Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
File: 8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft (raw, json)
Hash identifier: Lrf4qZV3n1Fgh+hXe8+4cdTFCf6uaugilYTCkcXZFQk=
Subject key identifier: 06:FF:0F:83:44:83:83:8C:E9:57:23:14:55:49:49:1D:50:EF:17:44
Authority key identifier: F1:9C:5B:8B:EC:57:01:C1:FD:FD:29:D8:25:B1:E9:B9:E0:D5:1B:01
Certificate issuer: /CN=f19c5b8bec5701c1fdfd29d825b1e9b9e0d51b01
Certificate serial: 01A154E5BF7E67710F9F53F14D1C9CB7F876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
Manifest number: DE
Signing time: Mon 19 Oct 2026 16:01:45 +0000
Manifest this update: Mon 19 Oct 2026 16:01:45 +0000
Manifest next update: Tue 20 Oct 2026 16:01:45 +0000
Files and hashes: 1: 8Zxbi-xXAcH9_SnYJbHpueDVGwE.crl (hash: MMgzHw8WCmocbpJuk1V1hRHjgJkwCaXvDOcABdRR8PA=)
2: BZv-LoBRIRBTOEYKtA6kf7CvWnM.asa (hash: 6djo3sORenudDTgc+w+x6P5vO7vutX0bQrqSk11uuhw=)
3: QpyzK4A53JlVZWVV1v2jN1WPoAY.roa (hash: 16PfeuBy1FMSFoHFqQhe2PdhxV2dzUiD7Xy/ykQCYkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:e5:bf:7e:67:71:0f:9f:53:f1:4d:1c:9c:b7:f8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19c5b8bec5701c1fdfd29d825b1e9b9e0d51b01
Validity
Not Before: Oct 19 16:01:45 2026 GMT
Not After : Oct 20 16:01:45 2026 GMT
Subject: CN=06ff0f834483838ce95723145549491d50ef1744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:37:c0:10:ef:cf:24:cd:97:bc:4c:60:24:
04:ca:a8:1c:77:65:ac:76:94:26:53:81:e8:39:93:
a7:02:03:ca:e1:2a:17:2e:af:d1:f4:87:39:2f:93:
2d:b3:78:24:95:85:a0:bd:27:89:be:58:c3:7c:24:
e9:54:40:a3:a6:cf:1b:13:7b:64:21:29:83:0b:bf:
e9:a5:44:6f:be:fb:8f:c0:2f:8f:f4:36:7f:c4:e0:
8d:9c:b0:36:15:c3:e0:fe:f4:4c:56:1f:a7:08:7f:
03:e4:a6:f7:5d:c3:e8:8f:e7:ed:24:5a:1c:33:a8:
e5:d0:cb:eb:46:83:ad:7f:21:49:b4:67:62:cc:e9:
2b:7d:7f:20:68:9d:83:61:7f:d5:3a:3f:aa:e2:96:
31:ab:b8:05:df:50:03:3e:46:63:68:88:45:ee:85:
0d:54:95:63:08:ef:40:a7:74:dc:5a:fd:b2:23:9a:
bc:b9:b6:94:61:1d:68:15:bb:9e:c7:6d:6b:69:92:
00:49:ac:63:e3:55:bc:27:a2:7e:ee:6f:cf:9c:08:
af:f4:27:7e:df:7d:7a:23:f0:1a:f9:25:d6:f3:69:
cd:87:c1:51:ba:c7:9f:4c:0e:79:17:9b:13:89:df:
16:3a:22:f8:7e:0f:b1:2f:2a:d0:26:12:24:88:7a:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FF:0F:83:44:83:83:8C:E9:57:23:14:55:49:49:1D:50:EF:17:44
X509v3 Authority Key Identifier:
keyid:F1:9C:5B:8B:EC:57:01:C1:FD:FD:29:D8:25:B1:E9:B9:E0:D5:1B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cc:fd:e5:ce:1a:c0:95:04:d2:48:99:b9:b9:fe:9e:59:61:
