Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: eHmEw0OewSRhLpHOAYd+uRJCMYE/6l252JQrpt9CcjI=
Subject key identifier: 74:67:EA:AA:73:66:0E:93:75:DD:13:D9:E7:63:7B:C2:60:18:4E:E5
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 01A13711ACCD3AC4FB7133505BFAADB03130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 19A6
Signing time: Tue 13 Oct 2026 21:01:07 +0000
Manifest this update: Tue 13 Oct 2026 21:01:07 +0000
Manifest next update: Wed 14 Oct 2026 21:01:07 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: NbBsMmM2Mz9DMe7NN5QxQ3iKHR0lqLOtGZeWGQMvJVg=)
2: dyj7Xcwg4fvIbgPvLBUgjAO8LDU.roa (hash: y2HtW5TPaDlHi0yiYdSPvHi8+3pJRBtpk7Wjb7tENAo=)
3: ocZPY67okT9wcZzWFKWfg9AUJ1M.roa (hash: iDAiG1YKPh6kU5IMftBrjc5iYiPA+UXefNbDPt+Am8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:11:ac:cd:3a:c4:fb:71:33:50:5b:fa:ad:b0:31:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Oct 13 21:01:07 2026 GMT
Not After : Oct 14 21:01:07 2026 GMT
Subject: CN=7467eaaa73660e9375dd13d9e7637bc260184ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:54:ed:88:f7:b8:82:27:88:cf:8b:a2:c2:
1c:01:ec:c5:eb:87:75:c3:19:a2:90:d5:78:3d:c4:
a5:90:6c:54:3a:b7:a6:a2:2c:90:78:c8:37:d2:d2:
93:0d:b1:8f:7a:28:3a:a9:1b:7d:ef:03:0e:d8:e5:
75:ee:f8:43:23:21:fa:ce:a2:bc:5e:20:b5:2d:61:
d0:e3:f3:6b:b6:1d:ba:e4:56:d6:b1:b2:b6:d1:ad:
93:7c:4d:14:12:4d:2d:ce:47:9e:cd:74:06:65:0c:
0e:82:ca:dd:9c:10:e6:05:e5:d0:f9:96:2b:a0:dd:
da:c4:bf:c0:ca:27:19:f2:cf:02:7a:be:c3:fc:6e:
bb:41:be:6d:0f:bc:7b:5e:db:b2:2c:36:9f:04:1c:
13:ae:5a:5b:f1:7d:a4:56:a7:78:db:70:76:b2:bb:
84:1a:85:c0:29:82:90:12:98:c5:9b:1d:da:7f:7c:
99:d5:00:10:24:cf:f4:52:9d:e5:e0:b0:d0:d6:98:
46:09:fa:6a:a9:e8:6c:d2:89:fd:ce:b6:00:97:f4:
2b:20:e9:b1:aa:e0:32:59:b4:fe:cb:53:09:ef:a3:
47:7e:dd:86:62:15:b6:d7:1f:7d:63:93:b6:d7:51:
ae:96:18:7f:46:40:22:58:cf:23:3c:f8:16:3d:0b:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:67:EA:AA:73:66:0E:93:75:DD:13:D9:E7:63:7B:C2:60:18:4E:E5
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:01:0e:80:d7:3e:cd:44:cd:e5:89:64:16:f1:4b:a3:8c:1b:
eb:90:4c:c0:52:c0:59:f6:eb:53:93:05:25:ef:a5:fd:04:f9:
e0:9a:c1:c3:ed:0e:42:be:46:ab:65:81:22:f1:b2:35:9b:96:
7a:24:75:cb:4b:e1:3a:56:f4:24:c9:b3:11:fd:f4:d0:aa:3c:
b7:4e:a6:5f:4b:44:45:58:1f:9c:7c:ac:15:c4:92:c4:d8:a9:
24:c3:e5:6a:82:d2:67:70:1c:5e:19:9e:62:a5:83:17:21:db:
70:ad:5a:c5:e5:cf:7f:c6:19:89:ef:14:ac:ef:0a:78:5e:4f:
90:4b:be:b5:55:8f:c6:5b:b5:d5:01:94:26:78:ed:fd:48:6c:
cc:8e:6b:55:94:57:73:e6:94:2e:e3:a1:ae:7b:49:7d:8e:0b:
14:33:1c:25:86:a9:11:ea:75:14:90:c8:84:9f:a8:c5:12:96:
dd:25:a4:fd:47:d6:1a:98:13:81:94:d7:f4:48:44:cc:a2:08:
9d:05:46:0b:00:6f:ed:1f:cf:9c:13:df:72:64:ca:a7:6d:33:
d9:da:04:38:11:2e:cc:d1:bf:f8:36:0f:31:99:eb:4a:6b:d3:
94:e4:90:23:06:82:a4:b4:8a:05:8f:99:bc:42:27:ae:51:76:
81:30:01:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE3EazNOsT7cTNQW/qtsDEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2Y0OTYzMzU3ZGRiOTg1NWY5YmFjNGM3ZDk5NWFkYzg5
YTM3MmEwHhcNMjYxMDEzMjEwMTA3WhcNMjYxMDE0MjEwMTA3WjAzMTEwLwYDVQQD
Eyg3NDY3ZWFhYTczNjYwZTkzNzVkZDEzZDllNzYzN2JjMjYwMTg0ZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZBU7Yj3uIIniM+LosIcAezF64d1
wxmikNV4PcSlkGxUOremoiyQeMg30tKTDbGPeig6qRt97wMO2OV17vhDIyH6zqK8
XiC1LWHQ4/Nrth265FbWsbK20a2TfE0UEk0tzkeezXQGZQwOgsrdnBDmBeXQ+ZYr
oN3axL/AyicZ8s8Cer7D/G67Qb5tD7x7XtuyLDafBBwTrlpb8X2kVqd423B2sruE
GoXAKYKQEpjFmx3af3yZ1QAQJM/0Up3l4LDQ1phGCfpqqehs0on9zrYAl/QrIOmx
quAyWbT+y1MJ76NHft2GYhW21x99Y5O211Gulhh/RkAiWM8jPPgWPQslNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRn6qpzZg6Tdd0T2edje8JgGE7lMB8GA1UdIwQY
MBaAFPDPSWM1fduYVfm6xMfZla3ImjcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAt
NmUwNTZiNjE3ZDJhLzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAtNmUwNTZiNjE3ZDJh
LzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQEOgNc+
zUTN5YlkFvFLo4wb65BMwFLAWfbrU5MFJe+l/QT54JrBw+0OQr5Gq2WBIvGyNZuW
eiR1y0vhOlb0JMmzEf300Ko8t06mX0tERVgfnHysFcSSxNipJMPlaoLSZ3AcXhme
YqWDFyHbcK1axeXPf8YZie8UrO8KeF5PkEu+tVWPxlu11QGUJnjt/UhszI5rVZRX
c+aULuOhrntJfY4LFDMcJYapEep1FJDIhJ+oxRKW3SWk/UfWGpgTgZTX9EhEzKII
nQVGCwBv7R/PnBPfcmTKp20z2doEOBEuzNG/+DYPMZnrSmvTlOSQIwaCpLSKBY+Z
vEInrlF2gTABOQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 03:44:18 2026 by rpki-client