Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: bzg+omeAM7n1Jv958EzLouxwdN+U9AHwpsXmnOqdoO0=
Subject key identifier: A9:97:BF:EB:19:24:C0:1D:AC:53:55:4B:D6:DD:C8:46:80:C9:3C:E2
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 01A0C5FC5D29E692CD30F0DF63C20D06087F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 17A0
Signing time: Mon 21 Sep 2026 22:00:45 +0000
Manifest this update: Mon 21 Sep 2026 22:00:45 +0000
Manifest next update: Tue 22 Sep 2026 22:00:45 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: 6vnFyALkjb/CgNU9vU+gTqqtkGDdS/uDXmDNh4aPT6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:5d:29:e6:92:cd:30:f0:df:63:c2:0d:06:08:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Sep 21 22:00:45 2026 GMT
Not After : Sep 22 22:00:45 2026 GMT
Subject: CN=a997bfeb1924c01dac53554bd6ddc84680c93ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:c6:2f:c7:53:f0:6e:8f:cc:3b:59:e9:ef:
b5:a4:7c:8a:08:69:75:08:2f:46:e5:6c:49:02:a6:
01:bb:13:d3:d8:fa:ee:96:d3:b7:03:7e:da:c1:b3:
bc:8c:4e:32:69:64:39:16:ec:c7:cf:c2:61:34:b8:
4a:1c:49:9a:59:2c:ad:1a:d0:3a:c3:13:1f:f1:80:
16:f3:87:0b:65:54:f2:e4:33:a6:e6:bc:88:62:da:
b7:ed:85:10:2b:0a:aa:6a:1f:f0:40:eb:24:e2:32:
f2:2b:b8:3b:8c:87:9c:de:a7:66:3e:e2:9b:98:c7:
47:59:73:36:8a:75:6e:71:38:b5:a4:eb:d1:25:5a:
1a:f3:90:8a:1e:a2:d7:30:8f:25:37:ec:7a:47:eb:
a5:e3:7e:f2:9f:52:27:6e:10:1a:7f:ad:f9:bc:b5:
2a:f1:56:1e:3a:1a:b4:00:bc:04:0c:79:a2:3f:f2:
06:aa:3b:ab:f4:e6:88:2a:39:11:00:51:64:d7:c8:
12:5a:36:ac:99:5b:e8:15:38:20:16:95:e0:e1:9a:
c6:88:48:07:ce:30:ae:44:e0:08:9c:9e:ce:e5:bf:
b5:a4:d8:1a:f5:2b:a1:b1:e0:53:d2:f0:b1:97:33:
9b:d2:9b:ff:a3:55:91:3d:42:9b:a9:5d:d0:21:33:
4a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:97:BF:EB:19:24:C0:1D:AC:53:55:4B:D6:DD:C8:46:80:C9:3C:E2
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2d:5b:da:a3:9e:5d:0e:c0:a6:25:a2:f4:ad:81:fe:f8:48:
b3:92:bf:6e:db:54:f9:e7:80:78:00:ac:ee:93:94:4d:c4:57:
6c:ec:b1:5b:dd:04:3c:9b:3c:ca:6c:11:cf:c7:57:c5:7d:4e:
2e:82:a9:f2:89:6c:c2:c7:4b:48:54:b1:cc:76:b7:e7:e8:82:
4d:d2:cf:d2:49:f1:be:72:d7:99:4d:20:87:12:6b:80:c4:f0:
ac:ba:d9:86:49:0e:3e:f2:71:41:8c:68:a0:40:1f:f4:8d:b4:
60:f9:f4:98:18:1e:9c:1b:da:34:c7:54:91:57:45:cd:04:b9:
95:b6:e0:a0:c3:97:94:d3:f0:11:1c:1e:e7:c8:1e:13:d6:21:
da:47:5c:23:c9:a5:d7:8f:74:28:89:9d:a1:1d:61:4e:27:c7:
52:2b:bb:7c:06:e6:8a:d7:4d:8f:e8:bc:ca:7b:01:dd:92:2c:
73:8a:f4:fe:b4:6e:6d:2c:ec:12:1d:e0:8e:c9:74:5f:3a:41:
73:9a:7b:d5:92:02:6e:a6:fc:47:b4:66:1a:33:d1:0c:d3:64:
e9:ae:f1:9c:3c:d0:79:5c:d8:79:98:7b:b8:2f:f8:9d:b9:2e:
ee:86:aa:89:55:e1:a8:60:3e:77:00:21:24:2f:88:98:71:b4:
df:51:56:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDF/F0p5pLNMPDfY8INBgh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYTBjNjdmZjg1OWY1NTVhZjg5MjE5Mzg4ODdjNjA4NTI2
OWE0MDIwHhcNMjYwOTIxMjIwMDQ1WhcNMjYwOTIyMjIwMDQ1WjAzMTEwLwYDVQQD
EyhhOTk3YmZlYjE5MjRjMDFkYWM1MzU1NGJkNmRkYzg0NjgwYzkzY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup/GL8dT8G6PzDtZ6e+1pHyKCGl1
CC9G5WxJAqYBuxPT2PrultO3A37awbO8jE4yaWQ5FuzHz8JhNLhKHEmaWSytGtA6
wxMf8YAW84cLZVTy5DOm5ryIYtq37YUQKwqqah/wQOsk4jLyK7g7jIec3qdmPuKb
mMdHWXM2inVucTi1pOvRJVoa85CKHqLXMI8lN+x6R+ul437yn1InbhAaf635vLUq
8VYeOhq0ALwEDHmiP/IGqjur9OaIKjkRAFFk18gSWjasmVvoFTggFpXg4ZrGiEgH
zjCuROAInJ7O5b+1pNga9SuhseBT0vCxlzOb0pv/o1WRPUKbqV3QITNKlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmXv+sZJMAdrFNVS9bdyEaAyTziMB8GA1UdIwQY
MBaAFPGgxn/4WfVVr4khk4iHxghSaaQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEt
YjQxOTk5ZTVjZjU0LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEtYjQxOTk5ZTVjZjU0
LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmi1b2qOe
XQ7ApiWi9K2B/vhIs5K/bttU+eeAeACs7pOUTcRXbOyxW90EPJs8ymwRz8dXxX1O
LoKp8olswsdLSFSxzHa35+iCTdLP0knxvnLXmU0ghxJrgMTwrLrZhkkOPvJxQYxo
oEAf9I20YPn0mBgenBvaNMdUkVdFzQS5lbbgoMOXlNPwERwe58geE9Yh2kdcI8ml
1490KImdoR1hTifHUiu7fAbmitdNj+i8ynsB3ZIsc4r0/rRubSzsEh3gjsl0XzpB
c5p71ZICbqb8R7RmGjPRDNNk6a7xnDzQeVzYeZh7uC/4nbku7oaqiVXhqGA+dwAh
JC+ImHG031FWFg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:48:39 2026 by rpki-client