c1:66:c8:2e:1e:aa:15:e5:4b:b3:9b:ed:af:1b:ac:d6:df:09:
67:d8:d3:b9:97:a2:dd:19:f1:a6:72:c4:b6:73:b6:f8:9f:76:
fb:c3:2f:a0:0a:b6:c3:e5:22:d6:9f:8a:d4:d2:d6:de:34:af:
93:d7:87:26:69:80:25:e4:80:cc:4c:95:a4:9c:b4:b2:69:dc:
52:20:70:c3:1c:69:88:93:51:5e:30:9f:b8:91:53:32:5f:75:
1d:66:b5:cc:3e:c5:62:d1:a5:f0:a8:5d:f0:f2:22:26:61:c5:
d2:4a:b6:e0:5a:8a:f9:27:be:da:ce:a3:5a:d6:60:c0:9a:47:
33:fe:9e:de:e4:a8:b1:b4:8a:e1:56:df:73:28:ab:ed:2a:94:
6c:cb:cb:ae:d1:e0:69:bf:25:c1:48:14:5a:99:f7:33:87:bb:
27:e5:cf:b6:4c:a9:da:17:d4:b3:9f:f4:7e:2d:0d:4d:bc:26:
0a:b2:7e:f9:a8:f1:b9:14:97:40:b0:0e:df:fc:2a:cf:4f:57:
35:d9:6b:43:81:72:d9:0a:f9:ba:44:eb:6b:d4:3e:01:e5:af:
3f:85:e0:5e:82:c3:03:f3:91:d7:76:c5:7d:69:65:4e:bd:08:
0b:f5:39:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFU5b9+Z3EPn1PxTRyct/h2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOWM1YjhiZWM1NzAxYzFmZGZkMjlkODI1YjFlOWI5ZTBk
NTFiMDEwHhcNMjYxMDE5MTYwMTQ1WhcNMjYxMDIwMTYwMTQ1WjAzMTEwLwYDVQQD
EygwNmZmMGY4MzQ0ODM4MzhjZTk1NzIzMTQ1NTQ5NDkxZDUwZWYxNzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfU3wBDvzyTNl7xMYCQEyqgcd2Ws
dpQmU4HoOZOnAgPK4SoXLq/R9Ic5L5Mts3gklYWgvSeJvljDfCTpVECjps8bE3tk
ISmDC7/ppURvvvuPwC+P9DZ/xOCNnLA2FcPg/vRMVh+nCH8D5Kb3XcPoj+ftJFoc
M6jl0MvrRoOtfyFJtGdizOkrfX8gaJ2DYX/VOj+q4pYxq7gF31ADPkZjaIhF7oUN
VJVjCO9Ap3TcWv2yI5q8ubaUYR1oFbuex21raZIASaxj41W8J6J+7m/PnAiv9Cd+
3316I/Aa+SXW82nNh8FRusefTA55F5sTid8WOiL4fg+xLyrQJhIkiHpzjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAb/D4NEg4OM6VcjFFVJSR1Q7xdEMB8GA1UdIwQY
MBaAFPGcW4vsVwHB/f0p2CWx6bng1RsBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFp4YmkteFhBY0g5X1NuWUpiSHB1ZURWR3dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jYWNkNGMtNzU3YS00NDRjLTljMzgt
YTRlMzNlMTg4MmMyLzEvOFp4YmkteFhBY0g5X1NuWUpiSHB1ZURWR3dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jYWNkNGMtNzU3YS00NDRjLTljMzgtYTRlMzNlMTg4MmMy
LzEvOFp4YmkteFhBY0g5X1NuWUpiSHB1ZURWR3dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMz95c4a
wJUE0kiZubn+nllhwWbILh6qFeVLs5vtrxus1t8JZ9jTuZei3RnxpnLEtnO2+J92
+8MvoAq2w+Ui1p+K1NLW3jSvk9eHJmmAJeSAzEyVpJy0smncUiBwwxxpiJNRXjCf
uJFTMl91HWa1zD7FYtGl8Khd8PIiJmHF0kq24FqK+Se+2s6jWtZgwJpHM/6e3uSo
sbSK4Vbfcyir7SqUbMvLrtHgab8lwUgUWpn3M4e7J+XPtkyp2hfUs5/0fi0NTbwm
CrJ++ajxuRSXQLAO3/wqz09XNdlrQ4Fy2Qr5ukTra9Q+AeWvP4XgXoLDA/OR13bF
fWllTr0IC/U5Lw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:40 2026 by rpki-client