Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
File: 8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft (raw, json)
Hash identifier: B7eLvK27NZe0DIB8HqOMrd0OcRm7j50FJviKPb1HGi4=
Subject key identifier: 28:85:C1:40:84:F4:AC:DE:68:59:CD:15:6B:60:73:30:3E:6A:C4:ED
Authority key identifier: F0:CD:59:33:59:79:FC:36:0E:7C:BE:3C:27:7C:BF:99:8F:A9:36:10
Certificate issuer: /CN=f0cd59335979fc360e7cbe3c277cbf998fa93610
Certificate serial: 01A13D80D06C93B9A5883306C601D4FA452C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
Manifest number: 0106
Signing time: Thu 15 Oct 2026 03:00:14 +0000
Manifest this update: Thu 15 Oct 2026 03:00:14 +0000
Manifest next update: Fri 16 Oct 2026 03:00:14 +0000
Files and hashes: 1: 8M1ZM1l5_DYOfL48J3y_mY-pNhA.crl (hash: nbrAG3qvt40D8JCme2cDzDJP4NZsoy0y85BPDw8fv9s=)
2: r42oR0C5g5SuflKWJ6GIOiVUO0U.roa (hash: Cm2S/1eJoWgRD00HMcE5iW9xvFGpF376Bo3aWrPUtvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:d0:6c:93:b9:a5:88:33:06:c6:01:d4:fa:45:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cd59335979fc360e7cbe3c277cbf998fa93610
Validity
Not Before: Oct 15 03:00:14 2026 GMT
Not After : Oct 16 03:00:14 2026 GMT
Subject: CN=2885c14084f4acde6859cd156b6073303e6ac4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:5a:8b:b2:77:61:d7:40:3f:dd:b1:14:5d:
88:b8:6e:e5:2e:1e:24:ed:9a:e9:f6:74:a2:05:f4:
55:9a:4e:9f:5b:5a:3b:cc:e3:15:cc:52:81:c8:88:
e7:b9:99:da:f7:a0:56:34:8e:cd:a9:16:4f:ee:7e:
ab:ed:dd:c6:b9:b5:88:28:1f:69:b1:e0:ea:8d:46:
46:f0:e0:70:1a:b5:18:89:c8:15:ff:91:4f:f8:12:
b2:78:68:23:b6:3f:3d:03:f9:6c:01:53:19:b0:6b:
86:c8:30:22:51:c9:07:b5:9e:a3:93:ae:ed:39:09:
d8:69:96:a3:8c:bb:c0:d7:1b:a6:f0:59:df:cb:6d:
43:65:ca:03:a5:4f:d3:08:60:e0:8e:f8:9b:03:1c:
c3:de:7a:02:87:3b:d2:15:ea:2c:ce:65:6e:51:bf:
ad:ea:6b:90:1a:29:17:cf:5f:fc:52:7b:a7:41:70:
b4:26:62:05:5a:2e:eb:f2:59:e5:4e:37:fb:65:61:
2c:74:ae:c9:2f:8a:08:f3:10:62:13:c4:82:64:16:
40:c2:71:aa:66:d1:c1:4d:0e:30:ba:82:f4:3b:f2:
87:e1:80:51:80:6d:d9:25:4a:02:bc:e8:38:9a:53:
aa:e5:bd:8b:81:c4:44:a0:18:9e:a4:f5:20:08:eb:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:85:C1:40:84:F4:AC:DE:68:59:CD:15:6B:60:73:30:3E:6A:C4:ED
X509v3 Authority Key Identifier:
keyid:F0:CD:59:33:59:79:FC:36:0E:7C:BE:3C:27:7C:BF:99:8F:A9:36:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:30:e6:4a:64:a6:d2:88:cc:42:0d:b8:37:0c:dd:1f:34:77:
5b:0d:98:8a:39:93:40:49:ae:18:24:19:5e:36:47:26:d5:57:
3a:07:f8:f8:bc:7d:f2:ed:b8:27:72:c1:ed:76:1f:23:36:ba:
11:d7:bc:62:60:d8:44:8c:6c:1b:97:58:53:c4:69:46:7a:54:
a5:86:e0:9f:7e:92:ad:14:d8:19:20:f6:03:86:d7:10:74:c9:
37:52:9a:55:43:5b:e1:5e:f1:2a:c5:38:28:1e:d7:72:7f:05:
11:c5:4b:09:db:14:8a:69:ab:6a:f2:8a:52:70:43:f5:9e:48:
f2:79:ab:02:35:a0:cd:44:b5:9e:0f:0d:90:e8:a3:63:6f:9d:
53:37:b8:57:c4:48:8d:ae:f2:a0:ab:8a:ec:ad:b1:8c:e2:c2:
f9:cd:f1:a9:ef:77:8d:cc:5c:e9:5c:09:79:6e:e3:3d:38:7a:
1a:d1:8d:18:fb:49:29:9c:98:86:be:51:99:40:0e:c9:e5:33:
7b:1a:73:1a:48:1c:75:f8:7f:87:e2:c1:62:5a:3f:6f:6d:73:
70:6f:55:84:41:ca:eb:bf:dd:12:55:74:76:03:6c:ca:7b:61:
1f:f8:00:10:c8:5f:9f:f4:52:09:b9:37:57:42:6c:be:97:73:
1d:c6:5a:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9gNBsk7mliDMGxgHU+kUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2Q1OTMzNTk3OWZjMzYwZTdjYmUzYzI3N2NiZjk5OGZh
OTM2MTAwHhcNMjYxMDE1MDMwMDE0WhcNMjYxMDE2MDMwMDE0WjAzMTEwLwYDVQQD
EygyODg1YzE0MDg0ZjRhY2RlNjg1OWNkMTU2YjYwNzMzMDNlNmFjNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTVai7J3YddAP92xFF2IuG7lLh4k
7Zrp9nSiBfRVmk6fW1o7zOMVzFKByIjnuZna96BWNI7NqRZP7n6r7d3GubWIKB9p
seDqjUZG8OBwGrUYicgV/5FP+BKyeGgjtj89A/lsAVMZsGuGyDAiUckHtZ6jk67t
OQnYaZajjLvA1xum8Fnfy21DZcoDpU/TCGDgjvibAxzD3noChzvSFeoszmVuUb+t
6muQGikXz1/8UnunQXC0JmIFWi7r8lnlTjf7ZWEsdK7JL4oI8xBiE8SCZBZAwnGq
ZtHBTQ4wuoL0O/KH4YBRgG3ZJUoCvOg4mlOq5b2LgcREoBiepPUgCOtSfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiFwUCE9KzeaFnNFWtgczA+asTtMB8GA1UdIwQY
MBaAFPDNWTNZefw2Dny+PCd8v5mPqTYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE0xWk0xbDVfRFlPZkw0OEozeV9tWS1wTmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82NWQ2ZjUtODY1Ny00ZGRjLWI0NDQt
NDI2OTAxMjBjMjMxLzEvOE0xWk0xbDVfRFlPZkw0OEozeV9tWS1wTmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82NWQ2ZjUtODY1Ny00ZGRjLWI0NDQtNDI2OTAxMjBjMjMx
LzEvOE0xWk0xbDVfRFlPZkw0OEozeV9tWS1wTmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTDmSmSm
0ojMQg24NwzdHzR3Ww2YijmTQEmuGCQZXjZHJtVXOgf4+Lx98u24J3LB7XYfIza6
Ede8YmDYRIxsG5dYU8RpRnpUpYbgn36SrRTYGSD2A4bXEHTJN1KaVUNb4V7xKsU4
KB7Xcn8FEcVLCdsUimmravKKUnBD9Z5I8nmrAjWgzUS1ng8NkOijY2+dUze4V8RI
ja7yoKuK7K2xjOLC+c3xqe93jcxc6VwJeW7jPTh6GtGNGPtJKZyYhr5RmUAOyeUz
expzGkgcdfh/h+LBYlo/b21zcG9VhEHK67/dElV0dgNsynthH/gAEMhfn/RSCbk3
V0JsvpdzHcZaSw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 13:37:49 2026 by rpki-client