Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
File: 8grs7rj8hZw3YvMTcflKAE24zEI.mft (raw, json)
Hash identifier: bCNNaItZhSa5BYT0HkgVF4+NfBMzL+NEM6LTnTM0tx0=
Subject key identifier: 27:93:34:87:AC:B1:15:52:74:0B:99:49:AC:F3:21:9F:D3:EC:56:E2
Authority key identifier: F2:0A:EC:EE:B8:FC:85:9C:37:62:F3:13:71:F9:4A:00:4D:B8:CC:42
Certificate issuer: /CN=f20aeceeb8fc859c3762f31371f94a004db8cc42
Certificate serial: 01A129FB16EA2085F894E34594697A42A1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
Manifest number: 0253
Signing time: Sun 11 Oct 2026 08:01:23 +0000
Manifest this update: Sun 11 Oct 2026 08:01:23 +0000
Manifest next update: Mon 12 Oct 2026 08:01:23 +0000
Files and hashes: 1: 8grs7rj8hZw3YvMTcflKAE24zEI.crl (hash: LTR1AmQQXEHZeBeE+++hQEZozZfQeRsMh/OrlOpbanw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fb:16:ea:20:85:f8:94:e3:45:94:69:7a:42:a1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20aeceeb8fc859c3762f31371f94a004db8cc42
Validity
Not Before: Oct 11 08:01:23 2026 GMT
Not After : Oct 12 08:01:23 2026 GMT
Subject: CN=27933487acb11552740b9949acf3219fd3ec56e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9f:f9:39:89:2c:89:53:10:52:4b:d9:97:3d:
81:1b:4a:86:16:84:8a:12:f3:ea:7c:3e:e2:c4:0c:
50:e8:95:66:5f:5e:92:8c:c3:81:8d:70:77:1f:ba:
bf:c7:f2:1b:32:86:04:81:30:5b:56:11:c2:d0:6f:
cd:61:8a:58:e4:11:5d:0f:32:48:94:e0:5e:d4:2a:
8e:09:4a:3d:03:ea:47:ba:a8:86:f8:dd:b2:1d:30:
d2:f4:db:b1:cf:85:97:e7:0b:51:c1:15:49:2f:ea:
a2:ed:30:4f:94:a7:e5:b2:b8:e9:fc:f0:e3:76:6c:
b5:ab:21:c5:db:f6:00:95:e6:c9:44:4e:12:38:8c:
3e:39:2b:d5:b1:0e:9f:45:9e:87:86:72:0f:43:18:
7f:d6:5f:45:c2:0a:33:39:af:5f:8f:b7:4f:a0:ae:
ca:7d:eb:e6:eb:58:0b:a4:4e:9b:f8:38:bc:4d:4c:
44:1b:d1:d6:c5:07:aa:d5:e4:2b:ff:5e:6d:bd:1b:
0a:fc:25:18:e1:7d:2c:af:7a:5e:42:be:09:5a:31:
4f:12:8c:3a:d2:80:32:8d:6b:3e:e5:ae:58:89:ed:
50:f0:aa:2c:97:d8:46:6b:12:14:df:46:f7:95:f8:
ad:fa:75:04:e9:97:bd:91:9f:bc:50:3c:d7:cf:e2:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:93:34:87:AC:B1:15:52:74:0B:99:49:AC:F3:21:9F:D3:EC:56:E2
X509v3 Authority Key Identifier:
keyid:F2:0A:EC:EE:B8:FC:85:9C:37:62:F3:13:71:F9:4A:00:4D:B8:CC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:79:4c:56:46:46:e0:cb:cf:95:2f:89:12:a1:8b:59:4a:f0:
ad:f9:55:f8:dc:b7:8c:17:bd:51:63:66:57:5a:07:9d:e7:46:
