Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: 2Z6J7iHpIwgWH4WE/Hj21GFJn1Rkze148+On2bOTCk0=
Subject key identifier: 5C:BA:F9:C4:E5:0C:26:3F:86:6F:B7:AB:83:72:AC:B5:36:30:B3:83
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 01A0C2C458AE4F6EA570066F69CA18B50EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 08BC
Signing time: Mon 21 Sep 2026 07:00:42 +0000
Manifest this update: Mon 21 Sep 2026 07:00:42 +0000
Manifest next update: Tue 22 Sep 2026 07:00:42 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: 4cX2byNOTukZz+UmLDE5hliW5v0u9UTwyM3t3bbd+Bk=)
2: e40GPVZTDeirYIdOqaP1aapsCXg.asa (hash: h+tl9RH2sA+blXZerCx7ZNM5+m8vY3pFl3hXGBoDo4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:58:ae:4f:6e:a5:70:06:6f:69:ca:18:b5:0e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Sep 21 07:00:42 2026 GMT
Not After : Sep 22 07:00:42 2026 GMT
Subject: CN=5cbaf9c4e50c263f866fb7ab8372acb53630b383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:50:71:cb:b6:e0:1f:47:33:42:7b:e2:cc:
b3:77:7a:54:77:f4:ab:a3:bb:eb:78:c2:51:3c:a2:
50:2e:fe:6a:31:95:e8:cf:61:78:92:ef:5d:fa:5d:
be:6d:8b:60:60:07:eb:b5:26:d4:23:53:75:9e:b0:
6f:59:a3:87:a6:cd:d4:24:f6:47:95:70:83:d2:4a:
4c:59:c2:48:c0:d1:19:8f:ba:f1:cd:42:75:6f:ae:
5b:92:2e:86:a4:ea:9f:7a:e4:14:b7:db:e2:2d:c8:
1c:d2:e7:ba:99:04:5e:1a:9d:75:e1:8f:e1:a6:ea:
27:d9:8c:75:3b:d2:7b:c6:e4:34:d0:0a:be:1c:50:
0b:8b:6c:63:23:ae:61:6f:6a:cd:76:e2:a2:35:35:
a7:b1:ef:ba:07:ee:90:aa:7e:d7:b4:a4:32:fe:58:
5d:43:ab:cf:8b:0f:e2:7a:10:e9:43:08:79:4f:a9:
5e:7e:63:43:36:d6:d8:6b:0a:cc:19:20:0d:6a:93:
4d:27:2d:67:45:64:dd:fa:b8:8c:b1:9c:60:03:a4:
9c:90:2f:a0:e0:e9:ae:a1:32:a5:ae:db:a0:e7:be:
ae:b1:40:21:04:0f:40:0f:dc:65:9e:8b:6d:f9:9a:
d3:10:6f:d9:f1:8e:fe:bd:9e:fc:0d:50:ba:c7:8d:
0c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BA:F9:C4:E5:0C:26:3F:86:6F:B7:AB:83:72:AC:B5:36:30:B3:83
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b5:78:2b:39:fe:87:f6:29:51:e2:46:a7:26:ee:e0:51:cd:
5e:5e:62:47:e0:27:68:db:e0:5f:c9:70:a9:79:53:70:c0:b4:
d9:2d:8e:9b:cd:78:f5:00:68:21:7b:b4:7b:7f:00:fb:f3:48:
fd:8a:11:ae:15:4d:fd:85:31:02:fc:2e:4c:06:92:6d:81:b4:
f9:14:80:05:74:25:d0:66:91:52:ba:ee:be:cd:0e:b7:18:e5:
f4:0b:5d:f2:eb:aa:63:4b:ae:b5:a0:18:a5:ad:39:be:8e:03:
d3:7e:67:47:75:c4:9a:75:c7:e6:d6:64:31:f5:25:bb:ff:80:
5f:6b:21:3b:03:12:5b:8b:af:3d:1a:e1:42:97:6b:49:fc:db:
9a:1c:bc:de:c3:54:ce:8c:24:dc:a8:48:59:a7:aa:f4:b3:8c:
fd:0f:44:4c:43:12:91:59:db:0a:1c:7f:e5:64:14:dc:81:be:
4e:bd:f0:77:cd:96:f6:e7:94:ff:26:1f:06:08:96:cc:bf:d0:
fb:5c:dd:e4:a7:2c:63:9e:0c:34:13:71:df:7c:2d:ad:fa:a3:
c1:66:68:6d:8d:40:fb:26:76:0e:ce:43:d1:a1:cf:ae:73:59:
56:56:e6:61:c2:e2:92:ef:be:0d:9a:2e:9e:3d:01:64:af:d3:
da:df:ad:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxFiuT26lcAZvacoYtQ61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMTE1MzAxMWRlNDU4NmFkOGE4MDM4ODdlZTdkMmIwMGFl
ZmQ2MWIwHhcNMjYwOTIxMDcwMDQyWhcNMjYwOTIyMDcwMDQyWjAzMTEwLwYDVQQD
Eyg1Y2JhZjljNGU1MGMyNjNmODY2ZmI3YWI4MzcyYWNiNTM2MzBiMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36NQccu24B9HM0J74syzd3pUd/Sr
o7vreMJRPKJQLv5qMZXoz2F4ku9d+l2+bYtgYAfrtSbUI1N1nrBvWaOHps3UJPZH
lXCD0kpMWcJIwNEZj7rxzUJ1b65bki6GpOqfeuQUt9viLcgc0ue6mQReGp114Y/h
puon2Yx1O9J7xuQ00Aq+HFALi2xjI65hb2rNduKiNTWnse+6B+6Qqn7XtKQy/lhd
Q6vPiw/iehDpQwh5T6lefmNDNtbYawrMGSANapNNJy1nRWTd+riMsZxgA6SckC+g
4OmuoTKlrtug576usUAhBA9AD9xlnott+ZrTEG/Z8Y7+vZ78DVC6x40MRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFy6+cTlDCY/hm+3q4NyrLU2MLODMB8GA1UdIwQY
MBaAFPIRUwEd5Fhq2KgDiH7n0rAK79YbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85ODgxODEtMWQxOS00MmUyLThkYzct
MjgyNTM3MGM5NWZlLzEvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi85ODgxODEtMWQxOS00MmUyLThkYzctMjgyNTM3MGM5NWZl
LzEvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbV4Kzn+
h/YpUeJGpybu4FHNXl5iR+AnaNvgX8lwqXlTcMC02S2Om8149QBoIXu0e38A+/NI
/YoRrhVN/YUxAvwuTAaSbYG0+RSABXQl0GaRUrruvs0Otxjl9Atd8uuqY0uutaAY
pa05vo4D035nR3XEmnXH5tZkMfUlu/+AX2shOwMSW4uvPRrhQpdrSfzbmhy83sNU
zowk3KhIWaeq9LOM/Q9ETEMSkVnbChx/5WQU3IG+Tr3wd82W9ueU/yYfBgiWzL/Q
+1zd5KcsY54MNBNx33wtrfqjwWZobY1A+yZ2Ds5D0aHPrnNZVlbmYcLiku++DZou
nj0BZK/T2t+t4g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:03:36 2026 by rpki-client