Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: QqFeKJ55ZePXrMkSaC0qCswCW9UxDtsF2brZnIveSxo=
Subject key identifier: C8:E3:DA:63:CF:B9:09:8E:27:1D:88:4E:57:5A:3E:FD:85:4A:D4:AA
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 01A0CB59842B304F50148169E1269B718112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 23:00:36 +0000
Manifest this update: Tue 22 Sep 2026 23:00:36 +0000
Manifest next update: Wed 23 Sep 2026 23:00:36 +0000
Files and hashes: 1: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: 1ZUB2+Y3O5989V4oIPfbpTBM3qUWejXS7x+DnGU+eM4=)
2: jCsyE7PeO8MwI0WSmbdCicVhzBc.roa (hash: tv7EyDQ+IoB8bLb4GNx3/nwZP+BAJaSjfG7GlSBQTM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:84:2b:30:4f:50:14:81:69:e1:26:9b:71:81:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Sep 22 23:00:36 2026 GMT
Not After : Sep 23 23:00:36 2026 GMT
Subject: CN=c8e3da63cfb9098e271d884e575a3efd854ad4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:9a:10:fc:a0:33:0d:eb:d8:0b:81:e4:31:
1d:3a:e7:bb:09:8a:0d:07:9c:d3:49:17:d1:1b:92:
75:0b:73:44:94:72:4a:55:6e:69:59:26:95:22:ba:
56:1f:49:ba:90:b7:bf:9c:02:56:19:62:b9:70:18:
ad:f7:68:02:6a:be:dd:16:c7:c7:7f:09:65:ac:71:
e5:cd:36:49:fa:df:36:57:5b:a3:e7:5c:c4:ea:2f:
36:e4:cc:b7:ac:c5:3c:96:b3:f5:84:83:0f:56:ea:
f7:f8:78:cc:d2:57:2d:d1:21:16:cb:8d:a7:dd:9d:
ed:25:07:c9:93:6e:fc:99:90:25:b4:ed:11:b2:00:
3c:ff:66:17:59:81:38:a1:75:4d:12:73:ec:b1:9b:
b8:7e:e2:23:ff:07:2c:c5:2a:59:c3:38:c0:8d:bb:
62:e7:14:05:a7:dd:d4:02:9b:1e:c3:0f:33:cc:00:
d3:dc:f1:e6:d7:9d:c7:9b:4b:97:ec:68:a5:52:e3:
56:7e:dd:80:17:ad:bf:28:e2:7c:cc:78:d0:52:c7:
8f:be:ce:79:a0:b9:d9:84:ee:ef:f1:0a:95:12:17:
81:cb:34:38:c2:d0:0a:fc:ac:51:06:b7:1b:31:68:
01:20:e0:10:4a:8f:79:37:c4:f4:6d:f3:0c:e7:36:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E3:DA:63:CF:B9:09:8E:27:1D:88:4E:57:5A:3E:FD:85:4A:D4:AA
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:19:48:47:e1:f2:ef:d2:42:45:14:b2:1c:7d:a5:7a:46:c3:
73:a0:a1:7c:51:d7:9d:02:3d:20:ed:06:ad:0a:6d:50:10:96:
9d:e0:1e:32:77:3f:f2:b7:66:be:03:62:a7:79:c9:dd:7a:5f:
9b:16:04:fa:90:87:5a:1b:cc:b0:5a:6a:64:b4:c2:73:21:3c:
92:eb:bd:35:08:71:f6:ae:7d:59:29:69:88:3e:ee:bd:e0:5e:
5c:a3:4c:c5:47:9b:79:42:89:6c:16:02:6d:b4:b3:53:48:ed:
49:22:d7:60:2a:aa:ce:c7:f4:34:c9:fb:61:81:77:b0:d2:04:
e0:35:86:8e:40:36:b2:d8:2e:c0:59:6d:ed:01:97:c9:29:5d:
80:b4:70:bd:cf:fb:54:0a:4f:a2:4d:ae:ff:bc:f1:34:c8:c8:
a0:b3:a9:75:ba:c8:ba:a0:78:1f:bd:53:8b:a2:60:0a:9d:32:
94:4b:74:5a:e3:16:c2:38:88:52:0a:38:8f:8f:91:eb:52:fb:
d1:69:c3:ed:40:2c:7e:b5:fe:1f:3f:ed:0c:b5:30:f3:87:b6:
7a:1f:0e:60:37:26:33:89:d6:8d:0c:cd:26:6b:9b:6e:e2:6c:
3b:58:6c:1c:27:6a:bc:27:27:a6:82:a1:1c:49:ed:f5:c2:8b:
51:e6:12:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLWYQrME9QFIFp4SabcYESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYzIwYmU2MTY3ODkwMjQ3MzAzMjE0MTk3NjU4Y2E3Yzk2
NzYxNTAwHhcNMjYwOTIyMjMwMDM2WhcNMjYwOTIzMjMwMDM2WjAzMTEwLwYDVQQD
EyhjOGUzZGE2M2NmYjkwOThlMjcxZDg4NGU1NzVhM2VmZDg1NGFkNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux+aEPygMw3r2AuB5DEdOue7CYoN
B5zTSRfRG5J1C3NElHJKVW5pWSaVIrpWH0m6kLe/nAJWGWK5cBit92gCar7dFsfH
fwllrHHlzTZJ+t82V1uj51zE6i825My3rMU8lrP1hIMPVur3+HjM0lct0SEWy42n
3Z3tJQfJk278mZAltO0RsgA8/2YXWYE4oXVNEnPssZu4fuIj/wcsxSpZwzjAjbti
5xQFp93UApseww8zzADT3PHm153Hm0uX7GilUuNWft2AF62/KOJ8zHjQUsePvs55
oLnZhO7v8QqVEheByzQ4wtAK/KxRBrcbMWgBIOAQSo95N8T0bfMM5zYZHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjj2mPPuQmOJx2ITldaPv2FStSqMB8GA1UdIwQY
MBaAFC/CC+YWeJAkcwMhQZdljKfJZ2FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYt
MjQ0OWEzZWM5MjNlLzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYtMjQ0OWEzZWM5MjNl
LzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBlIR+Hy
79JCRRSyHH2lekbDc6ChfFHXnQI9IO0GrQptUBCWneAeMnc/8rdmvgNip3nJ3Xpf
mxYE+pCHWhvMsFpqZLTCcyE8kuu9NQhx9q59WSlpiD7uveBeXKNMxUebeUKJbBYC
bbSzU0jtSSLXYCqqzsf0NMn7YYF3sNIE4DWGjkA2stguwFlt7QGXySldgLRwvc/7
VApPok2u/7zxNMjIoLOpdbrIuqB4H71Ti6JgCp0ylEt0WuMWwjiIUgo4j4+R61L7
0WnD7UAsfrX+Hz/tDLUw84e2eh8OYDcmM4nWjQzNJmubbuJsO1hsHCdqvCcnpoKh
HEnt9cKLUeYSYg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:53:24 2026 by rpki-client