Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
File: ih8K1VcrribjnIdAxoqPu0buSGQ.mft (raw, json)
Hash identifier: SPecVmk9W+CJPzDLSCQsoIckmRXRwSZAbscQ1hSe+LQ=
Subject key identifier: 90:23:30:A2:F9:C5:DF:C2:13:45:4F:1B:31:D5:33:6D:12:72:85:52
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial: 01A15BFA1EBC908A5EA78C5CAB46337D2DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
Manifest number: 0E45
Signing time: Wed 21 Oct 2026 01:01:20 +0000
Manifest this update: Wed 21 Oct 2026 01:01:20 +0000
Manifest next update: Thu 22 Oct 2026 01:01:20 +0000
Files and hashes: 1: ih8K1VcrribjnIdAxoqPu0buSGQ.crl (hash: 2MrWipdT7AT/YqThnR3GAs/nVEAD0Zf1Ve7gKJ9mFXs=)
2: xMgS7QD9_G9EOx5x98EDuY-9yGs.roa (hash: hMlsCv6vl96geP53LLF12LxkGDU69mGZggpEWqFm3G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:fa:1e:bc:90:8a:5e:a7:8c:5c:ab:46:33:7d:2d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Validity
Not Before: Oct 21 01:01:20 2026 GMT
Not After : Oct 22 01:01:20 2026 GMT
Subject: CN=902330a2f9c5dfc213454f1b31d5336d12728552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:7a:32:3c:49:3b:21:0a:7c:7f:90:77:36:
32:8b:17:ee:59:5c:6a:e1:7d:be:42:be:2b:46:37:
6d:06:23:21:2e:a2:54:43:09:c1:16:b1:85:a7:e4:
df:aa:50:d2:a1:6b:8a:62:f9:df:36:cb:4d:70:4f:
6a:39:4e:7e:93:71:ee:73:f6:ef:fc:0b:1b:5d:c2:
20:b5:f2:41:f2:04:ab:36:4d:89:91:04:78:f9:5b:
af:90:c5:c2:21:cc:0c:9e:93:66:85:99:35:13:1e:
5a:58:ac:ec:8c:79:8f:7d:83:c3:80:a6:7c:17:e2:
fd:55:bb:b2:35:45:a0:e1:f9:8b:f7:7a:9f:07:85:
99:8e:08:43:55:37:fc:27:11:7f:40:12:35:99:2b:
44:90:92:6a:1c:2d:ab:bb:8a:8c:94:1e:92:7c:cf:
f3:07:50:1d:90:25:6a:a2:77:c1:7f:0c:93:2a:64:
0e:76:75:f7:41:a1:ae:bb:b3:a8:39:d5:cd:5f:04:
cf:55:95:8e:c1:a4:2a:64:d1:b9:25:a6:08:f0:48:
10:a0:73:88:dc:ec:63:8c:51:7f:e6:83:eb:38:ff:
4b:16:8a:8b:96:cc:16:f2:2e:00:2e:e0:52:53:7e:
dd:d8:1b:2a:cb:c8:1f:61:ef:e5:3e:5d:76:99:8d:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:23:30:A2:F9:C5:DF:C2:13:45:4F:1B:31:D5:33:6D:12:72:85:52
X509v3 Authority Key Identifier:
keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f4:e8:ba:41:4e:99:b8:8c:01:84:42:a9:97:98:ab:f3:bf:
da:70:8a:4c:78:92:b2:39:dd:b3:d9:1a:62:5a:51:7d:5f:16:
3c:5b:d3:62:85:1e:32:6a:27:7b:b8:6f:2c:e2:59:30:ac:eb:
81:b0:82:8b:60:25:e4:12:56:e7:85:08:a1:9c:fe:73:b8:c0:
40:87:fd:4a:2f:6e:db:31:e9:a6:3a:85:57:22:05:ac:48:e1:
ca:bc:3f:72:46:24:c4:b8:21:61:c5:e9:ab:a3:be:19:07:72:
15:18:37:e8:7f:e9:5b:72:4c:69:db:19:f0:64:ab:f0:9d:cb:
a3:e7:e9:28:a9:36:7b:c8:fd:06:2f:45:83:bc:86:e6:e1:47:
5b:db:2c:0f:87:ef:9a:57:51:4e:45:39:83:aa:87:cb:f1:13:
a4:c8:bc:6c:e6:4a:fd:4e:15:a6:21:d9:0b:32:09:71:39:2b:
8c:d9:0c:84:b4:c4:fc:40:52:0d:5e:cc:39:f7:47:a7:5c:d3:
84:ca:62:11:a6:de:82:04:36:d6:aa:bf:ab:7d:a3:40:3c:dc:
9b:5b:8f:a9:a4:ba:aa:51:2d:6b:45:8b:8e:66:10:a0:1b:47:
13:18:34:3f:c7:1b:5f:9c:06:da:0a:c3:1d:d4:25:a0:f4:c2:
ad:16:0d:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFb+h68kIpep4xcq0YzfS3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWYwYWQ1NTcyYmFlMjZlMzljODc0MGM2OGE4ZmJiNDZl
ZTQ4NjQwHhcNMjYxMDIxMDEwMTIwWhcNMjYxMDIyMDEwMTIwWjAzMTEwLwYDVQQD
Eyg5MDIzMzBhMmY5YzVkZmMyMTM0NTRmMWIzMWQ1MzM2ZDEyNzI4NTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlV6MjxJOyEKfH+QdzYyixfuWVxq
4X2+Qr4rRjdtBiMhLqJUQwnBFrGFp+TfqlDSoWuKYvnfNstNcE9qOU5+k3Huc/bv
/AsbXcIgtfJB8gSrNk2JkQR4+VuvkMXCIcwMnpNmhZk1Ex5aWKzsjHmPfYPDgKZ8
F+L9VbuyNUWg4fmL93qfB4WZjghDVTf8JxF/QBI1mStEkJJqHC2ru4qMlB6SfM/z
B1AdkCVqonfBfwyTKmQOdnX3QaGuu7OoOdXNXwTPVZWOwaQqZNG5JaYI8EgQoHOI
3OxjjFF/5oPrOP9LFoqLlswW8i4ALuBSU37d2Bsqy8gfYe/lPl12mY0FGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAjMKL5xd/CE0VPGzHVM20ScoVSMB8GA1UdIwQY
MBaAFIofCtVXK64m45yHQMaKj7tG7khkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzkt
MDNmMjNhNzM5NDFkLzEvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzktMDNmMjNhNzM5NDFk
LzEvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvToukFO
mbiMAYRCqZeYq/O/2nCKTHiSsjnds9kaYlpRfV8WPFvTYoUeMmone7hvLOJZMKzr
gbCCi2Al5BJW54UIoZz+c7jAQIf9Si9u2zHppjqFVyIFrEjhyrw/ckYkxLghYcXp
q6O+GQdyFRg36H/pW3JMadsZ8GSr8J3Lo+fpKKk2e8j9Bi9Fg7yG5uFHW9ssD4fv
mldRTkU5g6qHy/ETpMi8bOZK/U4VpiHZCzIJcTkrjNkMhLTE/EBSDV7MOfdHp1zT
hMpiEabeggQ21qq/q32jQDzcm1uPqaS6qlEta0WLjmYQoBtHExg0P8cbX5wG2grD
HdQloPTCrRYN3Q==
-----END CERTIFICATE-----
Generated at Wed Oct 21 05:07:29 2026 by rpki-client