Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: Y2nB2JTRsSIwliHe0Rpk0xzXwf5DeovGu/0vUAEYHl0=
Subject key identifier: 90:11:87:DB:9D:C9:DB:31:C4:47:54:CF:43:09:14:87:C6:BE:C5:7C
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 01A002141C76D237D61E8F3F6C924D5AEB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 12C5
Signing time: Fri 14 Aug 2026 21:01:07 +0000
Manifest this update: Fri 14 Aug 2026 21:01:07 +0000
Manifest next update: Sat 15 Aug 2026 21:01:07 +0000
Files and hashes: 1: 7vuFGqZCxLzD91LmtcVrwRVipP0.roa (hash: exBwARjGLtxZJRWm9krMbKUblEEFQ4G0buGpMyQ+bjU=)
2: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: OlqPNI4Tvnh370IAj05YkGzONXGZuPO3U81Z6gwlzeM=)
3: achjIHDKww_TLSJu-NnrKxU3--A.roa (hash: GHcbBAVqUMC4lX8HAJJpjhpVUyf1FlS4/jLemAj83YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:1c:76:d2:37:d6:1e:8f:3f:6c:92:4d:5a:eb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Aug 14 21:01:07 2026 GMT
Not After : Aug 15 21:01:07 2026 GMT
Subject: CN=901187db9dc9db31c44754cf43091487c6bec57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e7:14:8a:df:c2:cf:9e:17:4c:24:71:31:50:
7c:ff:cd:43:4a:e3:89:13:9a:57:d1:36:64:67:93:
b4:ee:af:b1:10:4f:d3:7a:c8:87:62:b3:17:77:5c:
3f:5c:f6:d8:b9:5c:ce:ae:b1:20:f6:24:1c:44:a9:
6d:c2:e9:ef:49:73:01:24:95:6d:80:52:13:1e:c6:
d8:d8:ef:65:04:b3:09:5e:0b:37:57:03:74:27:1b:
ea:e6:6e:bb:6b:b3:28:0e:95:3b:85:10:c6:10:91:
c5:67:e3:00:2c:0a:31:bc:94:35:04:18:d5:32:69:
1a:d4:fd:2b:c5:88:0a:b2:d0:91:78:7b:8d:d0:7e:
65:72:1b:3c:1f:8b:4a:f9:af:81:eb:b3:5a:c6:e0:
56:66:df:ec:10:23:c4:c9:2f:82:a2:19:50:fd:c6:
24:7b:36:c3:f1:a2:53:25:e5:35:19:71:27:f5:5f:
40:ad:82:3a:2a:fe:1a:ef:ae:89:aa:ef:42:c3:78:
22:1a:98:b8:96:fb:8f:f0:05:64:35:dc:65:1e:9c:
9f:25:ba:56:19:f2:b5:eb:63:18:70:6d:b4:b4:25:
88:df:3a:0e:8f:f6:95:75:ab:d4:51:7c:ef:21:62:
38:15:77:db:7f:15:8e:26:00:00:96:1d:26:5f:2a:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:11:87:DB:9D:C9:DB:31:C4:47:54:CF:43:09:14:87:C6:BE:C5:7C
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:dd:6f:d3:d3:bb:47:5d:f0:d3:67:f3:59:85:f7:af:e8:b0:
3d:ad:f2:d9:c3:2f:1e:03:ad:a2:27:fd:64:de:98:06:52:51:
42:6c:a7:2e:37:90:75:3c:ed:bb:e6:74:44:f0:8b:63:23:d0:
61:de:3a:da:c7:8e:02:ab:c9:0b:4b:31:47:5b:29:ca:e5:a9:
62:a7:bc:5c:4a:d4:5a:e9:99:aa:63:58:ec:50:03:ac:0a:5f:
61:62:a1:6a:6a:72:16:ab:b0:28:be:61:a4:1a:37:5d:c6:d0:
b6:63:a2:1e:de:51:a6:af:e0:a7:b0:6d:8d:1f:3a:81:97:73:
aa:a5:a9:db:d5:a2:93:de:79:87:57:c9:c5:84:09:91:59:07:
7d:24:2e:85:b6:4b:f1:af:61:69:3d:ff:50:70:28:ba:db:d5:
60:ec:7d:1e:f8:e9:2c:01:be:cd:23:1e:ba:0d:e1:79:db:6d:
8e:d0:0e:89:f9:0c:6a:82:d7:2e:fe:af:62:91:e1:f5:1b:ed:
c8:2e:b0:9b:ed:b8:3a:93:11:6a:4f:54:20:d9:27:2a:a4:02:
18:8e:b0:49:aa:3a:a5:20:55:e6:13:21:60:92:ea:e1:42:2e:
ad:71:45:b1:84:d4:0c:14:8b:e3:3f:1d:c6:be:df:77:4a:39:
3d:b7:99:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACFBx20jfWHo8/bJJNWusZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOGZiYTUyNjM1MTliN2MzYTIxNTVjNjk4NzgyMTc3NzZk
ZWZiYTAwHhcNMjYwODE0MjEwMTA3WhcNMjYwODE1MjEwMTA3WjAzMTEwLwYDVQQD
Eyg5MDExODdkYjlkYzlkYjMxYzQ0NzU0Y2Y0MzA5MTQ4N2M2YmVjNTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+cUit/Cz54XTCRxMVB8/81DSuOJ
E5pX0TZkZ5O07q+xEE/TesiHYrMXd1w/XPbYuVzOrrEg9iQcRKltwunvSXMBJJVt
gFITHsbY2O9lBLMJXgs3VwN0Jxvq5m67a7MoDpU7hRDGEJHFZ+MALAoxvJQ1BBjV
Mmka1P0rxYgKstCReHuN0H5lchs8H4tK+a+B67NaxuBWZt/sECPEyS+CohlQ/cYk
ezbD8aJTJeU1GXEn9V9ArYI6Kv4a766Jqu9Cw3giGpi4lvuP8AVkNdxlHpyfJbpW
GfK162MYcG20tCWI3zoOj/aVdavUUXzvIWI4FXfbfxWOJgAAlh0mXyqq3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJARh9udydsxxEdUz0MJFIfGvsV8MB8GA1UdIwQY
MBaAFPCPulJjUZt8OiFVxph4IXd23vugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgt
MDY0MTNjZWVmY2UwLzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgtMDY0MTNjZWVmY2Uw
LzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANd1v09O7
R13w02fzWYX3r+iwPa3y2cMvHgOtoif9ZN6YBlJRQmynLjeQdTztu+Z0RPCLYyPQ
Yd462seOAqvJC0sxR1spyuWpYqe8XErUWumZqmNY7FADrApfYWKhampyFquwKL5h
pBo3XcbQtmOiHt5Rpq/gp7BtjR86gZdzqqWp29Wik955h1fJxYQJkVkHfSQuhbZL
8a9haT3/UHAoutvVYOx9HvjpLAG+zSMeug3hedttjtAOifkMaoLXLv6vYpHh9Rvt
yC6wm+24OpMRak9UINknKqQCGI6wSao6pSBV5hMhYJLq4UIurXFFsYTUDBSL4z8d
xr7fd0o5PbeZDw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:41 2026 by rpki-client