Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: ePH9V6JluZBEs08Hx8ZPXEsHsTNXG1k8Xey19nyIqVE=
Subject key identifier: 8C:C1:C8:97:08:2B:D5:79:57:86:3B:86:B8:4F:8B:C6:00:66:DA:7B
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 01A08AFAF488DD87C87CDBA0F7DCC4AA7F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 08D4
Signing time: Thu 10 Sep 2026 11:01:37 +0000
Manifest this update: Thu 10 Sep 2026 11:01:37 +0000
Manifest next update: Fri 11 Sep 2026 11:01:37 +0000
Files and hashes: 1: 2MeX37cZHGHHuxJtj1E28ddzIsI.roa (hash: LZd2fssCxVZOERqVCoqkBsBn4xYtLG5cKZGv8FiTdNw=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: 1eTxYdDmfsKXnMLAIw82wkYww6aGTM/pF+9VCLNIF74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:f4:88:dd:87:c8:7c:db:a0:f7:dc:c4:aa:7f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Sep 10 11:01:37 2026 GMT
Not After : Sep 11 11:01:37 2026 GMT
Subject: CN=8cc1c897082bd57957863b86b84f8bc60066da7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:7b:e7:8d:f8:5f:d5:ee:66:b4:f2:b1:eb:
7e:02:8a:6d:9f:fe:82:8e:71:82:b0:e2:54:1c:d0:
5d:1b:30:30:52:b2:31:12:fd:2c:bd:f6:55:a8:99:
44:c9:16:d8:42:78:07:da:b0:be:bb:3c:1c:45:b2:
72:b9:4c:ca:60:24:be:a6:12:1e:8e:86:18:07:b0:
3f:d0:b7:ce:93:04:1d:85:d4:08:62:41:2d:db:c8:
83:c4:a1:42:d5:82:8a:19:34:34:7d:0a:3e:8e:d5:
ac:a9:0c:1d:01:d9:b7:4d:75:2d:b7:1d:67:5d:3d:
ec:5b:d4:6d:df:86:94:02:00:c5:9b:cf:1c:20:02:
05:fc:73:97:ad:a7:92:9e:00:2a:5f:f6:a3:18:ad:
87:17:60:23:cc:e7:d2:b4:97:8d:4c:e3:e4:cf:ec:
12:3d:09:04:3a:e6:96:59:14:9e:dd:9c:25:17:15:
60:58:c7:9b:fe:f0:87:6f:99:a0:21:9f:52:34:88:
14:be:ab:5c:2b:f9:c4:fe:29:13:34:1b:8c:34:62:
d5:79:5d:d9:87:06:79:5a:ad:bc:d5:f6:58:06:53:
f4:85:91:a4:8a:0a:55:80:2e:3b:98:33:5b:c4:79:
96:4e:5a:01:0c:48:c4:1d:f0:96:d6:3f:c9:ee:70:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C1:C8:97:08:2B:D5:79:57:86:3B:86:B8:4F:8B:C6:00:66:DA:7B
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:70:d6:0e:d9:d4:40:10:3a:b4:6e:29:af:25:25:66:a7:96:
db:fa:b5:9b:34:cf:72:34:e6:14:cd:74:dc:b1:a3:26:49:62:
df:c8:2f:1b:c5:6b:c0:ed:cd:2b:c3:09:69:be:0b:b6:d8:e0:
4f:95:7e:e1:ac:7c:84:64:0d:60:8e:71:45:fc:0b:98:80:c0:
8f:b5:d1:2e:f4:98:2b:d6:70:b9:e1:82:31:2e:3a:07:6a:b2:
c1:f3:53:bc:2b:cc:a2:a8:18:bb:30:74:20:62:a2:bf:98:cd:
f7:0d:59:cf:9e:ac:9f:40:7b:cd:75:8a:53:5d:d2:65:cd:89:
e3:44:28:b4:8c:ac:6d:91:ed:c5:54:63:4f:4b:0d:69:bf:0e:
6b:d8:7f:ef:75:30:10:b8:9f:8c:19:72:0c:5c:49:ef:04:b2:
7c:b0:14:b5:3b:05:1d:a3:44:06:dd:98:cf:f2:d4:3a:2d:bb:
44:39:07:98:d1:ae:9d:09:13:74:2d:c7:da:ee:3f:ad:7e:f2:
9f:cc:45:c9:ba:d9:7b:84:3a:1b:62:e9:23:a1:68:dd:0e:f0:
5a:e2:75:93:75:ea:c1:1f:8a:9c:59:7c:84:9e:f8:a2:e3:36:
c6:36:9d:aa:36:0b:8a:f1:fb:8f:9b:ee:1d:e3:e0:ca:26:dd:
ce:57:ce:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+vSI3YfIfNug99zEqn9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2Q5N2YxNTA4ZTdhNDQ3ODk5ZjU5YTU1ZmI4YWE2MjQx
ZWY1MTAwHhcNMjYwOTEwMTEwMTM3WhcNMjYwOTExMTEwMTM3WjAzMTEwLwYDVQQD
Eyg4Y2MxYzg5NzA4MmJkNTc5NTc4NjNiODZiODRmOGJjNjAwNjZkYTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoh75434X9XuZrTyset+Aoptn/6C
jnGCsOJUHNBdGzAwUrIxEv0svfZVqJlEyRbYQngH2rC+uzwcRbJyuUzKYCS+phIe
joYYB7A/0LfOkwQdhdQIYkEt28iDxKFC1YKKGTQ0fQo+jtWsqQwdAdm3TXUttx1n
XT3sW9Rt34aUAgDFm88cIAIF/HOXraeSngAqX/ajGK2HF2AjzOfStJeNTOPkz+wS
PQkEOuaWWRSe3ZwlFxVgWMeb/vCHb5mgIZ9SNIgUvqtcK/nE/ikTNBuMNGLVeV3Z
hwZ5Wq281fZYBlP0hZGkigpVgC47mDNbxHmWTloBDEjEHfCW1j/J7nAymwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzByJcIK9V5V4Y7hrhPi8YAZtp7MB8GA1UdIwQY
MBaAFCN9l/FQjnpEeJn1mlX7iqYkHvUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTMyWDhWQ09la1I0bWZXYVZmdUtwaVFlOVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mNTAzZDctMWZiNi00MzcwLWI0NGYt
NDRhNDFhOTMxMTNlLzEvSTMyWDhWQ09la1I0bWZXYVZmdUtwaVFlOVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9mNTAzZDctMWZiNi00MzcwLWI0NGYtNDRhNDFhOTMxMTNl
LzEvSTMyWDhWQ09la1I0bWZXYVZmdUtwaVFlOVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXDWDtnU
QBA6tG4pryUlZqeW2/q1mzTPcjTmFM103LGjJkli38gvG8VrwO3NK8MJab4Lttjg
T5V+4ax8hGQNYI5xRfwLmIDAj7XRLvSYK9ZwueGCMS46B2qywfNTvCvMoqgYuzB0
IGKiv5jN9w1Zz56sn0B7zXWKU13SZc2J40QotIysbZHtxVRjT0sNab8Oa9h/73Uw
ELifjBlyDFxJ7wSyfLAUtTsFHaNEBt2Yz/LUOi27RDkHmNGunQkTdC3H2u4/rX7y
n8xFybrZe4Q6G2LpI6Fo3Q7wWuJ1k3XqwR+KnFl8hJ74ouM2xjadqjYLivH7j5vu
HePgyibdzlfO0w==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:17:22 2026 by rpki-client