Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
File: ih8K1VcrribjnIdAxoqPu0buSGQ.mft (raw, json)
Hash identifier: 40Zy0/Ak5WhQpwl0z5IyE68rhjbgA8cXVAg8VYFWNrY=
Subject key identifier: 9B:BF:A9:C1:F3:85:3E:C5:FA:5C:A7:9D:70:14:2E:B6:3F:9C:D2:B3
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial: 01A1506333581F7E6D69E1C6706809146811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
Manifest number: 0E3F
Signing time: Sun 18 Oct 2026 19:00:40 +0000
Manifest this update: Sun 18 Oct 2026 19:00:40 +0000
Manifest next update: Mon 19 Oct 2026 19:00:40 +0000
Files and hashes: 1: ih8K1VcrribjnIdAxoqPu0buSGQ.crl (hash: kR5+IFTETNatsxBxnEjuGnYt0NtMTT87RovmLB5Mi5E=)
2: xMgS7QD9_G9EOx5x98EDuY-9yGs.roa (hash: hMlsCv6vl96geP53LLF12LxkGDU69mGZggpEWqFm3G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:63:33:58:1f:7e:6d:69:e1:c6:70:68:09:14:68:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Validity
Not Before: Oct 18 19:00:40 2026 GMT
Not After : Oct 19 19:00:40 2026 GMT
Subject: CN=9bbfa9c1f3853ec5fa5ca79d70142eb63f9cd2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:ad:cd:c7:e1:52:42:9b:73:80:43:f9:22:
5f:2e:93:e0:30:cf:03:a9:7a:2d:68:cd:86:2a:ad:
f9:c0:af:5a:ee:f5:f2:3f:a0:98:3e:f6:06:44:44:
0e:38:ad:eb:c3:95:18:b6:d5:27:65:bd:55:18:64:
cc:f4:64:31:5e:c9:c8:55:ea:48:30:25:d8:bf:89:
94:6e:bc:89:93:9b:1a:cc:88:d6:d5:c9:96:7b:a2:
a8:1e:4f:51:b0:79:cd:39:64:ce:72:44:ea:cd:48:
1c:bb:1d:db:28:c7:1b:cc:ca:52:05:b9:9a:ab:f6:
cc:db:84:0e:2b:19:42:23:62:92:53:c3:0a:8a:b9:
fe:54:04:2f:77:25:2d:02:e1:57:d2:27:7d:f9:3c:
aa:a6:cc:74:93:45:c2:4e:d3:89:45:29:16:d4:0c:
99:54:cb:9f:4b:84:53:28:d4:bc:dc:d1:2c:1b:a7:
cc:c8:4f:e2:c7:a0:19:38:d6:8a:df:99:a3:ea:fe:
9a:f1:fe:4f:c4:35:1c:7a:40:3f:22:cd:2e:14:0e:
ac:08:22:c2:2a:ac:0a:58:37:be:30:d5:bf:22:9c:
d8:d3:ed:5f:af:36:f0:af:7c:76:96:47:53:bd:06:
d5:1c:f6:46:2d:25:ae:f8:57:fd:e0:ba:07:dd:e3:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BF:A9:C1:F3:85:3E:C5:FA:5C:A7:9D:70:14:2E:B6:3F:9C:D2:B3
X509v3 Authority Key Identifier:
keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:07:10:30:77:9c:ef:94:eb:53:30:09:d5:58:28:5a:69:5c:
49:f0:2f:cc:e6:91:7d:b7:cb:0e:20:22:c7:f5:1a:07:80:54:
19:78:f4:7c:7d:27:e0:bf:70:d1:2f:0e:a5:be:8c:97:f2:8d:
fc:51:8b:cc:e1:3b:d2:f3:0a:ef:d3:6e:38:50:af:ef:6e:4a:
1c:6a:3e:b9:4a:6d:87:45:1c:db:3c:70:c0:8b:29:11:c6:41:
1d:6c:fe:b9:99:89:e2:05:82:29:59:2a:3f:05:5e:38:fe:e8:
98:a8:58:a5:cb:b3:57:eb:2f:d9:62:eb:65:5c:9c:e1:ed:f4:
6d:60:d6:71:ec:c6:3b:a6:c4:bb:37:e4:89:c3:a6:85:50:7b:
24:9a:54:0a:8f:c4:53:33:53:46:4f:66:ca:c5:cc:9f:42:b8:
a3:e4:e5:09:92:c8:28:4c:b8:a2:ce:9d:ea:79:73:20:9f:6e:
e2:2f:fd:62:6d:ca:71:5e:2c:37:82:3f:ae:fb:35:a4:ff:b9:
5a:cf:c7:b1:64:3b:c7:c6:d5:e1:ef:a1:86:38:3e:db:19:b3:
d6:ed:5c:13:0b:7b:22:9c:ee:68:2f:ee:e7:14:a4:d9:52:11:
02:08:3b:79:23:26:75:b2:09:bc:1e:1c:e6:8c:17:46:92:f9:
f1:a4:cd:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFQYzNYH35taeHGcGgJFGgRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWYwYWQ1NTcyYmFlMjZlMzljODc0MGM2OGE4ZmJiNDZl
ZTQ4NjQwHhcNMjYxMDE4MTkwMDQwWhcNMjYxMDE5MTkwMDQwWjAzMTEwLwYDVQQD
Eyg5YmJmYTljMWYzODUzZWM1ZmE1Y2E3OWQ3MDE0MmViNjNmOWNkMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmACtzcfhUkKbc4BD+SJfLpPgMM8D
qXotaM2GKq35wK9a7vXyP6CYPvYGREQOOK3rw5UYttUnZb1VGGTM9GQxXsnIVepI
MCXYv4mUbryJk5sazIjW1cmWe6KoHk9RsHnNOWTOckTqzUgcux3bKMcbzMpSBbma
q/bM24QOKxlCI2KSU8MKirn+VAQvdyUtAuFX0id9+Tyqpsx0k0XCTtOJRSkW1AyZ
VMufS4RTKNS83NEsG6fMyE/ix6AZONaK35mj6v6a8f5PxDUcekA/Is0uFA6sCCLC
KqwKWDe+MNW/IpzY0+1frzbwr3x2lkdTvQbVHPZGLSWu+Ff94LoH3eMaXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJu/qcHzhT7F+lynnXAULrY/nNKzMB8GA1UdIwQY
MBaAFIofCtVXK64m45yHQMaKj7tG7khkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzkt
MDNmMjNhNzM5NDFkLzEvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzktMDNmMjNhNzM5NDFk
LzEvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgcQMHec
75TrUzAJ1VgoWmlcSfAvzOaRfbfLDiAix/UaB4BUGXj0fH0n4L9w0S8Opb6Ml/KN
/FGLzOE70vMK79NuOFCv725KHGo+uUpth0Uc2zxwwIspEcZBHWz+uZmJ4gWCKVkq
PwVeOP7omKhYpcuzV+sv2WLrZVyc4e30bWDWcezGO6bEuzfkicOmhVB7JJpUCo/E
UzNTRk9mysXMn0K4o+TlCZLIKEy4os6d6nlzIJ9u4i/9Ym3KcV4sN4I/rvs1pP+5
Ws/HsWQ7x8bV4e+hhjg+2xmz1u1cEwt7IpzuaC/u5xSk2VIRAgg7eSMmdbIJvB4c
5owXRpL58aTNTw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:43:01 2026 by rpki-client