Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: rHcfgsZ9Ad0JM7CqUUJmhcbM5pO8ux/JGv6eW6cfeFc=
Subject key identifier: 13:EA:70:CF:FB:86:5F:4B:84:28:E1:44:71:78:30:08:18:29:D1:33
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 01A1046DF1478DBBFF1678C07DB1C957191F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 1A30
Signing time: Sun 04 Oct 2026 01:01:16 +0000
Manifest this update: Sun 04 Oct 2026 01:01:16 +0000
Manifest next update: Mon 05 Oct 2026 01:01:16 +0000
Files and hashes: 1: 6gy9ic0JHyKNMeOj6vnfnWQN3SM.roa (hash: 7Tyj4JshIbYP3V9AawiQ2X+dktavULDW7Khh9vcmSus=)
2: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: lVptZAatVb7qN6+YvO7mjuOvXnRW9/1W2w+MvkblnGo=)
3: zSJhAsH0v6Lt3ykWNTipD6DjBvo.roa (hash: GqW80/tMAbtkCDtDVmCwRVj7WYcfpvr4HUTuVqPBK+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6d:f1:47:8d:bb:ff:16:78:c0:7d:b1:c9:57:19:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Oct 4 01:01:16 2026 GMT
Not After : Oct 5 01:01:16 2026 GMT
Subject: CN=13ea70cffb865f4b8428e144717830081829d133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:4e:20:53:76:d5:d9:8a:26:86:bb:94:6e:
53:71:6a:70:32:5c:96:7f:7b:39:3b:1f:22:43:81:
58:31:1f:44:cb:a6:78:16:44:34:24:f5:da:db:30:
3c:30:ef:a0:d0:bd:91:f5:ec:25:38:bb:94:72:9e:
54:bf:fb:56:06:21:05:61:45:7b:06:48:bd:a4:1f:
62:75:24:0f:14:a5:f5:14:79:70:d7:8b:c8:74:6d:
12:41:0b:aa:ea:1c:8f:e9:50:56:a5:29:4a:a7:7a:
d4:0e:70:d5:c3:d3:05:87:27:ff:c8:7c:eb:e2:3c:
fa:84:54:64:2d:7b:91:95:31:34:f3:3a:9e:de:c7:
f2:ac:a7:ca:90:44:8a:be:93:d4:4d:da:4d:c8:32:
26:10:0e:b7:56:02:b4:90:80:b6:c9:72:b7:a9:aa:
03:f1:75:b7:dc:fe:58:21:43:c0:c1:27:b5:91:20:
94:ef:38:a9:c8:e6:56:bc:80:63:e6:41:7a:bd:4a:
39:47:39:81:5e:4a:16:e8:63:0e:9d:a6:da:8d:fa:
c7:29:bb:c5:4e:8a:3f:dc:15:ef:10:1e:cc:a6:80:
6a:84:6f:3c:b2:83:9b:f3:86:28:91:71:84:dd:91:
a3:3a:9b:8b:4a:3c:d8:1b:af:a3:f5:e0:2d:e7:53:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EA:70:CF:FB:86:5F:4B:84:28:E1:44:71:78:30:08:18:29:D1:33
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:47:04:66:61:b4:e6:23:65:f8:5b:b5:57:f7:36:8a:60:f3:
a8:65:47:70:92:7d:cc:47:c4:d6:3e:6e:5a:64:64:51:45:47:
e3:62:55:44:0f:91:0b:9e:6a:9f:60:1e:8a:65:1a:0c:80:6f:
9b:cc:85:9b:e0:a9:86:c9:7f:d7:ff:83:d9:e2:d0:3d:ba:cc:
8d:a7:f6:a6:63:9e:82:c0:bf:14:97:9d:bf:f5:7c:6f:6b:1c:
bb:8c:6b:98:d8:75:4f:94:c1:9f:32:e4:3c:78:6d:2f:b4:76:
9d:26:54:12:16:29:50:8b:16:88:7d:58:fa:a7:b6:1a:07:d0:
d0:3d:29:a9:ff:0a:48:4a:d9:c6:98:7e:bc:aa:0d:df:7d:95:
e3:21:66:f5:ad:d0:e3:a9:72:02:25:25:1b:3d:b0:14:44:57:
aa:94:46:df:f4:39:0d:ca:c7:c3:03:11:81:72:e4:42:1e:75:
3d:e7:89:d4:d8:91:3c:d0:db:e1:ac:14:7f:ff:37:eb:a5:b1:
aa:09:25:79:ff:45:b3:88:e0:25:4e:ae:ee:4b:96:f7:d9:91:
10:3b:ea:24:f8:87:71:46:74:99:e6:87:93:6e:ed:8d:3b:e9:
ed:0d:e7:91:8f:d7:69:98:e0:ef:37:07:c4:71:8a:00:9e:3f:
70:1a:46:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEEbfFHjbv/FnjAfbHJVxkfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZmU2ZjJhOTM3ODM4ZGYyYjE1ZGExNzQzYmNkOWZiMGUy
OWNmMmUwHhcNMjYxMDA0MDEwMTE2WhcNMjYxMDA1MDEwMTE2WjAzMTEwLwYDVQQD
EygxM2VhNzBjZmZiODY1ZjRiODQyOGUxNDQ3MTc4MzAwODE4MjlkMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnFOIFN21dmKJoa7lG5TcWpwMlyW
f3s5Ox8iQ4FYMR9Ey6Z4FkQ0JPXa2zA8MO+g0L2R9ewlOLuUcp5Uv/tWBiEFYUV7
Bki9pB9idSQPFKX1FHlw14vIdG0SQQuq6hyP6VBWpSlKp3rUDnDVw9MFhyf/yHzr
4jz6hFRkLXuRlTE08zqe3sfyrKfKkESKvpPUTdpNyDImEA63VgK0kIC2yXK3qaoD
8XW33P5YIUPAwSe1kSCU7zipyOZWvIBj5kF6vUo5RzmBXkoW6GMOnabajfrHKbvF
Too/3BXvEB7MpoBqhG88soOb84YokXGE3ZGjOpuLSjzYG6+j9eAt51PllQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPqcM/7hl9LhCjhRHF4MAgYKdEzMB8GA1UdIwQY
MBaAFPL+byqTeDjfKxXaF0O82fsOKc8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yYWI3ODUtMmY4Ni00ODllLWFjMWMt
YjcyNTU3NjY4YjAxLzEvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yYWI3ODUtMmY4Ni00ODllLWFjMWMtYjcyNTU3NjY4YjAx
LzEvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEcEZmG0
5iNl+Fu1V/c2imDzqGVHcJJ9zEfE1j5uWmRkUUVH42JVRA+RC55qn2AeimUaDIBv
m8yFm+Cphsl/1/+D2eLQPbrMjaf2pmOegsC/FJedv/V8b2scu4xrmNh1T5TBnzLk
PHhtL7R2nSZUEhYpUIsWiH1Y+qe2GgfQ0D0pqf8KSErZxph+vKoN332V4yFm9a3Q
46lyAiUlGz2wFERXqpRG3/Q5DcrHwwMRgXLkQh51PeeJ1NiRPNDb4awUf/8366Wx
qgklef9Fs4jgJU6u7kuW99mREDvqJPiHcUZ0meaHk27tjTvp7Q3nkY/XaZjg7zcH
xHGKAJ4/cBpGMw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:54:10 2026 by rpki-client