Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File: 8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier: Y0ZMbHXIsZbS0kgH4Vsz9ltEl11EVO45nMBw1SM4L+8=
Subject key identifier: 35:21:CA:6B:DA:FE:14:9B:31:4C:A9:ED:09:14:7B:D5:03:4B:89:47
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial: 01A14014F510A77D6070DD4893FCC5B828A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 15:01:17 +0000
Manifest this update: Thu 15 Oct 2026 15:01:17 +0000
Manifest next update: Fri 16 Oct 2026 15:01:17 +0000
Files and hashes: 1: 1-c2ltkv81E7EaN3If-RGRVyYa_4.roa (hash: qSMZzei9N2ZpotVQ68DijxfquLxjFkRKA3l/57HyNug=)
2: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: 3To5/3Me5ygrZ3GeNok5QkEm9uCmwJDS5UJ6kEai3wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:14:f5:10:a7:7d:60:70:dd:48:93:fc:c5:b8:28:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
Validity
Not Before: Oct 15 15:01:17 2026 GMT
Not After : Oct 16 15:01:17 2026 GMT
Subject: CN=3521ca6bdafe149b314ca9ed09147bd5034b8947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:b3:72:cf:ae:1c:a8:57:59:fa:35:29:6c:
f0:2f:7e:61:04:26:ed:2a:65:f8:62:52:5d:74:35:
d5:80:26:28:c0:fc:48:f3:86:94:56:d0:29:a1:9c:
e1:da:d0:69:47:56:4a:e9:b1:00:07:c9:f2:98:c7:
b8:f0:9e:98:bc:ed:67:5d:e9:6c:1a:92:43:69:c7:
be:6d:4e:53:3c:d8:fb:c9:08:a7:b4:bb:24:25:15:
9e:3e:0a:d2:bb:7c:5b:2f:14:56:cc:6c:0f:dc:eb:
2c:f2:0c:d6:89:a5:7a:3f:04:7b:f9:3d:54:e4:c3:
e3:08:eb:0e:d2:d6:8f:e7:cb:76:75:89:95:6f:b2:
da:78:a3:be:a7:bf:16:33:2f:38:d1:b3:95:84:45:
0b:6e:ad:8e:56:e7:22:d8:67:2c:59:4c:9c:e4:c0:
4c:77:47:e9:6d:ab:f1:18:55:3a:5d:a2:d3:62:11:
3e:39:aa:72:65:db:3e:02:0d:73:6d:2f:35:a0:a9:
74:75:ef:11:90:02:d2:89:33:67:f7:01:0f:d2:0b:
30:e4:3d:6a:ac:ce:8b:d4:fc:6f:6a:4e:2c:9f:a9:
70:07:b3:bc:1c:88:fb:e3:bc:29:fd:c2:14:05:35:
9b:ed:e9:a1:50:11:15:1f:d5:a3:6e:42:87:8a:fe:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:CA:6B:DA:FE:14:9B:31:4C:A9:ED:09:14:7B:D5:03:4B:89:47
X509v3 Authority Key Identifier:
keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a6:72:d0:5a:eb:b3:4a:f9:0f:09:e8:a4:85:43:97:c7:01:
58:48:d7:5b:58:59:e6:48:18:0b:64:c0:48:90:16:0f:3f:a3:
9d:b3:6e:79:00:9f:3d:80:7a:e2:39:c1:47:84:5f:27:fc:b6:
35:1d:c0:ec:ff:f9:c8:db:0b:20:28:fa:be:f0:ca:83:45:a6:
bc:1d:81:75:e6:a7:d1:58:d8:cf:27:1c:6a:0c:1f:30:65:3b:
f2:91:5c:f2:0b:ee:89:95:ef:96:4b:94:83:b5:1f:d4:c7:65:
eb:2c:aa:93:19:83:ab:35:77:9f:fa:54:58:15:21:21:ec:f2:
55:1b:61:93:02:7d:72:6c:c9:b6:33:ee:70:49:2c:61:0a:8a:
ff:2e:69:65:ab:95:5f:29:bc:3a:a0:c9:2c:44:7b:27:8f:9a:
5d:e0:4a:60:a5:94:0b:a2:b0:07:07:ab:12:c5:50:56:7e:ff:
a2:d7:07:cb:ea:4f:ce:37:35:de:7b:33:68:55:b9:82:17:d4:
a2:d1:b7:b8:09:a6:30:01:1d:a4:7e:62:f0:6f:1b:2a:05:97:
44:0a:a6:7d:98:90:9e:de:70:7b:cc:bd:68:1e:72:30:e1:6d:
3b:3e:77:5c:75:84:00:c6:56:36:91:66:03:3d:57:36:62:2b:
46:e7:74:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAFPUQp31gcN1Ik/zFuCikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMTVhMjc3OTQ5NzExYjJjMDFjZGM2NjllNDBlMTcxMzk1
ODU1YmIwHhcNMjYxMDE1MTUwMTE3WhcNMjYxMDE2MTUwMTE3WjAzMTEwLwYDVQQD
EygzNTIxY2E2YmRhZmUxNDliMzE0Y2E5ZWQwOTE0N2JkNTAzNGI4OTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpezcs+uHKhXWfo1KWzwL35hBCbt
KmX4YlJddDXVgCYowPxI84aUVtApoZzh2tBpR1ZK6bEAB8nymMe48J6YvO1nXels
GpJDace+bU5TPNj7yQintLskJRWePgrSu3xbLxRWzGwP3Oss8gzWiaV6PwR7+T1U
5MPjCOsO0taP58t2dYmVb7LaeKO+p78WMy840bOVhEULbq2OVuci2GcsWUyc5MBM
d0fpbavxGFU6XaLTYhE+OapyZds+Ag1zbS81oKl0de8RkALSiTNn9wEP0gsw5D1q
rM6L1Pxvak4sn6lwB7O8HIj747wp/cIUBTWb7emhUBEVH9WjbkKHiv4MnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUhymva/hSbMUyp7QkUe9UDS4lHMB8GA1UdIwQY
MBaAFPIVoneUlxGywBzcZp5A4XE5WFW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMDhkNDUtNTQzYy00OWY3LTllNzgt
OTAzYzE5ODU5MGZhLzEvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMDhkNDUtNTQzYy00OWY3LTllNzgtOTAzYzE5ODU5MGZh
LzEvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKZy0Frr
s0r5DwnopIVDl8cBWEjXW1hZ5kgYC2TASJAWDz+jnbNueQCfPYB64jnBR4RfJ/y2
NR3A7P/5yNsLICj6vvDKg0WmvB2Bdean0VjYzyccagwfMGU78pFc8gvuiZXvlkuU
g7Uf1Mdl6yyqkxmDqzV3n/pUWBUhIezyVRthkwJ9cmzJtjPucEksYQqK/y5pZauV
Xym8OqDJLER7J4+aXeBKYKWUC6KwBwerEsVQVn7/otcHy+pPzjc13nszaFW5ghfU
otG3uAmmMAEdpH5i8G8bKgWXRAqmfZiQnt5we8y9aB5yMOFtOz53XHWEAMZWNpFm
Az1XNmIrRud0IQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:28 2026 by rpki-client