Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: cKrIgzOnBkMKSxPgYZI2iaHle7j5cC2vlYknuZBqi/8=
Subject key identifier: F8:D1:49:1B:93:B3:4F:42:EF:06:8F:E8:4C:95:39:63:C3:25:13:39
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 01A1408355ABC62FB74C114760283F3F8C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0EE5
Signing time: Thu 15 Oct 2026 17:01:51 +0000
Manifest this update: Thu 15 Oct 2026 17:01:51 +0000
Manifest next update: Fri 16 Oct 2026 17:01:51 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: xHSHcVfUEHbh+hqWg17H+YY8zcTw4zf9aDcmgzBpymk=)
2: bbNTfIJmhGsZ2V8DBjEahyC2lWE.roa (hash: /Eg3PukaE2y9AWWE2+6unARGBgb5uWfL7NaM72cQJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:55:ab:c6:2f:b7:4c:11:47:60:28:3f:3f:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Oct 15 17:01:51 2026 GMT
Not After : Oct 16 17:01:51 2026 GMT
Subject: CN=f8d1491b93b34f42ef068fe84c953963c3251339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:af:0d:37:76:93:23:56:cc:b0:8e:bb:ae:
38:ed:60:6e:92:17:1b:48:98:db:c8:a6:bf:4e:38:
20:74:c2:11:83:83:8d:22:66:d8:3e:ee:10:31:70:
07:99:01:ba:15:9b:ca:c6:ee:2d:a3:0a:91:4b:c1:
25:95:b1:90:41:31:03:68:7c:c6:7d:a5:54:99:02:
97:22:e2:cf:37:ef:7d:ba:b9:d5:df:fc:08:e1:f4:
ba:85:d6:31:a3:18:0f:b3:3b:14:ec:58:78:31:02:
41:e8:35:90:c1:02:b0:d6:a1:57:bd:84:fe:bf:df:
4e:df:97:c3:77:da:dc:c2:02:57:e4:aa:8e:cc:ad:
fe:9f:a4:85:b4:32:ae:16:c9:ca:b3:8e:36:bd:d3:
b6:8a:77:5e:94:66:0e:11:2d:c7:8f:8a:1d:69:66:
c7:d5:a9:66:47:ae:6e:fd:e1:0c:90:79:4e:f6:52:
c1:0c:a8:fe:59:d5:e4:32:92:be:1c:e6:86:35:0b:
60:2c:d7:a3:48:e7:73:0e:c1:2f:62:ed:75:d1:a1:
b8:3f:b8:04:14:2c:44:da:ff:04:72:b9:2e:cd:52:
89:a9:1f:63:92:b2:e7:2f:ed:f7:28:55:68:d7:09:
a4:57:2d:3c:87:e9:4a:11:ec:97:5a:58:c8:de:6e:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D1:49:1B:93:B3:4F:42:EF:06:8F:E8:4C:95:39:63:C3:25:13:39
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f4:63:cd:d5:a5:11:64:49:9b:71:3e:1f:32:71:26:32:a0:
43:63:ed:52:fc:09:4a:3f:fe:80:5f:ec:00:64:60:dd:31:71:
ce:6b:38:80:e1:f3:17:cf:41:35:48:8e:82:c0:fb:28:2e:17:
46:7d:fa:cd:32:63:86:f2:d9:88:eb:26:9c:5b:12:70:e0:b6:
86:fd:1e:29:07:57:04:af:45:a0:1a:dc:33:7f:ad:f0:f3:57:
92:22:46:8f:7d:40:72:c5:aa:a5:31:32:da:2a:b0:23:a1:2f:
ac:0d:e3:f0:26:f6:0d:fb:a8:2d:54:b5:2f:5b:76:fe:91:e9:
8a:ec:a8:8f:93:8d:86:74:f0:c1:94:b5:8e:9b:0c:db:02:fd:
f6:63:27:a6:60:07:5b:18:53:46:cb:28:f4:12:33:65:4e:38:
0b:57:e3:cf:ba:c1:92:88:4a:0f:d7:d7:25:00:58:c8:f6:03:
ee:66:36:1b:ba:79:56:32:21:2e:b8:e2:52:d2:a4:4b:c2:62:
85:9a:46:ca:fa:f7:c7:32:ac:b7:70:16:9f:a1:b1:39:1b:4f:
a2:ee:96:41:17:6c:93:a8:c4:a7:93:a2:09:5c:83:a4:df:0e:
cf:9e:7f:cd:67:74:b9:36:09:a9:16:7e:8c:5a:90:44:e1:b9:
67:95:75:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAg1Wrxi+3TBFHYCg/P4xAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YWYyMGMwMjZkZTEwNGQ5NmYxN2FjYmFmNGU3ODdlZjlk
MzAyMDYwHhcNMjYxMDE1MTcwMTUxWhcNMjYxMDE2MTcwMTUxWjAzMTEwLwYDVQQD
EyhmOGQxNDkxYjkzYjM0ZjQyZWYwNjhmZTg0Yzk1Mzk2M2MzMjUxMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg6vDTd2kyNWzLCOu6447WBukhcb
SJjbyKa/TjggdMIRg4ONImbYPu4QMXAHmQG6FZvKxu4towqRS8EllbGQQTEDaHzG
faVUmQKXIuLPN+99urnV3/wI4fS6hdYxoxgPszsU7Fh4MQJB6DWQwQKw1qFXvYT+
v99O35fDd9rcwgJX5KqOzK3+n6SFtDKuFsnKs442vdO2indelGYOES3Hj4odaWbH
1almR65u/eEMkHlO9lLBDKj+WdXkMpK+HOaGNQtgLNejSOdzDsEvYu110aG4P7gE
FCxE2v8EcrkuzVKJqR9jkrLnL+33KFVo1wmkVy08h+lKEeyXWljI3m60YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjRSRuTs09C7waP6EyVOWPDJRM5MB8GA1UdIwQY
MBaAFNWvIMAm3hBNlvF6y69OeH750wIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMt
ODlmMTgxNWQ0YzE5LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMtODlmMTgxNWQ0YzE5
LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfRjzdWl
EWRJm3E+HzJxJjKgQ2PtUvwJSj/+gF/sAGRg3TFxzms4gOHzF89BNUiOgsD7KC4X
Rn36zTJjhvLZiOsmnFsScOC2hv0eKQdXBK9FoBrcM3+t8PNXkiJGj31AcsWqpTEy
2iqwI6EvrA3j8Cb2DfuoLVS1L1t2/pHpiuyoj5ONhnTwwZS1jpsM2wL99mMnpmAH
WxhTRsso9BIzZU44C1fjz7rBkohKD9fXJQBYyPYD7mY2G7p5VjIhLrjiUtKkS8Ji
hZpGyvr3xzKst3AWn6GxORtPou6WQRdsk6jEp5OiCVyDpN8Oz55/zWd0uTYJqRZ+
jFqQROG5Z5V1aw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:00 2026 by rpki-client