Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File: f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier: qwtwdQSVgjrRzs30BvkUCJ1pXJ31DvIaq8aZXLKZ510=
Subject key identifier: 5A:F0:15:8E:EF:62:CD:FC:E5:C5:41:E1:60:A7:43:A3:1F:83:61:67
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 01A0D3B8F9D4A7A8902A8D52537F8FA93185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number: 1A49
Signing time: Thu 24 Sep 2026 14:01:50 +0000
Manifest this update: Thu 24 Sep 2026 14:01:50 +0000
Manifest next update: Fri 25 Sep 2026 14:01:50 +0000
Files and hashes: 1: 7bMPlZft64LLOc44WXpuvWHCxYI.roa (hash: ovhICafylNUsoU6ggOnBn0FV5ld7QtZ9TQT1cYD5STo=)
2: 8ogFWyeBf0vuQT5jhBzXspAf2rE.roa (hash: 8SLnbSVICCGBBETX/lH2EVbhNVK83HBy2quzoB78n6s=)
3: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: ZDfvh/Fv0GBB/5AVQWYL/5JWoscmS+blKwojrVObr78=)
4: ggggHoWexQd_x29XdkxpzklvtBY.roa (hash: RItnLwTh1P5BCA6CWkDZt99HLo5gT+F8X2TYgXTwevA=)
5: wS0apBhtiuVVHFFK87DoMQ3ejQc.roa (hash: ZNtmxsknYilQpUIhLRK+q8WsjLGRXiSlJ1H3sFAAUI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:f9:d4:a7:a8:90:2a:8d:52:53:7f:8f:a9:31:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: Sep 24 14:01:50 2026 GMT
Not After : Sep 25 14:01:50 2026 GMT
Subject: CN=5af0158eef62cdfce5c541e160a743a31f836167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:8e:01:bc:f9:13:90:74:43:ca:c0:6f:67:
2e:9a:76:87:5e:3e:ff:46:b3:64:cd:b4:27:5e:d1:
58:fe:51:7e:85:6b:d9:f1:da:f1:86:a3:df:61:09:
c9:f4:9a:28:10:e9:ab:22:59:a9:b1:74:73:3a:23:
20:77:5c:30:3b:a5:bb:36:56:a9:f3:6c:1c:8e:3d:
cd:9a:8d:1f:52:00:80:ff:7f:6d:3f:d6:c2:fd:ec:
f8:e2:2e:f4:76:b2:23:a5:63:07:3e:ff:a5:94:2c:
f4:73:86:e5:24:40:f4:5d:ad:45:dc:d5:18:d1:b2:
cc:d1:5e:19:64:fe:d1:68:4e:08:02:b8:e4:21:e0:
25:b1:74:e7:f6:5b:d9:95:c2:74:03:07:ca:9a:be:
90:26:f4:77:4c:cd:25:5c:3c:49:68:54:cb:9f:aa:
0f:8b:4d:15:87:42:60:8d:f0:3d:67:89:fa:fc:19:
fb:b1:31:06:42:59:47:42:d5:18:70:39:a7:c6:38:
e7:eb:17:8f:0e:e7:8c:e2:81:be:a6:c2:a6:da:64:
22:87:14:66:76:0d:73:b6:d4:f4:5f:d7:98:7b:ac:
49:01:ed:a9:3b:6b:4d:5d:ec:79:7a:1f:e3:d9:ce:
ea:d3:f8:9d:57:78:29:ff:57:d4:22:eb:2b:92:ee:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F0:15:8E:EF:62:CD:FC:E5:C5:41:E1:60:A7:43:A3:1F:83:61:67
