Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: wXEat2kg/8Wha/HYyC7fyotf6C20Uuu2VNDAQjM+NPw=
Subject key identifier: 96:4A:AE:5F:A2:BD:E3:5E:72:2C:AA:C6:0F:9B:6A:EC:3C:07:31:4A
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 01A0C40E364D271C2D31C91654EECAF608AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 13:01:00 +0000
Manifest this update: Mon 21 Sep 2026 13:01:00 +0000
Manifest next update: Tue 22 Sep 2026 13:01:00 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: 1iY5QnlLUOrRn0BfQfz3g63b1XX4AYVJt0FxfwSfH7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:36:4d:27:1c:2d:31:c9:16:54:ee:ca:f6:08:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Sep 21 13:01:00 2026 GMT
Not After : Sep 22 13:01:00 2026 GMT
Subject: CN=964aae5fa2bde35e722caac60f9b6aec3c07314a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bc:09:e9:a0:ce:ec:91:4a:1e:07:d6:c6:f7:
81:3e:81:74:52:2f:f0:1e:bb:d4:95:8f:35:9e:5f:
81:03:b9:8c:23:e9:43:e8:1b:e2:93:4d:45:b3:7f:
1c:ba:59:b2:f6:42:f3:ef:bf:0f:23:89:19:e6:b3:
ec:c4:27:d9:dd:2b:2e:90:31:06:12:7b:3d:4a:64:
e9:22:be:1a:51:63:61:32:20:60:4b:4a:ba:3e:c6:
2a:95:ae:15:c8:11:c4:97:e0:c0:16:4c:d2:2a:fe:
b1:ee:80:9a:df:67:85:76:dd:db:45:4b:82:db:a3:
7e:a0:97:c8:29:90:0c:b0:39:d9:bd:60:ce:ab:53:
87:3f:36:b0:33:4d:1f:82:18:b2:6c:44:63:91:cc:
41:e0:6f:4c:87:f7:1d:3f:af:ea:9e:9c:84:dd:0a:
eb:d5:1a:5f:16:cf:9f:5a:db:8a:61:23:cc:d8:b2:
8f:a8:84:d9:61:4a:50:71:44:4d:65:3d:de:2d:f1:
c7:d2:ca:57:da:e0:62:41:25:4e:70:ba:a0:bb:84:
0f:f4:cf:fc:ad:43:43:54:29:44:58:a7:22:83:20:
af:89:6a:1f:93:94:a0:b8:65:41:14:b8:14:63:3b:
91:c7:0d:5b:76:a1:02:dd:9b:d0:68:10:f9:f0:7f:
01:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4A:AE:5F:A2:BD:E3:5E:72:2C:AA:C6:0F:9B:6A:EC:3C:07:31:4A
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:50:eb:b9:92:6c:63:cb:4e:e4:2c:eb:4e:1e:95:04:fd:a7:
f7:9e:89:be:26:16:50:18:c7:14:cc:4e:7b:c3:2c:ef:e9:0f:
17:dd:a1:b9:88:fa:b8:1d:51:eb:d5:d4:e6:c6:4a:5c:f0:71:
1b:a6:d8:95:96:20:88:28:8b:fe:1c:96:6f:c9:16:ac:7c:e1:
c1:d4:96:96:d8:77:aa:7f:7b:69:3a:1e:43:8e:52:c2:1d:79:
60:2a:d9:c3:c5:c0:d7:33:56:e7:42:33:7c:73:9b:5e:9c:4d:
6c:c7:0a:99:82:13:68:14:ac:1c:a3:fa:bd:35:55:9e:fa:33:
d4:66:1d:66:44:0a:10:af:e2:02:01:e4:44:ec:09:5d:86:4c:
52:47:64:b1:76:e1:95:2f:4b:7d:2c:49:f1:12:60:31:a7:40:
29:90:f1:2f:84:83:7f:a6:3d:d6:8e:db:56:6a:a6:bd:74:83:
c8:08:d8:ba:ea:34:b7:44:69:57:98:31:a3:3f:3f:d9:75:1b:
57:b8:94:7a:b0:cd:40:2d:4b:7a:e6:1f:19:51:45:da:21:b0:
c2:47:fd:b3:56:92:cd:21:de:74:aa:2d:95:da:d8:d5:36:17:
41:ca:d6:8c:70:c5:0a:b2:1d:e9:9f:35:bc:c8:ef:1c:e6:51:
6e:b1:d9:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDjZNJxwtMckWVO7K9givMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZWVlNjlmODlmMjQ1MmRjYWU4OTgyOTQ3YjJkMTQ2OTUz
Nzk2N2IwHhcNMjYwOTIxMTMwMTAwWhcNMjYwOTIyMTMwMTAwWjAzMTEwLwYDVQQD
Eyg5NjRhYWU1ZmEyYmRlMzVlNzIyY2FhYzYwZjliNmFlYzNjMDczMTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rwJ6aDO7JFKHgfWxveBPoF0Ui/w
HrvUlY81nl+BA7mMI+lD6Bvik01Fs38culmy9kLz778PI4kZ5rPsxCfZ3SsukDEG
Ens9SmTpIr4aUWNhMiBgS0q6PsYqla4VyBHEl+DAFkzSKv6x7oCa32eFdt3bRUuC
26N+oJfIKZAMsDnZvWDOq1OHPzawM00fghiybERjkcxB4G9Mh/cdP6/qnpyE3Qrr
1RpfFs+fWtuKYSPM2LKPqITZYUpQcURNZT3eLfHH0spX2uBiQSVOcLqgu4QP9M/8
rUNDVClEWKcigyCviWofk5SguGVBFLgUYzuRxw1bdqEC3ZvQaBD58H8BMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZKrl+iveNeciyqxg+bauw8BzFKMB8GA1UdIwQY
MBaAFPPu5p+J8kUtyuiYKUey0UaVN5Z7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lODYwNzQtZTZkMC00OWJlLTk1OTIt
N2M0MjcyMzRkNWZmLzEvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lODYwNzQtZTZkMC00OWJlLTk1OTItN2M0MjcyMzRkNWZm
LzEvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClDruZJs
Y8tO5CzrTh6VBP2n956JviYWUBjHFMxOe8Ms7+kPF92huYj6uB1R69XU5sZKXPBx
G6bYlZYgiCiL/hyWb8kWrHzhwdSWlth3qn97aToeQ45Swh15YCrZw8XA1zNW50Iz
fHObXpxNbMcKmYITaBSsHKP6vTVVnvoz1GYdZkQKEK/iAgHkROwJXYZMUkdksXbh
lS9LfSxJ8RJgMadAKZDxL4SDf6Y91o7bVmqmvXSDyAjYuuo0t0RpV5gxoz8/2XUb
V7iUerDNQC1LeuYfGVFF2iGwwkf9s1aSzSHedKotldrY1TYXQcrWjHDFCrId6Z81
vMjvHOZRbrHZVg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:00:20 2026 by rpki-client