
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
File: 8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json)
Hash identifier: kKK8cCPKgnJAswlf4zXiS38ER/x4nf3jcXv0LjaDHe0=
Subject key identifier: 6F:C0:5E:AE:1F:DF:AD:22:9B:80:65:5D:7D:EF:C2:E9:AB:56:66:3F
Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
Certificate issuer: /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Certificate serial: 01A13FA77721127421885FE018A4AD729EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 13:01:41 +0000
Manifest this update: Thu 15 Oct 2026 13:01:41 +0000
Manifest next update: Fri 16 Oct 2026 13:01:41 +0000
Files and hashes: 1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: r5qqss3pFIPlV2K87QPlhLXPpia6X4ugZwCIkl+do8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:77:21:12:74:21:88:5f:e0:18:a4:ad:72:9e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Validity
Not Before: Oct 15 13:01:41 2026 GMT
Not After : Oct 16 13:01:41 2026 GMT
Subject: CN=6fc05eae1fdfad229b80655d7defc2e9ab56663f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:93:89:d3:9b:4e:aa:48:e3:ec:d7:7c:9a:
51:c8:f7:fe:29:f6:f7:d0:50:53:5c:ce:0c:23:63:
bb:ef:19:eb:02:43:22:17:34:12:86:db:4f:9e:96:
a0:c8:40:ac:05:a7:35:6a:b2:d3:02:b2:de:39:36:
cd:fe:3f:6b:ed:65:c6:06:d5:72:06:4b:3f:02:cb:
f4:fe:0a:71:8a:0f:0a:cd:58:21:90:f6:35:50:55:
bc:65:60:9c:fd:1e:5e:3a:c2:41:9c:42:96:ab:df:
49:37:ff:26:62:ef:9b:7e:ec:4a:ce:1a:a5:72:3c:
99:16:ce:66:bd:c8:fd:eb:28:ef:bc:65:34:9e:61:
38:55:ab:69:c8:89:d7:8b:ea:35:0a:92:01:58:68:
27:72:7a:50:5c:1b:85:4e:97:53:54:dc:46:bf:af:
14:23:14:02:70:07:9b:5a:55:76:25:ea:11:fb:4c:
10:c6:96:18:08:14:ef:7a:4b:a9:ce:ff:f9:15:96:
2d:81:23:ae:f2:75:5f:56:79:54:45:e4:de:15:70:
be:89:10:31:4d:77:2d:a7:8e:15:77:d6:0f:6c:e7:
05:10:24:76:07:fb:c6:1b:fc:c8:84:dd:a0:4d:7f:
1f:6d:d4:d7:74:72:74:6a:44:87:38:ae:ff:e6:48:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C0:5E:AE:1F:DF:AD:22:9B:80:65:5D:7D:EF:C2:E9:AB:56:66:3F
X509v3 Authority Key Identifier:
keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:06:6e:22:02:17:18:a3:dd:28:d3:95:4b:e1:90:f2:70:4e:
0e:36:fd:a7:9a:5a:16:f9:66:a2:5c:5c:5c:37:52:84:cf:d6:
d0:62:aa:8a:85:cf:3e:4b:bc:f4:33:22:c4:d6:a8:a1:cf:7d:
ef:06:7c:47:a9:28:9b:42:9d:8a:91:cc:ee:28:3f:a4:67:51:
b3:72:a2:4f:56:3d:76:c2:25:e3:44:9d:4d:e8:37:fc:c5:58:
6c:63:a8:6e:6b:62:38:c1:1b:71:97:e9:3a:31:12:35:90:83:
8e:ae:d8:bb:c8:51:5b:27:d3:ff:f1:78:6d:82:74:39:65:6d:
b0:6a:ba:ca:bf:27:85:e6:bd:cd:be:72:a1:8f:31:75:1b:32:
50:25:99:ef:22:2b:88:dd:91:f9:eb:54:98:89:cf:5e:c8:c8:
d3:0b:56:70:17:1a:46:b6:68:74:b2:f9:e0:63:a1:6d:3c:00:
9b:56:f5:14:a8:45:26:9d:21:15:12:10:54:f3:95:bb:5d:63:
76:40:a1:f4:8b:2a:e3:fa:d3:c8:0a:ec:20:3a:d5:04:42:54:
95:3f:de:07:f6:ae:f5:d1:f2:b4:ac:eb:48:25:37:2f:bc:1d:
a8:12:bf:16:04:b4:ad:32:a8:fb:0a:4e:e0:06:7f:94:99:e2:
a7:4d:b9:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/p3chEnQhiF/gGKStcp7dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2Y3YmVmNTQ3ZDAwMjUzMzhhYTZiNmFlZTdhYTFkYmUx
NGFlMmEwHhcNMjYxMDE1MTMwMTQxWhcNMjYxMDE2MTMwMTQxWjAzMTEwLwYDVQQD
Eyg2ZmMwNWVhZTFmZGZhZDIyOWI4MDY1NWQ3ZGVmYzJlOWFiNTY2NjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6qTidObTqpI4+zXfJpRyPf+Kfb3
0FBTXM4MI2O77xnrAkMiFzQShttPnpagyECsBac1arLTArLeOTbN/j9r7WXGBtVy
Bks/Asv0/gpxig8KzVghkPY1UFW8ZWCc/R5eOsJBnEKWq99JN/8mYu+bfuxKzhql
cjyZFs5mvcj96yjvvGU0nmE4VatpyInXi+o1CpIBWGgncnpQXBuFTpdTVNxGv68U
IxQCcAebWlV2JeoR+0wQxpYYCBTvekupzv/5FZYtgSOu8nVfVnlUReTeFXC+iRAx
TXctp44Vd9YPbOcFECR2B/vGG/zIhN2gTX8fbdTXdHJ0akSHOK7/5kjSVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/AXq4f360im4BlXX3vwumrVmY/MB8GA1UdIwQY
MBaAFPA/e+9UfQAlM4qmtq7nqh2+FK4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84ODFhNDgtOGFmMy00N2FjLThlYTgt
ZDVjMjc0ZmVmOTY0LzEvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84ODFhNDgtOGFmMy00N2FjLThlYTgtZDVjMjc0ZmVmOTY0
LzEvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAZuIgIX
GKPdKNOVS+GQ8nBODjb9p5paFvlmolxcXDdShM/W0GKqioXPPku89DMixNaooc99
7wZ8R6kom0KdipHM7ig/pGdRs3KiT1Y9dsIl40SdTeg3/MVYbGOobmtiOMEbcZfp
OjESNZCDjq7Yu8hRWyfT//F4bYJ0OWVtsGq6yr8nhea9zb5yoY8xdRsyUCWZ7yIr
iN2R+etUmInPXsjI0wtWcBcaRrZodLL54GOhbTwAm1b1FKhFJp0hFRIQVPOVu11j
dkCh9Isq4/rTyArsIDrVBEJUlT/eB/au9dHytKzrSCU3L7wdqBK/FgS0rTKo+wpO
4AZ/lJnip025Sw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:45 2026 by rpki-client