Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
File: D8lnTtVfCnZcpdocb6-k3SXioXg.mft (raw, json)
Hash identifier: 4OSOW9+WiM48BEKeOeoQwYgwngQOv7eaAwN8D64Eqdo=
Subject key identifier: 9D:46:08:43:54:49:35:27:C8:4E:13:1E:83:34:B8:42:D7:51:81:A7
Authority key identifier: 0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78
Certificate issuer: /CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
Certificate serial: 01A001A62A75D61A1B1D0934E12B56A76E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
Manifest number: 0AE5
Signing time: Fri 14 Aug 2026 19:01:02 +0000
Manifest this update: Fri 14 Aug 2026 19:01:02 +0000
Manifest next update: Sat 15 Aug 2026 19:01:02 +0000
Files and hashes: 1: D8lnTtVfCnZcpdocb6-k3SXioXg.crl (hash: 4kSYIucGSH1pAfuDLSkRU7gYDpkvsv+tKec2jJuSMp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:2a:75:d6:1a:1b:1d:09:34:e1:2b:56:a7:6e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
Validity
Not Before: Aug 14 19:01:02 2026 GMT
Not After : Aug 15 19:01:02 2026 GMT
Subject: CN=9d46084354493527c84e131e8334b842d75181a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:7c:5d:9f:15:e1:bd:78:36:55:c9:5a:ca:
10:6b:37:10:ca:62:52:aa:fa:35:34:81:74:14:25:
3a:ad:9f:e2:0c:ac:fe:e4:50:ed:f3:f6:da:1a:ce:
20:8f:e9:a8:75:83:c3:2f:86:86:50:5d:35:17:00:
7b:77:43:d1:50:5b:91:bf:51:2d:65:41:54:7c:f1:
a5:d9:0f:31:b6:4a:22:a1:d9:0a:df:93:2f:53:72:
e2:e9:b6:b3:36:44:97:69:a8:58:7f:35:77:3a:d0:
4c:80:6a:32:68:95:47:b0:88:1e:5d:02:c3:aa:99:
c6:a9:ec:70:27:f6:e4:c7:12:53:bd:78:6a:d1:90:
5d:cc:72:31:03:a5:ce:04:42:a9:6a:05:dc:b2:67:
95:18:44:07:6c:ff:2e:38:95:fe:21:1b:04:d9:48:
ae:f8:fc:e6:98:3e:3f:2a:39:22:0b:06:ce:1b:2d:
15:9f:fe:e6:14:ce:a9:28:b9:16:08:b6:e4:88:a2:
5c:54:b6:b6:86:6b:8d:09:1f:2e:8b:e6:2d:a7:9c:
10:a8:89:0d:d1:57:d5:ba:1e:b8:bb:14:02:ee:0d:
12:79:c3:82:9b:4b:4b:9d:82:9f:2b:83:78:1a:65:
83:aa:f5:fe:ff:12:e7:a8:db:c5:84:c3:82:76:7c:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:46:08:43:54:49:35:27:C8:4E:13:1E:83:34:B8:42:D7:51:81:A7
X509v3 Authority Key Identifier:
keyid:0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e6:65:a3:58:9d:54:7b:de:14:b8:3d:6e:d8:8c:46:0d:5e:
9f:c1:b0:d2:cf:c5:4e:9d:e6:9d:b3:75:51:35:bc:a2:d8:d3:
5a:87:73:5c:6b:a7:af:2b:63:57:77:da:60:3b:78:33:41:e7:
ff:57:85:fd:40:a5:11:91:99:34:3e:de:2b:d9:a3:f5:a4:5a:
94:a4:47:2c:19:8d:10:0f:02:6f:ad:a1:65:f0:c6:29:00:cd:
a4:98:d7:ad:52:b9:67:60:d2:6f:e3:68:51:fa:dc:1b:bf:cf:
8e:11:6c:01:b6:5b:be:64:da:30:83:34:e6:8e:80:70:f2:ff:
9d:67:54:9d:f7:d0:a6:ce:b5:fd:6a:02:4e:65:a7:01:e2:bf:
54:f8:ce:b4:76:7a:53:9f:1d:fb:de:f6:45:b7:fa:a4:6c:f8:
14:99:aa:d5:c6:29:a2:98:82:03:f3:a8:9c:35:20:d2:64:19:
b3:f7:4b:32:13:7b:92:b2:da:86:a3:34:4c:db:9b:41:4f:98:
24:d3:bc:dc:63:9c:d1:a6:fa:b7:f1:36:c3:02:25:cf:4d:68:
fd:25:41:72:8c:f4:7d:5d:62:a1:a4:22:98:d1:c7:3e:61:59:
ab:c2:b6:1e:8f:67:52:b4:ac:04:94:8c:2b:e5:5a:c6:f2:8d:
86:11:5c:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpip11hobHQk04StWp24UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYzk2NzRlZDU1ZjBhNzY1Y2E1ZGExYzZmYWZhNGRkMjVl
MmExNzgwHhcNMjYwODE0MTkwMTAyWhcNMjYwODE1MTkwMTAyWjAzMTEwLwYDVQQD
Eyg5ZDQ2MDg0MzU0NDkzNTI3Yzg0ZTEzMWU4MzM0Yjg0MmQ3NTE4MWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZt8XZ8V4b14NlXJWsoQazcQymJS
qvo1NIF0FCU6rZ/iDKz+5FDt8/baGs4gj+modYPDL4aGUF01FwB7d0PRUFuRv1Et
ZUFUfPGl2Q8xtkoiodkK35MvU3Li6bazNkSXaahYfzV3OtBMgGoyaJVHsIgeXQLD
qpnGqexwJ/bkxxJTvXhq0ZBdzHIxA6XOBEKpagXcsmeVGEQHbP8uOJX+IRsE2Uiu
+PzmmD4/KjkiCwbOGy0Vn/7mFM6pKLkWCLbkiKJcVLa2hmuNCR8ui+Ytp5wQqIkN
0VfVuh64uxQC7g0SecOCm0tLnYKfK4N4GmWDqvX+/xLnqNvFhMOCdnw6fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1GCENUSTUnyE4THoM0uELXUYGnMB8GA1UdIwQY
MBaAFA/JZ07VXwp2XKXaHG+vpN0l4qF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDhsblR0VmZDblpjcGRvY2I2LWszU1hpb1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84YWIyYTMtMDg4ZS00ZTBjLWJlOWEt
NGE5NDZjNTJmYmMyLzEvRDhsblR0VmZDblpjcGRvY2I2LWszU1hpb1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84YWIyYTMtMDg4ZS00ZTBjLWJlOWEtNGE5NDZjNTJmYmMy
LzEvRDhsblR0VmZDblpjcGRvY2I2LWszU1hpb1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+Zlo1id
VHveFLg9btiMRg1en8Gw0s/FTp3mnbN1UTW8otjTWodzXGunrytjV3faYDt4M0Hn
/1eF/UClEZGZND7eK9mj9aRalKRHLBmNEA8Cb62hZfDGKQDNpJjXrVK5Z2DSb+No
UfrcG7/PjhFsAbZbvmTaMIM05o6AcPL/nWdUnffQps61/WoCTmWnAeK/VPjOtHZ6
U58d+972Rbf6pGz4FJmq1cYpopiCA/OonDUg0mQZs/dLMhN7krLahqM0TNubQU+Y
JNO83GOc0ab6t/E2wwIlz01o/SVBcoz0fV1ioaQimNHHPmFZq8K2Ho9nUrSsBJSM
K+VaxvKNhhFcbA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:27:42 2026 by rpki-client