Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier: QsbE82w1hG77ekZ3koxtiamlPD9HfpLtQVK82am5tN4=
Subject key identifier: D1:67:4A:E3:E2:BE:A4:F7:10:78:B7:63:01:29:29:43:F3:90:06:07
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 01A001DCB4373707308BFEC78334C60BDD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number: 1A10
Signing time: Fri 14 Aug 2026 20:00:36 +0000
Manifest this update: Fri 14 Aug 2026 20:00:36 +0000
Manifest next update: Sat 15 Aug 2026 20:00:36 +0000
Files and hashes: 1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: Kn7ueGjf01OMIcCc7GhAvR4LwvZKhWVdbPtrHU+G7fg=)
2: unUyBQz8XFF2OcgZ1f90_tl9Ad4.roa (hash: Q3zQczsKFUa5DCI4QfqsevX6E5xk3SVGs2WbjqkExHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:b4:37:37:07:30:8b:fe:c7:83:34:c6:0b:dd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Aug 14 20:00:36 2026 GMT
Not After : Aug 15 20:00:36 2026 GMT
Subject: CN=d1674ae3e2bea4f71078b76301292943f3900607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:21:76:6d:63:5e:b7:96:c0:f9:ac:f1:ef:
5f:ca:f0:4f:e9:df:07:8b:95:72:e3:de:36:14:f2:
9a:13:af:9e:86:07:4e:23:7e:30:c3:ad:0d:14:a0:
19:40:85:5f:23:92:ba:99:63:6c:ad:2a:bf:81:ba:
aa:85:fd:bb:b6:01:16:fc:21:b4:67:5c:fd:d4:0d:
ab:0f:ae:e3:19:4a:e8:00:3d:ec:84:c2:35:14:32:
f3:0f:02:56:a5:d1:c5:ae:c5:f2:f9:58:a8:af:8f:
83:f7:15:8b:42:f7:b8:ff:1b:f4:b0:7c:98:73:f6:
86:29:b3:2e:0c:15:a9:f5:0d:50:86:43:86:e2:6a:
f8:42:8f:eb:fa:5b:74:16:cf:50:02:c6:f0:36:be:
36:96:af:f5:43:ee:8e:52:6d:73:31:27:65:59:9f:
20:1d:01:75:58:95:21:50:2b:da:8a:67:eb:fc:87:
41:56:26:57:10:2f:6f:55:4c:ab:ae:8d:1c:46:ee:
2d:f4:d5:e3:ff:6c:f7:91:7e:e9:d7:d7:2f:4c:c9:
ce:03:bf:b3:be:bd:85:dd:75:5c:15:a5:2d:b8:91:
c1:e5:9e:5a:96:b3:ae:e4:be:27:c4:c0:e1:46:ac:
d5:26:30:de:27:63:9a:95:9d:87:df:ce:d6:34:1b:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:67:4A:E3:E2:BE:A4:F7:10:78:B7:63:01:29:29:43:F3:90:06:07
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:42:8e:29:c1:77:9d:94:a0:d9:df:05:36:49:37:59:81:52:
6d:c3:d5:6b:98:50:1c:7d:5c:3a:16:55:28:4e:02:02:75:40:
fa:d9:9d:2f:c1:07:bb:1f:2c:21:91:3f:3b:b0:b8:33:a1:b2:
35:36:bc:0a:7d:cb:59:37:93:2f:88:31:d5:8b:22:8d:a1:59:
98:35:c2:df:f0:b9:77:58:8b:27:e9:82:aa:f5:ab:4a:c2:a6:
e1:66:13:77:7a:02:15:bf:e0:d0:ed:80:39:72:08:3c:c4:cd:
32:88:f9:a0:59:59:04:91:1e:c9:c8:4e:a9:59:5f:26:d6:08:
f1:a3:a1:a7:55:fa:a6:44:bd:95:e6:f6:d5:34:24:ed:e4:0b:
a0:fb:e7:af:cb:8f:f6:64:16:e4:b1:db:1e:9e:8a:21:b8:37:
cc:e5:8e:9b:9f:98:a8:8f:ac:e9:f8:97:2f:85:e8:a8:0b:bf:
6f:cc:ca:26:79:d1:d1:98:df:59:c9:00:2b:64:ff:64:6a:fd:
b5:c3:dd:f5:16:27:7c:10:cc:9c:a9:25:ca:01:61:8f:bb:01:
51:a8:aa:91:f5:c5:cc:25:7c:b7:86:0c:4c:1c:bd:a6:48:80:
4c:20:2d:cc:92:6d:f8:8b:e5:79:e6:38:52:ee:32:39:2a:db:
32:47:f7:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3LQ3Nwcwi/7HgzTGC90gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjE0ZWQxMjRmOWEyZjNkZWFiMTAwNmYxODRjZjRmYjgw
YTNhZWMwHhcNMjYwODE0MjAwMDM2WhcNMjYwODE1MjAwMDM2WjAzMTEwLwYDVQQD
EyhkMTY3NGFlM2UyYmVhNGY3MTA3OGI3NjMwMTI5Mjk0M2YzOTAwNjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BMhdm1jXreWwPms8e9fyvBP6d8H
i5Vy4942FPKaE6+ehgdOI34ww60NFKAZQIVfI5K6mWNsrSq/gbqqhf27tgEW/CG0
Z1z91A2rD67jGUroAD3shMI1FDLzDwJWpdHFrsXy+Vior4+D9xWLQve4/xv0sHyY
c/aGKbMuDBWp9Q1QhkOG4mr4Qo/r+lt0Fs9QAsbwNr42lq/1Q+6OUm1zMSdlWZ8g
HQF1WJUhUCvaimfr/IdBViZXEC9vVUyrro0cRu4t9NXj/2z3kX7p19cvTMnOA7+z
vr2F3XVcFaUtuJHB5Z5alrOu5L4nxMDhRqzVJjDeJ2OalZ2H387WNBtMJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFnSuPivqT3EHi3YwEpKUPzkAYHMB8GA1UdIwQY
MBaAFPDxTtEk+aLz3qsQBvGEz0+4CjrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQt
NDM2MTJlN2Q5Y2MxLzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQtNDM2MTJlN2Q5Y2Mx
LzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuUKOKcF3
nZSg2d8FNkk3WYFSbcPVa5hQHH1cOhZVKE4CAnVA+tmdL8EHux8sIZE/O7C4M6Gy
NTa8Cn3LWTeTL4gx1YsijaFZmDXC3/C5d1iLJ+mCqvWrSsKm4WYTd3oCFb/g0O2A
OXIIPMTNMoj5oFlZBJEeychOqVlfJtYI8aOhp1X6pkS9leb21TQk7eQLoPvnr8uP
9mQW5LHbHp6KIbg3zOWOm5+YqI+s6fiXL4XoqAu/b8zKJnnR0ZjfWckAK2T/ZGr9
tcPd9RYnfBDMnKklygFhj7sBUaiqkfXFzCV8t4YMTBy9pkiATCAtzJJt+IvleeY4
Uu4yOSrbMkf3Gw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:37 2026 by rpki-client