
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: SvrG4soS6WDBrAlWj/rlrDQ3ABJ+5bWT39R+7NjMqyI=
Subject key identifier: BB:0F:2F:5D:A8:F0:98:A5:C2:F6:FF:06:B8:7A:AD:B3:15:C6:CD:81
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 01A0C444ABE2BF8444742119CBE36671614E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 1479
Signing time: Mon 21 Sep 2026 14:00:29 +0000
Manifest this update: Mon 21 Sep 2026 14:00:29 +0000
Manifest next update: Tue 22 Sep 2026 14:00:29 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: +HX/6fX9SsSF12KavvJbAfcfrewxFBiTmZMj34NaPmk=)
2: po4crTaA95m-lSpTh_du9PtU6gY.roa (hash: SJ7n/VopAoAzW1zSv/V6X7AVtWxebx5P9AXUE5osTUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:ab:e2:bf:84:44:74:21:19:cb:e3:66:71:61:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Sep 21 14:00:29 2026 GMT
Not After : Sep 22 14:00:29 2026 GMT
Subject: CN=bb0f2f5da8f098a5c2f6ff06b87aadb315c6cd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:b4:7b:a8:54:b1:6a:ed:c0:58:53:f8:f8:
23:f0:ba:e5:5f:26:ad:c5:8e:6e:24:07:00:b9:c9:
a3:f0:ae:69:2b:dc:75:5f:6a:75:d6:58:fd:5b:05:
a4:5d:08:83:90:04:6d:8b:18:89:3b:37:0d:ff:d9:
6b:78:f5:08:03:5d:97:2a:c1:45:5f:aa:c9:e8:3c:
ee:8c:c2:f3:53:4a:e5:66:5a:15:9b:0e:9f:5f:ca:
33:08:3a:fe:bf:67:80:10:60:ce:dc:ab:18:65:db:
52:40:e2:de:c4:e0:e5:27:97:3b:ee:7b:47:2e:2e:
ea:0a:ff:c6:6c:06:70:65:a0:33:d1:5a:cd:55:19:
6b:24:f2:8b:32:ff:9c:e6:f8:14:0a:82:63:d7:a3:
ae:23:96:53:97:6f:86:8a:bc:17:04:f2:04:f9:f3:
ce:1c:a3:df:f9:35:60:89:11:b6:5b:3a:d2:d7:9e:
cf:d8:eb:1a:aa:10:1d:b5:1e:a0:88:9c:0a:eb:55:
e5:34:63:50:4b:77:e3:80:b4:39:93:fc:d4:53:e2:
3e:45:76:7a:b7:a3:7a:53:5c:ae:31:01:d0:e6:7c:
2d:20:02:ce:f4:14:9b:d6:cf:22:61:31:77:d2:cd:
de:38:e0:f3:af:7d:20:31:fa:a9:52:03:a1:ed:c6:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0F:2F:5D:A8:F0:98:A5:C2:F6:FF:06:B8:7A:AD:B3:15:C6:CD:81
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a1:7e:f9:f1:20:e8:02:df:40:c6:4a:5b:66:3b:33:e1:54:
5f:d8:93:eb:0d:2c:4d:5f:ab:07:3f:b3:58:44:03:14:6b:97:
88:82:b8:04:12:01:62:bd:a6:8c:0b:f0:9e:59:88:10:1d:15:
14:41:7a:11:68:88:1b:37:e0:46:b2:5c:e3:47:c6:66:e5:04:
ed:f0:8c:76:15:3b:ca:48:b1:65:fa:1e:42:6a:2f:59:4c:92:
71:64:49:c9:e5:7b:fa:82:ac:51:a4:a3:54:ff:c9:47:e8:36:
b3:da:38:42:70:92:69:3d:86:da:b6:58:a8:e2:23:d0:8b:88:
7c:1c:a8:7d:2b:2a:e5:4d:a1:ab:8e:d5:31:01:62:31:c2:76:
54:6c:21:55:83:16:1a:89:67:cb:6c:14:6d:42:21:e0:44:52:
f7:ab:90:b6:d7:32:0c:b1:87:65:10:2c:89:d1:6c:92:e1:26:
f4:0d:98:5d:14:82:5d:f1:54:97:de:1a:60:df:4e:76:6f:74:
a3:06:f0:2a:6c:aa:2d:9a:14:c1:c9:7e:82:8e:39:60:42:d7:
0c:f4:6f:21:33:3c:ca:32:39:c8:cb:bc:96:e9:00:bb:49:b9:
42:ac:3f:bf:5d:49:e5:a0:1e:4d:41:a3:93:84:90:53:e7:57:
4e:52:6d:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERKviv4REdCEZy+NmcWFOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNWM2YWYzZDAyMjYyMGY3MmM1M2I3NzBlODJlNWM3M2Fl
NTUwNmQwHhcNMjYwOTIxMTQwMDI5WhcNMjYwOTIyMTQwMDI5WjAzMTEwLwYDVQQD
EyhiYjBmMmY1ZGE4ZjA5OGE1YzJmNmZmMDZiODdhYWRiMzE1YzZjZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CK0e6hUsWrtwFhT+Pgj8LrlXyat
xY5uJAcAucmj8K5pK9x1X2p11lj9WwWkXQiDkARtixiJOzcN/9lrePUIA12XKsFF
X6rJ6DzujMLzU0rlZloVmw6fX8ozCDr+v2eAEGDO3KsYZdtSQOLexODlJ5c77ntH
Li7qCv/GbAZwZaAz0VrNVRlrJPKLMv+c5vgUCoJj16OuI5ZTl2+GirwXBPIE+fPO
HKPf+TVgiRG2WzrS157P2OsaqhAdtR6giJwK61XlNGNQS3fjgLQ5k/zUU+I+RXZ6
t6N6U1yuMQHQ5nwtIALO9BSb1s8iYTF30s3eOODzr30gMfqpUgOh7cbkJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsPL12o8Jilwvb/Brh6rbMVxs2BMB8GA1UdIwQY
MBaAFPBcavPQImIPcsU7dw6C5cc65VBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQt
MGE1MzIxNTZiMmE2LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQtMGE1MzIxNTZiMmE2
LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6F++fEg
6ALfQMZKW2Y7M+FUX9iT6w0sTV+rBz+zWEQDFGuXiIK4BBIBYr2mjAvwnlmIEB0V
FEF6EWiIGzfgRrJc40fGZuUE7fCMdhU7ykixZfoeQmovWUyScWRJyeV7+oKsUaSj
VP/JR+g2s9o4QnCSaT2G2rZYqOIj0IuIfByofSsq5U2hq47VMQFiMcJ2VGwhVYMW
Golny2wUbUIh4ERS96uQttcyDLGHZRAsidFskuEm9A2YXRSCXfFUl94aYN9Odm90
owbwKmyqLZoUwcl+go45YELXDPRvITM8yjI5yMu8lukAu0m5Qqw/v11J5aAeTUGj
k4SQU+dXTlJtHg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:59:51 2026 by rpki-client