Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File: 8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier: tG66VmtvGg6nKssL6tozsl6J/TplJ96xvBTzPcMNZeE=
Subject key identifier: 7F:03:7F:90:FE:A1:38:87:98:10:76:D3:2D:2C:F0:E7:99:F3:3B:19
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial: 01A0016FB6B9556BBAB2FB2E8A6F901C725F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 18:01:33 +0000
Manifest this update: Fri 14 Aug 2026 18:01:33 +0000
Manifest next update: Sat 15 Aug 2026 18:01:33 +0000
Files and hashes: 1: 1-c2ltkv81E7EaN3If-RGRVyYa_4.roa (hash: qSMZzei9N2ZpotVQ68DijxfquLxjFkRKA3l/57HyNug=)
2: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: OveldpuKA2yRMfnPT39oaNcYezgPHEi257LmyPjk5X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:b6:b9:55:6b:ba:b2:fb:2e:8a:6f:90:1c:72:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
Validity
Not Before: Aug 14 18:01:33 2026 GMT
Not After : Aug 15 18:01:33 2026 GMT
Subject: CN=7f037f90fea13887981076d32d2cf0e799f33b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:04:a0:b6:0e:28:3a:78:42:3d:b7:0e:24:a1:
d9:b5:09:43:fb:af:0a:ce:6d:23:44:da:fd:4f:50:
84:59:e5:6a:6a:2b:1d:f2:5c:22:03:2d:bc:60:ea:
ef:ae:a4:d1:1e:d8:d9:d4:ae:d8:2f:dd:1b:c3:d8:
52:2e:cb:d5:be:70:42:30:42:9d:ff:fb:22:66:dc:
ae:48:26:35:96:55:d0:07:18:8f:01:ef:0d:2a:f0:
26:46:e8:b3:4f:7b:50:0f:1e:ed:ef:17:f6:2b:db:
81:c6:44:96:d6:be:f9:18:46:50:5f:53:5e:53:0c:
1b:95:58:8f:97:f9:99:b8:7e:95:d9:46:85:a8:8c:
ae:96:f7:6e:11:aa:b3:55:9a:e1:67:65:89:e8:d1:
3e:f0:a4:33:aa:f3:ec:01:76:9a:6c:6c:c6:f8:8a:
b7:44:f7:34:21:e2:91:58:12:81:dc:f5:9b:d4:fe:
f5:8a:e8:47:f5:f3:72:5d:49:88:20:98:56:82:d4:
c5:be:c9:23:a4:64:9f:db:24:2c:60:7b:e4:85:b1:
1b:e0:c4:d0:a0:fb:65:ef:ef:38:d0:44:22:92:28:
7c:48:b6:2b:54:69:13:e7:d9:23:a6:d4:2c:fb:66:
87:a8:43:a2:12:ed:3e:a1:af:08:ae:b4:fb:d2:2b:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:03:7F:90:FE:A1:38:87:98:10:76:D3:2D:2C:F0:E7:99:F3:3B:19
X509v3 Authority Key Identifier:
keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ad:35:96:55:f3:2a:23:2f:34:e2:5b:c9:ef:1c:a5:1e:f7:
cf:54:ca:13:09:5c:bd:09:ef:27:27:2f:4a:42:c3:a0:dd:68:
6c:12:a6:b8:7b:26:c3:21:2b:dc:aa:84:66:68:01:be:0b:bb:
68:28:07:41:68:d2:13:cf:44:98:27:45:3a:51:87:c9:a7:b7:
4e:10:2b:a8:fe:29:d3:60:65:13:63:fc:10:b0:0f:d9:55:d8:
d8:23:38:09:a8:b1:ac:d9:1b:76:93:11:52:fa:9e:df:26:df:
5f:fb:14:9d:e8:ec:36:24:de:57:27:ac:45:f3:cb:c7:df:bb:
71:47:ae:8b:c2:53:53:78:98:7f:7f:49:25:12:dd:37:2c:7b:
52:65:ab:d7:de:a2:3c:40:85:88:f0:ee:ab:4a:bc:3a:1d:2a:
c9:3b:f7:2e:58:e5:a4:45:76:d2:90:ad:e1:a5:7e:29:85:5a:
08:37:db:44:af:5b:44:25:d2:3a:1a:68:c4:26:7f:70:e5:0b:
8e:f4:15:e2:33:1c:b3:b0:a1:12:ae:6f:9e:34:4c:53:4c:be:
1f:75:96:ba:5b:b0:fc:66:a2:55:8f:39:18:3d:6e:e6:2c:24:
be:39:5f:92:b6:94:09:f8:6a:66:85:76:b9:21:24:d6:cd:f2:
4f:dc:87:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb7a5VWu6svsuim+QHHJfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMTVhMjc3OTQ5NzExYjJjMDFjZGM2NjllNDBlMTcxMzk1
ODU1YmIwHhcNMjYwODE0MTgwMTMzWhcNMjYwODE1MTgwMTMzWjAzMTEwLwYDVQQD
Eyg3ZjAzN2Y5MGZlYTEzODg3OTgxMDc2ZDMyZDJjZjBlNzk5ZjMzYjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QSgtg4oOnhCPbcOJKHZtQlD+68K
zm0jRNr9T1CEWeVqaisd8lwiAy28YOrvrqTRHtjZ1K7YL90bw9hSLsvVvnBCMEKd
//siZtyuSCY1llXQBxiPAe8NKvAmRuizT3tQDx7t7xf2K9uBxkSW1r75GEZQX1Ne
UwwblViPl/mZuH6V2UaFqIyulvduEaqzVZrhZ2WJ6NE+8KQzqvPsAXaabGzG+Iq3
RPc0IeKRWBKB3PWb1P71iuhH9fNyXUmIIJhWgtTFvskjpGSf2yQsYHvkhbEb4MTQ
oPtl7+840EQikih8SLYrVGkT59kjptQs+2aHqEOiEu0+oa8IrrT70it3WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8Df5D+oTiHmBB20y0s8OeZ8zsZMB8GA1UdIwQY
MBaAFPIVoneUlxGywBzcZp5A4XE5WFW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMDhkNDUtNTQzYy00OWY3LTllNzgt
OTAzYzE5ODU5MGZhLzEvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMDhkNDUtNTQzYy00OWY3LTllNzgtOTAzYzE5ODU5MGZh
LzEvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASK01llXz
KiMvNOJbye8cpR73z1TKEwlcvQnvJycvSkLDoN1obBKmuHsmwyEr3KqEZmgBvgu7
aCgHQWjSE89EmCdFOlGHyae3ThArqP4p02BlE2P8ELAP2VXY2CM4CaixrNkbdpMR
Uvqe3ybfX/sUnejsNiTeVyesRfPLx9+7cUeui8JTU3iYf39JJRLdNyx7UmWr196i
PECFiPDuq0q8Oh0qyTv3LljlpEV20pCt4aV+KYVaCDfbRK9bRCXSOhpoxCZ/cOUL
jvQV4jMcs7ChEq5vnjRMU0y+H3WWuluw/GaiVY85GD1u5iwkvjlfkraUCfhqZoV2
uSEk1s3yT9yHTw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:54 2026 by rpki-client