Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: 5hLDoSa7kNkpQi4pxuo+EsH6r7bh9l19M83KitvhKWA=
Subject key identifier: C7:62:62:6C:1C:29:02:EF:FB:D1:8F:7B:16:9E:F7:23:E4:97:A0:11
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 01A0C47B89E6B7CB3E2495EBBACCAE2F275D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 15:00:25 +0000
Manifest this update: Mon 21 Sep 2026 15:00:25 +0000
Manifest next update: Tue 22 Sep 2026 15:00:25 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: l1gxT6IWSUX3KD2j3OwpoXXj6WkFmI/ObWyJo7xu2Fk=)
2: ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa (hash: iGCdrPf4Ppnrs4dgUDy3DlxhNj0AHzaCi9s56mQZshU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:89:e6:b7:cb:3e:24:95:eb:ba:cc:ae:2f:27:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Sep 21 15:00:25 2026 GMT
Not After : Sep 22 15:00:25 2026 GMT
Subject: CN=c762626c1c2902effbd18f7b169ef723e497a011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:64:ae:be:41:1f:7a:c7:2a:51:8e:1c:76:
f8:c8:4c:66:95:ca:24:18:53:8f:d4:db:29:36:39:
0f:fe:70:b5:d8:12:ac:c7:a0:6e:e6:5e:a3:23:f3:
74:55:75:ef:3b:8a:2d:b4:6e:d5:69:13:e3:62:f0:
f3:1e:91:20:3f:d9:5b:00:5b:ce:21:e0:b0:eb:0d:
71:bb:6b:07:64:e8:cd:d3:d9:f2:26:cf:3e:2e:d8:
58:28:1f:a1:d1:5d:8c:57:01:be:1d:f0:72:f3:97:
58:81:5a:14:53:46:36:48:2c:fa:29:ce:07:3b:58:
76:55:5d:08:9d:71:4a:a3:4a:6e:ee:5f:39:e0:66:
56:a5:c4:8e:f8:02:79:c2:d5:1c:94:73:01:0d:14:
e8:3c:91:24:9c:65:e9:50:c7:64:a9:79:f5:c7:fe:
f8:f0:11:46:b9:43:b0:e9:02:d9:04:7f:5f:ba:ff:
28:08:ea:c6:c2:72:75:12:e7:13:ae:b7:56:e9:ec:
5b:43:73:68:54:19:67:e6:9e:94:6a:2f:1d:a9:f3:
17:23:1d:1c:b7:28:c3:e9:42:73:d9:3e:b8:14:66:
cd:7b:15:63:1a:00:2b:92:a5:5f:70:bb:ef:ac:8d:
ee:9b:36:dc:fa:23:db:ff:20:ca:08:31:b9:44:47:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:62:62:6C:1C:29:02:EF:FB:D1:8F:7B:16:9E:F7:23:E4:97:A0:11
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:34:3f:62:61:06:7a:98:03:b0:66:e4:a3:20:40:75:dd:4e:
d4:bc:bd:84:e2:71:ca:b5:46:d6:b0:5a:6f:6d:fa:da:7f:92:
4f:9a:8e:1d:65:92:22:bb:52:55:09:71:e0:01:cc:04:e9:3c:
ef:bb:5e:90:65:29:9d:1c:08:9c:ed:10:85:b2:2c:9b:12:0d:
b4:bd:97:cb:e1:6b:73:51:dd:ae:6c:84:e8:72:e5:2b:a3:be:
90:cf:dd:20:52:62:23:0d:f9:51:db:5d:b4:31:91:b0:25:fc:
88:9c:7a:e4:b8:5e:98:3b:b6:0c:e0:f9:ba:b1:71:8a:b9:5f:
02:b7:d6:a3:25:43:7d:ab:4c:79:ac:52:a0:d0:18:50:6e:d0:
b0:d1:23:87:91:27:86:1a:7b:e0:0a:ae:56:24:8d:75:4a:77:
57:b6:1d:56:51:b0:5e:8f:72:06:63:cc:a8:eb:e0:49:d9:c6:
ca:ed:81:e6:a6:4b:bc:cf:54:1e:a6:c0:f2:6a:a5:f1:40:5b:
27:12:f0:49:a6:7c:2d:b4:8b:82:8f:54:2a:3a:84:32:31:9e:
ab:9e:c2:08:38:60:82:89:32:fc:5c:4c:f2:ab:08:aa:76:0c:
39:73:d1:20:8f:51:f8:2b:7b:ea:fc:ee:cf:5d:95:29:1f:1d:
18:eb:4a:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEe4nmt8s+JJXrusyuLyddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYzFmOWFlNGQxODQ3ZDQ5ZDRkOGZkYWUzNDU3YjVhMTcy
NTY3MDcwHhcNMjYwOTIxMTUwMDI1WhcNMjYwOTIyMTUwMDI1WjAzMTEwLwYDVQQD
EyhjNzYyNjI2YzFjMjkwMmVmZmJkMThmN2IxNjllZjcyM2U0OTdhMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UZkrr5BH3rHKlGOHHb4yExmlcok
GFOP1NspNjkP/nC12BKsx6Bu5l6jI/N0VXXvO4ottG7VaRPjYvDzHpEgP9lbAFvO
IeCw6w1xu2sHZOjN09nyJs8+LthYKB+h0V2MVwG+HfBy85dYgVoUU0Y2SCz6Kc4H
O1h2VV0InXFKo0pu7l854GZWpcSO+AJ5wtUclHMBDRToPJEknGXpUMdkqXn1x/74
8BFGuUOw6QLZBH9fuv8oCOrGwnJ1EucTrrdW6exbQ3NoVBln5p6Uai8dqfMXIx0c
tyjD6UJz2T64FGbNexVjGgArkqVfcLvvrI3umzbc+iPb/yDKCDG5REe0TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdiYmwcKQLv+9GPexae9yPkl6ARMB8GA1UdIwQY
MBaAFPHB+a5NGEfUnU2P2uNFe1oXJWcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGNINXJrMFlSOVNkVFlfYTQwVjdXaGNsWndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84NDYwNTAtMmEzYi00OGQ3LWIyYWUt
MjU4MWIzZGI3OGNiLzEvOGNINXJrMFlSOVNkVFlfYTQwVjdXaGNsWndjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC84NDYwNTAtMmEzYi00OGQ3LWIyYWUtMjU4MWIzZGI3OGNi
LzEvOGNINXJrMFlSOVNkVFlfYTQwVjdXaGNsWndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzQ/YmEG
epgDsGbkoyBAdd1O1Ly9hOJxyrVG1rBab2362n+ST5qOHWWSIrtSVQlx4AHMBOk8
77tekGUpnRwInO0QhbIsmxINtL2Xy+Frc1HdrmyE6HLlK6O+kM/dIFJiIw35Udtd
tDGRsCX8iJx65LhemDu2DOD5urFxirlfArfWoyVDfatMeaxSoNAYUG7QsNEjh5En
hhp74AquViSNdUp3V7YdVlGwXo9yBmPMqOvgSdnGyu2B5qZLvM9UHqbA8mql8UBb
JxLwSaZ8LbSLgo9UKjqEMjGeq57CCDhggoky/FxM8qsIqnYMOXPRII9R+Ct76vzu
z12VKR8dGOtKyA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:42:02 2026 by rpki-client