Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
File: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json)
Hash identifier: jezVNfjM9a0C3hrqlgb1FEONs2w94VbzOX+wsMllXwY=
Subject key identifier: 16:E0:36:16:57:06:A7:78:24:A8:D4:5E:E1:1B:61:8D:BB:A2:51:6D
Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
Certificate issuer: /CN=f0ac0ce700b17d499e898ec7a14730405157c478
Certificate serial: 01A0C93448143D8B5EB55199DE138D3777CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 13:00:41 +0000
Manifest this update: Tue 22 Sep 2026 13:00:41 +0000
Manifest next update: Wed 23 Sep 2026 13:00:41 +0000
Files and hashes: 1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: NaguPDt+WbcQchm2XuRmSnI2Hg3Z3H3f7NI1NQ/us2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:48:14:3d:8b:5e:b5:51:99:de:13:8d:37:77:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478
Validity
Not Before: Sep 22 13:00:41 2026 GMT
Not After : Sep 23 13:00:41 2026 GMT
Subject: CN=16e036165706a77824a8d45ee11b618dbba2516d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c9:05:3e:d4:b4:df:6e:88:f8:3a:1b:f4:c9:
07:91:a1:29:bb:15:77:34:3f:f1:b8:be:b3:79:a0:
64:25:f4:8a:85:c3:63:2b:76:6b:58:3f:b6:b9:49:
02:09:b4:30:7e:5e:0a:7c:39:d8:40:1b:58:ee:7a:
34:df:c2:0e:60:bb:a7:7d:c3:e3:79:9a:57:4b:0c:
96:db:14:3e:36:b8:88:f2:26:5a:50:49:53:dd:da:
c0:c4:57:9f:a9:3f:5b:db:94:66:6a:45:ee:d0:14:
4b:8a:19:f2:67:76:02:7a:4f:1b:b4:d2:ea:10:8c:
08:5d:99:8c:e2:6a:c8:aa:f3:ce:c1:67:29:a3:4f:
b0:0c:cd:c5:e6:36:be:24:05:4b:5f:b6:ea:ad:b9:
ca:9a:93:17:c1:e2:21:51:06:1e:1e:e5:cd:b2:a6:
e0:cf:ec:32:5f:b3:fc:b4:fd:33:53:c0:4a:1a:d7:
fc:a2:83:73:29:e0:46:3d:11:bc:40:b3:21:9e:9d:
5e:81:a9:68:4a:cb:bd:2e:f7:58:03:29:c6:f3:bf:
a2:f5:63:42:09:60:b8:9e:17:bb:47:73:80:07:4f:
03:b7:3d:2a:73:25:99:c6:ef:83:84:fb:00:79:93:
bf:a7:6f:12:fb:8c:b5:d7:c6:31:14:f2:19:11:17:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E0:36:16:57:06:A7:78:24:A8:D4:5E:E1:1B:61:8D:BB:A2:51:6D
X509v3 Authority Key Identifier:
keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:89:ed:2b:64:f4:c9:02:7f:31:74:e7:00:91:9f:2c:4f:73:
5c:59:dc:02:26:4b:ce:8e:8f:d4:76:17:b1:b6:95:dc:c6:16:
b3:0e:87:59:85:c5:1e:35:46:b5:0c:0e:f7:eb:94:a0:d3:a8:
07:e6:f1:66:92:73:68:bc:9e:36:12:59:19:3c:c1:12:4e:9b:
36:4e:b7:37:7b:ef:c6:88:dc:ad:cd:b0:9e:04:d8:19:6c:1d:
aa:0f:ca:91:80:36:3a:a5:73:55:6c:af:f0:d8:23:0a:19:12:
87:4b:62:c0:72:37:33:39:60:69:04:77:29:6e:45:4f:26:80:
18:30:04:49:e0:f1:5d:7f:a3:fc:47:ae:7b:07:9f:92:9f:cd:
32:47:2d:6c:a6:14:60:2f:02:3a:ae:f2:d8:57:a3:3a:f0:84:
ed:96:91:3b:08:c8:66:c6:3d:c0:ba:e8:cc:8c:42:31:f7:44:
90:46:e7:f3:0b:b1:94:d2:fa:aa:c6:29:cf:e2:8d:4b:82:bb:
7a:1f:a0:a9:69:b0:19:ca:71:0e:17:1a:a9:3d:57:11:3d:f6:
5c:ef:c2:83:8a:d3:1a:14:f3:65:e2:46:71:ef:b1:2b:74:8b:
8b:4b:b4:88:ef:50:e1:c1:8e:54:f5:fa:26:37:26:b5:37:27:
1f:1f:92:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJNEgUPYtetVGZ3hONN3fLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYWMwY2U3MDBiMTdkNDk5ZTg5OGVjN2ExNDczMDQwNTE1
N2M0NzgwHhcNMjYwOTIyMTMwMDQxWhcNMjYwOTIzMTMwMDQxWjAzMTEwLwYDVQQD
EygxNmUwMzYxNjU3MDZhNzc4MjRhOGQ0NWVlMTFiNjE4ZGJiYTI1MTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhckFPtS0326I+Dob9MkHkaEpuxV3
ND/xuL6zeaBkJfSKhcNjK3ZrWD+2uUkCCbQwfl4KfDnYQBtY7no038IOYLunfcPj
eZpXSwyW2xQ+NriI8iZaUElT3drAxFefqT9b25RmakXu0BRLihnyZ3YCek8btNLq
EIwIXZmM4mrIqvPOwWcpo0+wDM3F5ja+JAVLX7bqrbnKmpMXweIhUQYeHuXNsqbg
z+wyX7P8tP0zU8BKGtf8ooNzKeBGPRG8QLMhnp1egaloSsu9LvdYAynG87+i9WNC
CWC4nhe7R3OAB08Dtz0qcyWZxu+DhPsAeZO/p28S+4y118YxFPIZERc9ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbgNhZXBqd4JKjUXuEbYY27olFtMB8GA1UdIwQY
MBaAFPCsDOcAsX1JnomOx6FHMEBRV8R4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEt3TTV3Q3hmVW1laVk3SG9VY3dRRkZYeEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84ZmIyYTYtY2FlNS00ZjM5LWE4NTgt
N2U0NmNjMzcwMWI5LzEvOEt3TTV3Q3hmVW1laVk3SG9VY3dRRkZYeEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84ZmIyYTYtY2FlNS00ZjM5LWE4NTgtN2U0NmNjMzcwMWI5
LzEvOEt3TTV3Q3hmVW1laVk3SG9VY3dRRkZYeEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIntK2T0
yQJ/MXTnAJGfLE9zXFncAiZLzo6P1HYXsbaV3MYWsw6HWYXFHjVGtQwO9+uUoNOo
B+bxZpJzaLyeNhJZGTzBEk6bNk63N3vvxojcrc2wngTYGWwdqg/KkYA2OqVzVWyv
8NgjChkSh0tiwHI3MzlgaQR3KW5FTyaAGDAESeDxXX+j/Eeuewefkp/NMkctbKYU
YC8COq7y2FejOvCE7ZaROwjIZsY9wLrozIxCMfdEkEbn8wuxlNL6qsYpz+KNS4K7
eh+gqWmwGcpxDhcaqT1XET32XO/Cg4rTGhTzZeJGce+xK3SLi0u0iO9Q4cGOVPX6
JjcmtTcnHx+SNQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:43:52 2026 by rpki-client