Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: FaHtwNkrTtnhGiweZxAXaEZ6yutQtDYm4JEAPlXFggc=
Subject key identifier: 2B:85:B2:B9:D8:EE:FB:66:99:42:5F:AC:D6:83:27:51:D5:A1:BD:DA
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 01A0C3321F99D958E28FA907CFFD4EFBB87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 09E4
Signing time: Mon 21 Sep 2026 09:00:36 +0000
Manifest this update: Mon 21 Sep 2026 09:00:36 +0000
Manifest next update: Tue 22 Sep 2026 09:00:36 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: LNcAAr2taEwZ+hBpDAM0Zn/FUc/bXqWpsx8EBR34if0=)
2: wg9L7rd4GBIxdDb6Qm5YK6zsb3U.roa (hash: Mp7viOHmtxKfCc5QYE1IZGldkiFvmgFzmHRq++mrwh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:1f:99:d9:58:e2:8f:a9:07:cf:fd:4e:fb:b8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Sep 21 09:00:36 2026 GMT
Not After : Sep 22 09:00:36 2026 GMT
Subject: CN=2b85b2b9d8eefb6699425facd6832751d5a1bdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d7:a5:5c:3d:6e:8d:5d:2d:4f:8f:ea:44:f9:
de:1e:8c:44:2f:e7:c0:6a:cd:a0:21:c6:c7:c1:99:
4c:06:ac:a0:7a:34:b4:5b:f8:a4:a2:3f:cc:09:4c:
0d:6e:23:18:0d:01:18:ce:0b:fe:e9:a2:f7:4e:6a:
91:50:58:9f:2c:e7:b0:0e:1d:38:67:ae:b7:ae:1d:
85:01:c0:55:1a:8c:92:65:fb:4a:e8:2c:42:e2:c9:
84:e2:bd:94:0e:f5:8e:11:c5:3d:f7:7c:03:a2:bd:
17:fa:b4:b7:87:16:93:59:35:70:62:87:3d:7b:12:
c5:db:be:cc:d5:83:50:24:a1:eb:b7:82:f2:1d:bb:
21:43:d3:d4:fa:80:5e:ff:d6:6a:d4:50:05:41:98:
ee:14:28:70:a9:81:bc:43:3e:db:bc:44:09:50:ab:
d1:d3:f2:41:c2:8a:c3:4c:74:c3:39:74:f8:c0:57:
61:00:f4:8a:2b:76:f7:5b:3d:cf:d2:8f:52:5b:4f:
ca:05:e9:c0:11:b7:bb:dc:ac:7e:57:74:cf:74:d7:
f5:1d:dd:99:65:2f:1a:1f:f3:4d:3c:ce:04:64:48:
21:82:d8:5e:48:9e:fe:f4:c6:43:3b:f1:b5:41:0b:
ad:66:5e:50:bc:16:a0:76:cc:56:ba:47:81:f9:d8:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:85:B2:B9:D8:EE:FB:66:99:42:5F:AC:D6:83:27:51:D5:A1:BD:DA
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:20:76:b3:a7:86:59:9b:54:b2:3f:2d:04:7b:e3:00:25:0e:
ff:9b:af:f2:0f:8f:c8:5a:b2:c6:8c:1a:23:33:5d:6b:30:75:
3c:c1:91:4b:fb:94:be:35:f7:fd:ac:49:05:5b:8c:75:bd:f6:
94:4d:ad:b7:a0:8b:da:26:0c:98:63:aa:a7:a1:75:d7:8b:1b:
42:1e:c6:cb:76:41:c5:c2:34:1e:bd:5f:22:ba:ae:06:b0:7b:
31:55:f6:c3:08:0d:67:27:e7:81:42:1e:8c:a6:83:38:28:8c:
07:26:76:6d:39:f2:2e:e6:3f:14:d7:7d:bd:74:b3:be:00:0d:
9f:97:62:d8:44:47:d0:02:aa:2d:fe:db:75:0e:f8:c8:a5:f5:
d7:e0:3a:9b:9b:00:77:d8:cf:42:b8:b4:8f:4e:3f:c9:69:31:
52:b9:86:5d:d4:ae:bb:d8:d0:e0:0e:3b:45:ba:30:ba:4d:4c:
dd:a6:02:87:86:8b:a3:1e:66:2a:da:68:dd:47:66:60:bd:e7:
ab:e6:32:12:21:c0:67:bc:13:16:cb:78:92:97:62:1d:8a:29:
ef:08:7a:2a:f4:1f:32:a2:d0:cf:b7:12:54:02:37:19:b3:a1:
57:00:ec:b8:b7:ac:54:a1:43:92:e2:2f:c5:b3:e4:1a:88:9f:
34:c7:e9:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMh+Z2Vjij6kHz/1O+7h6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODUyNzBlODMxOTNkMzI2OWY3Y2RlOWRhMDgwOGIxZWZm
NTUyYWUwHhcNMjYwOTIxMDkwMDM2WhcNMjYwOTIyMDkwMDM2WjAzMTEwLwYDVQQD
EygyYjg1YjJiOWQ4ZWVmYjY2OTk0MjVmYWNkNjgzMjc1MWQ1YTFiZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9elXD1ujV0tT4/qRPneHoxEL+fA
as2gIcbHwZlMBqygejS0W/ikoj/MCUwNbiMYDQEYzgv+6aL3TmqRUFifLOewDh04
Z663rh2FAcBVGoySZftK6CxC4smE4r2UDvWOEcU993wDor0X+rS3hxaTWTVwYoc9
exLF277M1YNQJKHrt4LyHbshQ9PU+oBe/9Zq1FAFQZjuFChwqYG8Qz7bvEQJUKvR
0/JBworDTHTDOXT4wFdhAPSKK3b3Wz3P0o9SW0/KBenAEbe73Kx+V3TPdNf1Hd2Z
ZS8aH/NNPM4EZEghgtheSJ7+9MZDO/G1QQutZl5QvBagdsxWukeB+dhgKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuFsrnY7vtmmUJfrNaDJ1HVob3aMB8GA1UdIwQY
MBaAFPGFJw6DGT0yaffN6doICLHv9VKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgt
ZmVmOTZlOTVhYmEwLzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgtZmVmOTZlOTVhYmEw
LzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSB2s6eG
WZtUsj8tBHvjACUO/5uv8g+PyFqyxowaIzNdazB1PMGRS/uUvjX3/axJBVuMdb32
lE2tt6CL2iYMmGOqp6F114sbQh7Gy3ZBxcI0Hr1fIrquBrB7MVX2wwgNZyfngUIe
jKaDOCiMByZ2bTnyLuY/FNd9vXSzvgANn5di2ERH0AKqLf7bdQ74yKX11+A6m5sA
d9jPQri0j04/yWkxUrmGXdSuu9jQ4A47Rbowuk1M3aYCh4aLox5mKtpo3UdmYL3n
q+YyEiHAZ7wTFst4kpdiHYop7wh6KvQfMqLQz7cSVAI3GbOhVwDsuLesVKFDkuIv
xbPkGoifNMfpig==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:33:02 2026 by rpki-client