Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: MptYYtca5W2PD+SAsFakrLhTPJvzM5dXROBhliEEH8A=
Subject key identifier: D2:E9:9C:49:95:81:C0:0D:63:AA:00:18:E6:CD:B2:FC:7B:34:FD:08
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 01A08C44248C87FAA7921AAC0F1F4AF7F346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0E41
Signing time: Thu 10 Sep 2026 17:01:11 +0000
Manifest this update: Thu 10 Sep 2026 17:01:11 +0000
Manifest next update: Fri 11 Sep 2026 17:01:11 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: 01NF70E41DHjFjOM0Zc7r3AkDqz8armrsqRqZnMs5eo=)
2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:24:8c:87:fa:a7:92:1a:ac:0f:1f:4a:f7:f3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Sep 10 17:01:11 2026 GMT
Not After : Sep 11 17:01:11 2026 GMT
Subject: CN=d2e99c499581c00d63aa0018e6cdb2fc7b34fd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:77:b0:c7:59:b7:55:98:f9:80:74:b6:dc:
40:dd:9a:38:bf:f7:67:a4:e7:ae:70:86:72:12:12:
5f:ff:61:d4:47:0a:54:d5:7e:12:2e:75:6c:83:af:
38:73:2e:da:7b:1c:7f:86:6a:df:95:62:94:28:fb:
79:e8:68:5e:65:98:5f:a2:56:13:62:d1:14:79:56:
e0:76:ef:85:8e:6a:63:56:a0:0d:07:94:95:f3:31:
ff:03:82:8d:93:11:1e:97:a0:23:31:98:0e:68:5e:
6e:5e:7c:a1:0f:8a:1e:2a:a2:9c:d7:92:93:3a:cc:
8a:91:56:53:f1:80:f9:e3:a6:6b:a7:13:8e:6e:12:
5a:40:df:49:ec:83:98:5c:63:ed:f7:74:f0:24:9d:
e8:0f:83:61:c6:8a:c3:55:67:11:ab:7c:d3:5e:2f:
3b:9a:4a:99:75:54:f3:3d:87:ab:af:38:1f:95:e2:
b8:36:f9:c1:2b:e4:f7:25:09:32:9a:5b:18:6d:08:
7a:0c:71:39:0d:23:01:98:d9:23:e6:8b:7f:9d:0e:
6a:a6:a4:61:b8:6e:cb:29:ae:5d:76:b5:90:d8:d9:
f9:55:c7:22:9b:a8:28:f9:8a:29:51:57:c9:41:19:
ba:db:2f:73:82:4a:37:0f:a7:45:c6:03:48:19:95:
be:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E9:9C:49:95:81:C0:0D:63:AA:00:18:E6:CD:B2:FC:7B:34:FD:08
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ff:c3:cf:e5:77:51:a0:e5:04:76:f9:b5:a8:af:aa:b0:da:
d6:e3:ca:b4:d9:a4:4a:79:46:19:c5:a1:21:d2:d1:4a:2a:5c:
00:ff:99:17:44:c2:0d:2d:76:e6:9e:0d:17:46:6c:9f:02:90:
69:40:5e:e5:97:8d:93:2f:2f:97:f3:d3:a3:65:8e:e9:8f:f0:
d7:65:3d:b9:d6:98:19:86:ea:71:e7:36:80:65:94:55:14:0d:
c1:41:87:8e:24:26:3b:84:3d:60:bc:80:ef:7b:20:70:0b:c6:
af:87:8a:6b:72:12:91:f2:14:dd:3c:24:03:29:40:e7:4c:da:
8a:63:10:15:4b:c8:3f:a9:4d:cc:db:5c:ac:84:cd:86:3d:da:
64:23:96:7d:33:2c:3c:30:37:4b:33:9b:0d:d7:16:02:e1:2c:
f5:2b:59:50:9a:bc:7f:21:fb:e5:84:7e:3e:36:21:5b:80:92:
dc:87:48:bb:a8:2e:68:8e:ac:94:b7:31:06:d8:f2:23:9c:89:
a7:96:f8:e6:60:32:c4:2b:d6:de:e0:9d:69:a0:e8:c9:10:97:
73:81:1d:7b:ad:e3:24:6b:bc:2f:36:11:05:fe:d1:59:94:cf:
73:10:ba:ab:75:4c:cb:69:d3:3a:98:d8:17:8f:8e:f9:d4:f3:
65:d1:34:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMRCSMh/qnkhqsDx9K9/NGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhOGQxOWFkMzFjODRhNzQ4NTZiMGE2YjNjYzEwMGU0N2Ey
YjJhYWMwHhcNMjYwOTEwMTcwMTExWhcNMjYwOTExMTcwMTExWjAzMTEwLwYDVQQD
EyhkMmU5OWM0OTk1ODFjMDBkNjNhYTAwMThlNmNkYjJmYzdiMzRmZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4V3sMdZt1WY+YB0ttxA3Zo4v/dn
pOeucIZyEhJf/2HURwpU1X4SLnVsg684cy7aexx/hmrflWKUKPt56GheZZhfolYT
YtEUeVbgdu+FjmpjVqANB5SV8zH/A4KNkxEel6AjMZgOaF5uXnyhD4oeKqKc15KT
OsyKkVZT8YD546ZrpxOObhJaQN9J7IOYXGPt93TwJJ3oD4NhxorDVWcRq3zTXi87
mkqZdVTzPYerrzgfleK4NvnBK+T3JQkymlsYbQh6DHE5DSMBmNkj5ot/nQ5qpqRh
uG7LKa5ddrWQ2Nn5Vccim6go+YopUVfJQRm62y9zgko3D6dFxgNIGZW+BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLpnEmVgcANY6oAGObNsvx7NP0IMB8GA1UdIwQY
MBaAFIqNGa0xyEp0hWsKazzBAOR6KyqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgt
MjQwMjM0MDNiYjBjLzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgtMjQwMjM0MDNiYjBj
LzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlv/Dz+V3
UaDlBHb5taivqrDa1uPKtNmkSnlGGcWhIdLRSipcAP+ZF0TCDS125p4NF0ZsnwKQ
aUBe5ZeNky8vl/PTo2WO6Y/w12U9udaYGYbqcec2gGWUVRQNwUGHjiQmO4Q9YLyA
73sgcAvGr4eKa3ISkfIU3TwkAylA50zaimMQFUvIP6lNzNtcrITNhj3aZCOWfTMs
PDA3SzObDdcWAuEs9StZUJq8fyH75YR+PjYhW4CS3IdIu6guaI6slLcxBtjyI5yJ
p5b45mAyxCvW3uCdaaDoyRCXc4Ede63jJGu8LzYRBf7RWZTPcxC6q3VMy2nTOpjY
F4+O+dTzZdE0+A==
-----END CERTIFICATE-----
Generated at Fri Sep 11 00:22:07 2026 by rpki-client