:75:3c:9c:6e:5f:ed:b3:ec:5e:ee:f3:13:56:49:b0:df:1c:
75:7c:d0:c1:07:4b:64:a9:17:f5:dd:4e:d0:b8:15:23:0b:c9:
66:4d:66:4a:fd:46:f0:72:36:65:fc:f7:14:6c:a8:93:5e:80:
f0:d4:d3:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFJvZFGM92qS71J+fem8/DPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYzRjZTc4YTRkMThjYTZlZjMxMDhmNGEzNjU5MDZkYTZi
NmI3ZjMwHhcNMjYxMDE3MTIwMjAyWhcNMjYxMDE4MTIwMjAyWjAzMTEwLwYDVQQD
Eyg2N2Q0ZGU0YjAzMTJlNDY0ZWU1M2FhNTMzYzgwZTljNWE2ZmQ2MTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYQetVjL/fX0BVxfR+5gx85IaNE+
ZL7MSEJfTEOGuYZx7gYazKzZ5m/iWeklplLqVItPrgeAMpP8VhW2uEjsQTPxlJL3
W8efmfK0z/SulP9Tn2hYxiWegkq9aMMbsm9RvUkBXfBJA5/9g2K+9MLm/DjqJvTP
iqM255a3J4AWWoReiDlbm5O0ouP5pYYUrrkNbm+bi4DbD6lF/BiB4nhYwkRewEp1
UyI3t1j65ml0D2zL0auI4M30i42xbgbeIk0RFmKN/fb+95507ARBaLepMDCb24HV
RYerFFsMcePpwfrEAVbho68M1iv9fYrgLdwWuYZvIM+cvZsZFkImNLiRWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfU3ksDEuRk7lOqUzyA6cWm/WGWMB8GA1UdIwQY
MBaAFP/Eznik0Yym7zEI9KNlkG2mtrfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAt
OGQxMDY0ODNlMzZlLzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAtOGQxMDY0ODNlMzZl
LzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYq6d+oF
8zLQwBxrlY2f3r5Msxno0X2PaGxKRlCoN48SgmzgIl1up63f7P2273LmaCrVjJ4M
pMloPdTD/hQTnF8D1p2Xu/LZk6TLsHRCvHhZuSXzKuPUtQjYlHhRnc/DgajOcaFY
ZOL9XD7C6K5IH5tbJP+rLOObQeq9o4/PwPCha3beOdiTuSeYpzVL41DfnHHeB8J5
awrsRkG4CPe4r0/HE7PugXaRkOPTC8pb+XhHIl2nPtAkvCyIL222e5XikEaBmNPq
IHU8nG5f7bPsXu7zE1ZJsN8cdXzQwQdLZKkX9d1O0LgVIwvJZk1mSv1G8HI2Zfz3
FGyok16A8NTTZg==
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:48:12 2026 by rpki-client