Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: DHatKfUNEe98jXvEZncB8RF9DdL7gSwgd64Rd+eAgH8=
Subject key identifier: 77:37:A9:C5:0A:19:8A:25:E5:C8:F9:1A:8F:85:C6:42:60:62:DE:EB
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 01A1404C037C38F4D281175086E0C3B0A9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 14EF
Signing time: Thu 15 Oct 2026 16:01:25 +0000
Manifest this update: Thu 15 Oct 2026 16:01:25 +0000
Manifest next update: Fri 16 Oct 2026 16:01:25 +0000
Files and hashes: 1: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: dTs3FmpsIO2jrYwrUrTKeBR63d4iZ+/f2fhCmCrU5PI=)
2: iir-MP9u--5X9N6sLaapXHQB96w.roa (hash: KYgiiMZkt1y8OXMvRPUfLQi6b3EsUMCv28kMOUxnz3s=)
3: l8WM5SXhhLHZk6-0rTuPZujifDU.roa (hash: OwasY0cE4RjsEomhMQYGit6AbKnSUZ5M+37Aov/WE20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:03:7c:38:f4:d2:81:17:50:86:e0:c3:b0:a9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Oct 15 16:01:25 2026 GMT
Not After : Oct 16 16:01:25 2026 GMT
Subject: CN=7737a9c50a198a25e5c8f91a8f85c6426062deeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ca:7c:76:83:6a:24:3e:ff:ea:32:f1:77:3b:
7a:83:ed:3a:1f:01:f6:39:39:0b:f0:5b:74:5c:ef:
10:28:bb:a2:77:89:93:33:90:b9:b6:33:cf:74:c8:
14:41:54:95:53:d8:0b:ec:c3:fe:2a:f9:b9:25:6f:
ad:d6:cc:58:af:9b:82:6c:c1:cf:9e:81:62:7b:d4:
6b:57:1d:d0:cb:e1:bf:19:00:0e:bc:aa:9a:16:91:
9e:db:3a:68:d8:dd:41:33:06:a6:60:ce:d7:68:51:
16:1a:c7:e5:ff:92:44:e1:eb:6a:06:d6:c1:ef:89:
9f:f4:47:af:98:97:6a:49:21:fa:31:20:ed:15:d2:
bd:aa:99:48:5d:6d:99:39:ff:c3:50:f1:60:4f:4c:
2d:12:7d:8c:82:e0:db:0a:c1:d3:91:f8:bc:94:62:
8c:db:c0:86:1e:be:18:f0:db:f9:04:df:df:9d:e5:
0e:7a:11:ab:d3:e1:17:67:d0:ee:54:c8:92:08:9a:
22:69:93:97:f2:6d:4d:66:b2:57:61:b9:bb:9b:cc:
23:8c:78:7b:77:e3:b8:2e:7f:cb:38:3b:2f:d7:52:
f0:55:59:a8:38:d7:55:ba:3b:a8:2c:15:ca:e3:fd:
65:be:1f:bb:e7:13:07:39:c5:6d:60:f2:25:fc:3b:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:37:A9:C5:0A:19:8A:25:E5:C8:F9:1A:8F:85:C6:42:60:62:DE:EB
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c7:9d:43:ae:92:eb:85:ea:90:ea:c0:37:ef:7e:ac:51:b0:
68:4d:ac:01:09:69:1a:24:02:ce:2a:d9:51:56:a1:78:c8:aa:
7d:46:f4:c7:80:7b:d0:79:64:01:06:80:95:3a:42:f0:a2:e4:
4b:c4:a5:da:da:8a:53:18:49:d7:47:53:c8:98:23:a0:1c:6e:
f0:3f:dd:16:49:34:00:6b:10:79:05:70:df:0b:58:0e:e5:43:
d4:94:f5:4a:ea:a7:1a:59:25:f3:15:9a:37:db:e6:5b:f3:41:
67:7b:09:68:c5:dd:7b:a9:fd:70:28:8f:77:f5:3e:fb:74:e7:
38:ba:89:3b:22:ff:84:c5:81:e1:67:8d:18:6b:dd:15:ae:58:
1b:84:d5:c4:de:d3:35:4e:7e:3e:9b:19:49:b4:a7:6e:e9:07:
40:52:67:56:39:1f:f2:b8:2a:2f:24:8a:c3:9d:31:f9:5c:ae:
1f:4f:aa:88:1d:70:37:d6:80:c5:6c:76:52:53:31:f8:43:1a:
bb:77:c8:cc:ac:cd:1a:e8:1f:71:53:95:90:72:8a:07:f1:86:
b8:87:5f:b4:10:3f:af:cb:40:5d:d5:cb:31:4e:ec:0e:f0:26:
bf:c6:22:2b:6c:28:7f:19:b1:71:5e:4b:6f:1f:a9:de:be:bb:
f2:97:84:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFATAN8OPTSgRdQhuDDsKn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNWNiOWFmYzhhODY3MGUxZjExNmNiZDIxNDk5YzlmNzEy
MTViYzAwHhcNMjYxMDE1MTYwMTI1WhcNMjYxMDE2MTYwMTI1WjAzMTEwLwYDVQQD
Eyg3NzM3YTljNTBhMTk4YTI1ZTVjOGY5MWE4Zjg1YzY0MjYwNjJkZWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksp8doNqJD7/6jLxdzt6g+06HwH2
OTkL8Ft0XO8QKLuid4mTM5C5tjPPdMgUQVSVU9gL7MP+Kvm5JW+t1sxYr5uCbMHP
noFie9RrVx3Qy+G/GQAOvKqaFpGe2zpo2N1BMwamYM7XaFEWGsfl/5JE4etqBtbB
74mf9EevmJdqSSH6MSDtFdK9qplIXW2ZOf/DUPFgT0wtEn2MguDbCsHTkfi8lGKM
28CGHr4Y8Nv5BN/fneUOehGr0+EXZ9DuVMiSCJoiaZOX8m1NZrJXYbm7m8wjjHh7
d+O4Ln/LODsv11LwVVmoONdVujuoLBXK4/1lvh+75xMHOcVtYPIl/DuJQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHc3qcUKGYol5cj5Go+FxkJgYt7rMB8GA1UdIwQY
MBaAFPFcua/IqGcOHxFsvSFJnJ9xIVvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgt
MDI3YTc0M2JhNDYyLzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgtMDI3YTc0M2JhNDYy
LzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8edQ66S
64XqkOrAN+9+rFGwaE2sAQlpGiQCzirZUVaheMiqfUb0x4B70HlkAQaAlTpC8KLk
S8Sl2tqKUxhJ10dTyJgjoBxu8D/dFkk0AGsQeQVw3wtYDuVD1JT1SuqnGlkl8xWa
N9vmW/NBZ3sJaMXde6n9cCiPd/U++3TnOLqJOyL/hMWB4WeNGGvdFa5YG4TVxN7T
NU5+PpsZSbSnbukHQFJnVjkf8rgqLySKw50x+VyuH0+qiB1wN9aAxWx2UlMx+EMa
u3fIzKzNGugfcVOVkHKKB/GGuIdftBA/r8tAXdXLMU7sDvAmv8YiK2wofxmxcV5L
bx+p3r678peEUA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:49 2026 by rpki-client