61:aa:47:c2:15:ae:28:a8:b4:ed:77:2a:75:96:bd:c3:ed:67:
24:4b:00:b0:f6:b7:4a:66:db:63:44:31:22:c4:80:18:85:26:
c5:ed:66:18:2c:fb:e0:3c:c0:4e:01:4e:41:42:5e:db:47:35:
22:9b:e3:92:ad:27:df:a4:53:d5:f6:62:f7:03:7a:09:5b:cb:
84:26:01:9e:95:72:1c:20:46:41:eb:c1:15:76:c5:64:12:64:
94:07:28:a0:e1:0e:f7:ba:c8:f7:ce:54:30:64:8e:92:95:24:
99:51:b2:10:17:23:22:94:17:d1:c5:3c:f6:e2:55:7f:ab:2e:
08:92:5b:72:e6:b1:be:a1:1c:db:e6:12:b3:02:08:54:e5:0d:
18:0b:11:81:4a:2f:3f:2b:5f:94:1f:aa:ec:2e:63:fd:9c:54:
23:1c:0d:d6:07:37:ca:4a:07:31:66:7f:fd:8c:b5:62:bd:5d:
18:e3:1f:22:ed:89:85:e9:88:0a:4c:98:5e:c6:ce:8a:a0:d1:
3a:2a:5c:1f:11:f0:89:f1:00:f2:34:de:e3:f7:87:69:5f:7e:
87:9a:bf:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEp+xbqIIX4lONFlGl6QqG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMGFlY2VlYjhmYzg1OWMzNzYyZjMxMzcxZjk0YTAwNGRi
OGNjNDIwHhcNMjYxMDExMDgwMTIzWhcNMjYxMDEyMDgwMTIzWjAzMTEwLwYDVQQD
EygyNzkzMzQ4N2FjYjExNTUyNzQwYjk5NDlhY2YzMjE5ZmQzZWM1NmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ/5OYksiVMQUkvZlz2BG0qGFoSK
EvPqfD7ixAxQ6JVmX16SjMOBjXB3H7q/x/IbMoYEgTBbVhHC0G/NYYpY5BFdDzJI
lOBe1CqOCUo9A+pHuqiG+N2yHTDS9Nuxz4WX5wtRwRVJL+qi7TBPlKflsrjp/PDj
dmy1qyHF2/YAlebJRE4SOIw+OSvVsQ6fRZ6HhnIPQxh/1l9FwgozOa9fj7dPoK7K
fevm61gLpE6b+Di8TUxEG9HWxQeq1eQr/15tvRsK/CUY4X0sr3peQr4JWjFPEow6
0oAyjWs+5a5Yie1Q8Kosl9hGaxIU30b3lfit+nUE6Ze9kZ+8UDzXz+LJ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeTNIessRVSdAuZSazzIZ/T7FbiMB8GA1UdIwQY
MBaAFPIK7O64/IWcN2LzE3H5SgBNuMxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdyczdyajhoWnczWXZNVGNmbEtBRTI0ekVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xMDYyZTctNDM1ZC00YTkxLWExZTQt
YmQ2ZmFmMDIyYmY2LzEvOGdyczdyajhoWnczWXZNVGNmbEtBRTI0ekVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8xMDYyZTctNDM1ZC00YTkxLWExZTQtYmQ2ZmFmMDIyYmY2
LzEvOGdyczdyajhoWnczWXZNVGNmbEtBRTI0ekVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHlMVkZG
4MvPlS+JEqGLWUrwrflV+Ny3jBe9UWNmV1oHnedGYapHwhWuKKi07XcqdZa9w+1n
JEsAsPa3SmbbY0QxIsSAGIUmxe1mGCz74DzATgFOQUJe20c1Ipvjkq0n36RT1fZi
9wN6CVvLhCYBnpVyHCBGQevBFXbFZBJklAcooOEO97rI985UMGSOkpUkmVGyEBcj
IpQX0cU89uJVf6suCJJbcuaxvqEc2+YSswIIVOUNGAsRgUovPytflB+q7C5j/ZxU
IxwN1gc3ykoHMWZ//Yy1Yr1dGOMfIu2JhemICkyYXsbOiqDROipcHxHwifEA8jTe
4/eHaV9+h5q/Xg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 14:40:54 2026 by rpki-client