
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
File: D8lnTtVfCnZcpdocb6-k3SXioXg.mft (raw, json)
Hash identifier: DI0NbdANcsGOnv6zyF00DA+Sm22WItwugECZjtxibPU=
Subject key identifier: E9:06:65:23:DC:1F:53:22:DA:DA:B9:2E:D3:A7:52:49:A5:87:9C:4E
Authority key identifier: 0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78
Certificate issuer: /CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
Certificate serial: 01A13C6E7207B441831E6C996EE195C419C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
Manifest number: 0B88
Signing time: Wed 14 Oct 2026 22:00:33 +0000
Manifest this update: Wed 14 Oct 2026 22:00:33 +0000
Manifest next update: Thu 15 Oct 2026 22:00:33 +0000
Files and hashes: 1: D8lnTtVfCnZcpdocb6-k3SXioXg.crl (hash: StaTs+3BUYu8cG1I2IHmrMYHk56XKAM8/J/IXD33Ws4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:72:07:b4:41:83:1e:6c:99:6e:e1:95:c4:19:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
Validity
Not Before: Oct 14 22:00:33 2026 GMT
Not After : Oct 15 22:00:33 2026 GMT
Subject: CN=e9066523dc1f5322dadab92ed3a75249a5879c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:3e:0a:a2:12:57:9b:50:13:ac:d6:89:c3:
73:f1:5b:e9:51:72:cf:80:83:86:51:08:eb:63:9b:
05:75:eb:7c:54:66:3f:7e:93:79:bf:af:8e:27:82:
cb:1c:77:77:e4:9b:0f:ed:3e:e1:d3:f9:2d:8e:9a:
0f:37:86:34:c9:97:e7:84:10:aa:50:0c:98:96:4a:
53:e5:a9:fb:c9:d1:05:1c:19:9d:ba:b6:ba:7b:51:
05:c5:f2:aa:98:89:43:23:6d:78:f5:5d:16:8c:5b:
5e:34:63:da:57:21:79:13:9a:85:70:db:5a:c6:87:
dc:7e:c6:b8:a9:40:43:dd:fe:a7:49:33:7d:a0:54:
45:54:fc:f0:c6:76:a1:96:7f:d1:46:22:f3:09:2d:
f6:dd:ca:b0:29:3a:b0:c4:77:81:92:73:54:e0:66:
f7:00:4b:c6:99:51:73:58:6c:2b:37:8a:6c:b1:46:
e0:2f:dc:a9:5a:0d:a4:ec:57:57:04:24:68:d5:8c:
cc:c5:b2:4a:30:6b:69:2a:cd:e1:de:0b:77:d2:9d:
ec:32:d3:7b:44:7c:2b:96:06:cf:f1:64:3d:6c:ea:
ab:ba:f5:3b:b7:50:3c:db:0c:e6:c6:94:9a:82:6b:
cf:d5:66:9e:d6:a1:e6:d3:53:56:1d:76:94:f8:0f:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:06:65:23:DC:1F:53:22:DA:DA:B9:2E:D3:A7:52:49:A5:87:9C:4E
X509v3 Authority Key Identifier:
keyid:0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:dd:2e:f3:5f:a3:46:94:bb:83:4c:df:38:c3:50:4c:da:23:
df:34:f8:49:cd:56:5e:81:07:a3:e3:1a:11:94:0e:fb:6a:c0:
35:e0:85:74:1e:53:db:ec:b8:96:88:3c:42:64:9e:4d:8e:a5:
eb:3d:4e:42:2b:67:1e:7a:09:76:8b:8e:74:b3:cd:9b:d8:29:
26:27:6b:70:b6:f4:65:92:9b:b8:cf:85:34:a7:26:91:7b:98:
bc:80:4c:58:30:c6:07:08:bf:61:f1:7a:6e:06:c1:c0:5e:7e:
40:32:f3:7d:48:36:bd:bc:3b:77:d9:ee:f1:b0:8c:93:51:ea:
04:2a:6a:80:28:a0:c1:a0:c7:35:bc:6f:0c:af:cd:f1:93:cd:
9b:c9:97:73:89:50:01:40:5e:f5:e1:ba:03:24:ab:99:8c:1d:
01:b3:be:fa:1d:e5:4d:fa:86:94:43:13:ab:0a:b5:96:d8:8f:
9a:76:48:3b:21:72:28:63:df:2c:2a:b2:9e:4e:19:e4:5e:62:
d6:90:4d:63:a6:39:7c:c1:84:9a:33:c5:d2:77:57:1c:55:e4:
96:57:c7:c4:f8:ff:fb:3e:66:47:6b:a9:d7:19:f3:c3:86:33:
81:cb:88:74:e7:88:4c:bf:10:9b:fa:90:ca:f2:8c:01:66:07:
a8:ea:f7:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8bnIHtEGDHmyZbuGVxBnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYzk2NzRlZDU1ZjBhNzY1Y2E1ZGExYzZmYWZhNGRkMjVl
MmExNzgwHhcNMjYxMDE0MjIwMDMzWhcNMjYxMDE1MjIwMDMzWjAzMTEwLwYDVQQD
EyhlOTA2NjUyM2RjMWY1MzIyZGFkYWI5MmVkM2E3NTI0OWE1ODc5YzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZY+CqISV5tQE6zWicNz8VvpUXLP
gIOGUQjrY5sFdet8VGY/fpN5v6+OJ4LLHHd35JsP7T7h0/ktjpoPN4Y0yZfnhBCq
UAyYlkpT5an7ydEFHBmdura6e1EFxfKqmIlDI2149V0WjFteNGPaVyF5E5qFcNta
xofcfsa4qUBD3f6nSTN9oFRFVPzwxnahln/RRiLzCS323cqwKTqwxHeBknNU4Gb3
AEvGmVFzWGwrN4pssUbgL9ypWg2k7FdXBCRo1YzMxbJKMGtpKs3h3gt30p3sMtN7
RHwrlgbP8WQ9bOqruvU7t1A82wzmxpSagmvP1Wae1qHm01NWHXaU+A+I1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkGZSPcH1Mi2tq5LtOnUkmlh5xOMB8GA1UdIwQY
MBaAFA/JZ07VXwp2XKXaHG+vpN0l4qF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDhsblR0VmZDblpjcGRvY2I2LWszU1hpb1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84YWIyYTMtMDg4ZS00ZTBjLWJlOWEt
NGE5NDZjNTJmYmMyLzEvRDhsblR0VmZDblpjcGRvY2I2LWszU1hpb1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84YWIyYTMtMDg4ZS00ZTBjLWJlOWEtNGE5NDZjNTJmYmMy
LzEvRDhsblR0VmZDblpjcGRvY2I2LWszU1hpb1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArN0u81+j
RpS7g0zfOMNQTNoj3zT4Sc1WXoEHo+MaEZQO+2rANeCFdB5T2+y4log8QmSeTY6l
6z1OQitnHnoJdouOdLPNm9gpJidrcLb0ZZKbuM+FNKcmkXuYvIBMWDDGBwi/YfF6
bgbBwF5+QDLzfUg2vbw7d9nu8bCMk1HqBCpqgCigwaDHNbxvDK/N8ZPNm8mXc4lQ
AUBe9eG6AySrmYwdAbO++h3lTfqGlEMTqwq1ltiPmnZIOyFyKGPfLCqynk4Z5F5i
1pBNY6Y5fMGEmjPF0ndXHFXkllfHxPj/+z5mR2up1xnzw4YzgcuIdOeITL8Qm/qQ
yvKMAWYHqOr3qQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:05 2026 by rpki-client