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b6:b9:e3:1c:6d:b7:94:ac:c2:3b:52:2a:b5:e6:f8:e5:ce:
9c:0a:ed:25:7a:06:a9:2c:00:13:4a:ad:7e:9c:93:4b:0b:ba:
e2:58:e5:9c:c2:83:25:a7:fa:69:8c:f0:cc:30:98:e2:a9:fe:
0e:8a:6e:a7:c6:a1:0f:28:1a:f3:32:44:1b:e5:8d:e0:71:9c:
7c:ff:21:c0:20:13:28:08:2b:40:3b:a5:49:ea:8d:22:1c:9b:
3b:23:c0:8c:e5:26:6f:46:96:17:46:70:e5:aa:96:63:ba:84:
d7:07:52:74:a9:fc:76:dd:47:5d:88:40:49:6a:a8:68:08:46:
f4:e0:e5:cd:f9:fa:a6:7e:31:06:5c:86:39:2e:7a:85:45:cb:
57:d7:9a:91:57:3d:4b:f9:70:1e:4e:55:26:3a:4c:65:d7:53:
e9:5a:5a:97:78:e3:88:9c:7d:ea:ee:0e:50:da:55:7d:29:ba:
ee:8a:72:6f:1b:df:cc:20:f9:c8:50:62:4a:17:32:b9:7e:40:
3f:a9:38:49:1c:5f:36:8f:7a:e5:bb:61:36:30:da:ca:be:f7:
33:38:bc:84:73:f0:66:24:49:61:c5:ba:ca:5c:33:e0:7b:ec:
92:fc:5c:fc:22:76:be:fe:dc:69:91:55:f5:02:e3:77:fc:be:
3c:ae:85:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuPnUp6iQKo1SU3+PqTGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmY2FkODlkZjFiZjk5YTM2ZjI5MGNjM2VmMGYxZTdiNGQw
Mjc1MzMwHhcNMjYwOTI0MTQwMTUwWhcNMjYwOTI1MTQwMTUwWjAzMTEwLwYDVQQD
Eyg1YWYwMTU4ZWVmNjJjZGZjZTVjNTQxZTE2MGE3NDNhMzFmODM2MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXSOAbz5E5B0Q8rAb2cumnaHXj7/
RrNkzbQnXtFY/lF+hWvZ8drxhqPfYQnJ9JooEOmrIlmpsXRzOiMgd1wwO6W7Nlap
82wcjj3Nmo0fUgCA/39tP9bC/ez44i70drIjpWMHPv+llCz0c4blJED0Xa1F3NUY
0bLM0V4ZZP7RaE4IArjkIeAlsXTn9lvZlcJ0AwfKmr6QJvR3TM0lXDxJaFTLn6oP
i00Vh0JgjfA9Z4n6/Bn7sTEGQllHQtUYcDmnxjjn6xePDueM4oG+psKm2mQihxRm
dg1zttT0X9eYe6xJAe2pO2tNXex5eh/j2c7q0/idV3gp/1fUIusrku4jNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrwFY7vYs385cVB4WCnQ6Mfg2FnMB8GA1UdIwQY
MBaAFH/K2J3xv5mjbykMw+8PHntNAnUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMt
MDE1ZDlmMWI0YjUwLzEvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMtMDE1ZDlmMWI0YjUw
LzEvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZra54xxt
t5SswjtSKrXm+OXOnArtJXoGqSwAE0qtfpyTSwu64ljlnMKDJaf6aYzwzDCY4qn+
Dopup8ahDyga8zJEG+WN4HGcfP8hwCATKAgrQDulSeqNIhybOyPAjOUmb0aWF0Zw
5aqWY7qE1wdSdKn8dt1HXYhASWqoaAhG9ODlzfn6pn4xBlyGOS56hUXLV9eakVc9
S/lwHk5VJjpMZddT6Vpal3jjiJx96u4OUNpVfSm67opybxvfzCD5yFBiShcyuX5A
P6k4SRxfNo965bthNjDayr73Mzi8hHPwZiRJYcW6ylwz4Hvskvxc/CJ2vv7caZFV
9QLjd/y+PK6FnA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:23:50 2026 by rpki-client