Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: Z+W0G9l5/Rkgp0su1jvdmAZA4socyMb5J1NSM6MaV84=
Subject key identifier: 35:C2:09:4B:9E:EC:7D:73:53:14:B2:E3:3C:24:44:11:AE:7A:DB:81
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 01A001017190D4C7EE465144FA4E634ED141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 10B0
Signing time: Fri 14 Aug 2026 16:01:06 +0000
Manifest this update: Fri 14 Aug 2026 16:01:06 +0000
Manifest next update: Sat 15 Aug 2026 16:01:06 +0000
Files and hashes: 1: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: fxIXKqpdjLtyJ5oHcBvFXz/mhws7zlQBuiMdvCer/L8=)
2: RAC2EIsVMHG6hRns7HbMn17gGls.roa (hash: FF3H1038Rgf//9+NtLOprCe/ZirTllG7HflUAk9dINQ=)
3: nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa (hash: iN63qFqYR+Oirh/aAc/OhTjdpHDfVt7KEG3Iws+eD0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:71:90:d4:c7:ee:46:51:44:fa:4e:63:4e:d1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Aug 14 16:01:06 2026 GMT
Not After : Aug 15 16:01:06 2026 GMT
Subject: CN=35c2094b9eec7d735314b2e33c244411ae7adb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:14:0f:27:94:b5:e7:a9:2b:04:0e:b4:5d:9e:
ce:1c:b6:dd:41:30:6e:b4:46:24:c7:87:01:4f:d5:
af:75:7f:d9:22:d2:15:a4:92:87:20:3c:50:6f:26:
02:0b:19:80:6d:cc:99:c1:1d:be:e2:f7:db:16:c0:
63:10:2a:fb:3a:56:22:1c:be:87:fa:43:84:b9:3e:
e2:73:3c:aa:9c:de:17:2f:b3:54:c2:95:99:5e:88:
7f:08:d3:9b:b1:b2:0c:db:43:b0:9f:d7:c4:61:df:
b1:1a:5d:2f:26:eb:91:29:c6:fa:d4:58:59:ad:e9:
a8:fc:30:1f:19:26:5e:93:16:74:98:7e:dd:6f:85:
1a:e2:06:28:b0:f4:2c:1f:10:8b:9a:d9:db:15:2b:
27:df:e9:87:3c:57:68:cc:59:17:04:82:9d:45:a2:
bc:ec:9e:8f:12:e9:72:63:aa:a7:99:fc:c0:b4:9e:
e1:8c:57:0f:d7:4f:1f:12:98:ef:59:c0:da:ff:ce:
12:85:69:23:b5:6d:9e:47:a9:b0:8a:52:e9:f5:22:
bb:43:44:e0:e8:46:38:df:50:bd:24:23:10:0d:67:
8e:4e:9b:3a:c1:9c:33:65:24:9e:10:34:dc:12:da:
7e:9b:3c:bd:4f:ea:06:83:38:0d:b4:47:8a:c2:af:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C2:09:4B:9E:EC:7D:73:53:14:B2:E3:3C:24:44:11:AE:7A:DB:81
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:25:d5:b4:b0:a5:b4:a0:09:6c:fb:a9:bd:96:1d:c9:83:0d:
bc:4f:38:33:15:88:ad:44:ad:08:e3:18:06:de:1a:3d:9a:6f:
03:c8:a6:4a:9c:28:05:05:27:b1:3f:b4:ba:fe:9a:cc:02:b1:
2c:23:e3:6d:8f:77:22:eb:2f:ed:e1:38:18:2a:9e:1e:04:40:
3f:7b:00:34:e1:35:3d:83:77:53:1f:88:cc:8a:bc:9b:06:e1:
24:11:6d:cc:85:50:15:80:db:19:36:06:c4:48:81:e2:a7:b5:
09:be:ca:2c:37:74:d8:f4:c0:b4:b7:eb:3f:d2:6f:b1:00:c2:
81:30:fc:9b:56:0c:65:9f:30:8b:86:d4:98:04:26:6f:d6:bd:
0a:dc:14:ec:43:b8:a3:8d:d1:8f:e7:68:be:3f:15:26:c4:5b:
c4:05:00:e9:e0:6f:09:ba:64:99:a7:df:a7:d9:34:78:25:88:
3d:0c:68:67:e0:be:81:19:ba:67:f9:0e:2b:96:84:7f:13:b7:
64:b5:0b:fe:0d:ea:44:39:19:78:5b:5a:d5:1b:c1:b0:49:57:
4d:ab:2f:33:78:89:15:64:a9:01:09:85:30:04:55:1c:7b:93:
55:9c:e4:ba:94:f8:a7:1a:1a:96:f0:a4:fa:9e:4a:e2:01:f6:
23:01:68:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAXGQ1MfuRlFE+k5jTtFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjJmYmU4NWFlNDA4ZDM3N2IyMTdkNGViYTdiMzhiMjRi
YWY1ZGQwHhcNMjYwODE0MTYwMTA2WhcNMjYwODE1MTYwMTA2WjAzMTEwLwYDVQQD
EygzNWMyMDk0YjllZWM3ZDczNTMxNGIyZTMzYzI0NDQxMWFlN2FkYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBQPJ5S156krBA60XZ7OHLbdQTBu
tEYkx4cBT9WvdX/ZItIVpJKHIDxQbyYCCxmAbcyZwR2+4vfbFsBjECr7OlYiHL6H
+kOEuT7iczyqnN4XL7NUwpWZXoh/CNObsbIM20Own9fEYd+xGl0vJuuRKcb61FhZ
remo/DAfGSZekxZ0mH7db4Ua4gYosPQsHxCLmtnbFSsn3+mHPFdozFkXBIKdRaK8
7J6PEulyY6qnmfzAtJ7hjFcP108fEpjvWcDa/84ShWkjtW2eR6mwilLp9SK7Q0Tg
6EY431C9JCMQDWeOTps6wZwzZSSeEDTcEtp+mzy9T+oGgzgNtEeKwq9pswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXCCUue7H1zUxSy4zwkRBGuetuBMB8GA1UdIwQY
MBaAFPIi++ha5AjTd7IX1Ouns4skuvXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzkt
YjBjMWUzMzA0ZTc0LzEvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzktYjBjMWUzMzA0ZTc0
LzEvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyXVtLCl
tKAJbPupvZYdyYMNvE84MxWIrUStCOMYBt4aPZpvA8imSpwoBQUnsT+0uv6azAKx
LCPjbY93Iusv7eE4GCqeHgRAP3sANOE1PYN3Ux+IzIq8mwbhJBFtzIVQFYDbGTYG
xEiB4qe1Cb7KLDd02PTAtLfrP9JvsQDCgTD8m1YMZZ8wi4bUmAQmb9a9CtwU7EO4
o43Rj+dovj8VJsRbxAUA6eBvCbpkmaffp9k0eCWIPQxoZ+C+gRm6Z/kOK5aEfxO3
ZLUL/g3qRDkZeFta1RvBsElXTasvM3iJFWSpAQmFMARVHHuTVZzkupT4pxoalvCk
+p5K4gH2IwFohA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:23:14 2026 by rpki-client