Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: VtLlY23BlshqnOE1Q40sZ+auD752bmYxsFbnSJoRLGQ=
Subject key identifier: 60:54:44:F4:17:94:EB:CB:18:0C:B6:74:71:36:03:F7:6C:95:13:4D
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 01A0D45D876892DFDE59716D50A199C667D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 08FA
Signing time: Thu 24 Sep 2026 17:01:34 +0000
Manifest this update: Thu 24 Sep 2026 17:01:34 +0000
Manifest next update: Fri 25 Sep 2026 17:01:34 +0000
Files and hashes: 1: 2MeX37cZHGHHuxJtj1E28ddzIsI.roa (hash: LZd2fssCxVZOERqVCoqkBsBn4xYtLG5cKZGv8FiTdNw=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: Si3cw8AEO/VR8ZXRkhNR2lBbkI1UX4zJagJx7hEdMu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:87:68:92:df:de:59:71:6d:50:a1:99:c6:67:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Sep 24 17:01:34 2026 GMT
Not After : Sep 25 17:01:34 2026 GMT
Subject: CN=605444f41794ebcb180cb674713603f76c95134d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:11:9e:2e:f8:d8:74:4c:f9:95:42:47:fb:1c:
70:86:2e:72:71:c6:31:bf:43:2c:50:e7:ce:56:e0:
92:92:c1:fc:1e:94:63:4f:a8:e0:30:b9:24:28:b1:
9f:9e:fa:ea:cc:89:0d:dd:72:ef:c3:90:80:77:98:
58:4b:64:77:22:57:37:27:e6:6f:65:38:44:91:c2:
8c:e9:6f:4a:94:a5:f4:97:8e:1f:cf:72:1f:71:a2:
4b:d0:1e:1c:44:78:90:64:7f:6b:e6:0f:b1:fc:1d:
04:a1:d7:99:b5:b0:2f:dc:76:81:da:09:fa:56:70:
88:cd:d9:71:7e:92:d7:b4:02:da:f7:ef:15:40:91:
b0:98:8d:35:d9:82:1d:83:14:da:0c:16:05:ba:83:
b0:8c:39:83:de:65:e1:fb:b9:25:82:37:71:42:de:
c3:bf:b7:8f:37:d5:27:10:d5:4c:9d:7f:13:6a:f7:
1d:82:b6:38:01:5e:86:9f:93:5e:1b:78:a5:59:42:
90:b3:37:7b:4e:55:35:4a:bd:3e:4b:df:6c:68:4d:
7f:1d:8a:65:70:1b:25:c6:33:e8:a3:eb:80:f1:57:
72:09:0a:cd:79:b4:ef:0c:65:d9:e1:2c:29:34:80:
01:60:e3:0a:1a:f4:06:5f:0d:43:89:bf:0f:0c:1c:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:44:F4:17:94:EB:CB:18:0C:B6:74:71:36:03:F7:6C:95:13:4D
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ee:50:8b:fc:53:b3:fc:0a:85:6d:84:b2:1f:20:c1:78:32:
11:58:2a:fe:ef:54:0f:67:51:f2:59:c1:00:a3:84:a5:e4:5d:
92:c7:7c:0d:f7:2e:2d:65:b4:d0:cf:48:15:7c:d1:a1:94:75:
ea:09:5d:2d:86:a7:5c:7d:e3:54:5e:5e:47:0e:ef:d7:5f:01:
75:09:dd:3b:32:73:b8:1a:58:d9:97:10:13:5b:1a:42:be:dc:
97:09:7d:77:97:10:48:49:a6:5a:50:2c:0b:09:2c:80:0f:c5:
ed:26:fc:57:f2:d2:b6:53:91:e0:89:98:af:9f:03:c7:43:42:
85:2f:9b:d6:92:4f:2c:54:ea:69:3b:a2:42:d4:17:6a:ad:1f:
50:30:a8:e8:1c:9d:6c:46:72:d4:d5:3e:94:84:1b:c4:cd:e0:
4a:b6:62:1b:ee:1d:a3:32:fa:89:b0:fb:28:c1:ce:27:91:27:
80:ea:be:e1:3f:65:43:3c:43:4e:01:83:e8:8e:4c:ee:5e:b4:
9c:02:10:d2:8d:d1:7c:fb:4f:3a:0b:48:dc:cf:fe:6c:a2:f5:
9f:51:e7:c4:4d:af:8a:f5:02:96:b1:7d:3b:fc:a4:c3:a1:49:
3e:f0:43:a4:4e:6d:a7:ca:cc:a8:5a:e0:7e:7a:02:e9:5e:a0:
95:4f:d2:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUXYdokt/eWXFtUKGZxmfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2Q5N2YxNTA4ZTdhNDQ3ODk5ZjU5YTU1ZmI4YWE2MjQx
ZWY1MTAwHhcNMjYwOTI0MTcwMTM0WhcNMjYwOTI1MTcwMTM0WjAzMTEwLwYDVQQD
Eyg2MDU0NDRmNDE3OTRlYmNiMTgwY2I2NzQ3MTM2MDNmNzZjOTUxMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RGeLvjYdEz5lUJH+xxwhi5yccYx
v0MsUOfOVuCSksH8HpRjT6jgMLkkKLGfnvrqzIkN3XLvw5CAd5hYS2R3Ilc3J+Zv
ZThEkcKM6W9KlKX0l44fz3IfcaJL0B4cRHiQZH9r5g+x/B0EodeZtbAv3HaB2gn6
VnCIzdlxfpLXtALa9+8VQJGwmI012YIdgxTaDBYFuoOwjDmD3mXh+7klgjdxQt7D
v7ePN9UnENVMnX8TavcdgrY4AV6Gn5NeG3ilWUKQszd7TlU1Sr0+S99saE1/HYpl
cBslxjPoo+uA8VdyCQrNebTvDGXZ4SwpNIABYOMKGvQGXw1Dib8PDBxX2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBURPQXlOvLGAy2dHE2A/dslRNNMB8GA1UdIwQY
MBaAFCN9l/FQjnpEeJn1mlX7iqYkHvUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTMyWDhWQ09la1I0bWZXYVZmdUtwaVFlOVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mNTAzZDctMWZiNi00MzcwLWI0NGYt
NDRhNDFhOTMxMTNlLzEvSTMyWDhWQ09la1I0bWZXYVZmdUtwaVFlOVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9mNTAzZDctMWZiNi00MzcwLWI0NGYtNDRhNDFhOTMxMTNl
LzEvSTMyWDhWQ09la1I0bWZXYVZmdUtwaVFlOVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAve5Qi/xT
s/wKhW2Esh8gwXgyEVgq/u9UD2dR8lnBAKOEpeRdksd8DfcuLWW00M9IFXzRoZR1
6gldLYanXH3jVF5eRw7v118BdQndOzJzuBpY2ZcQE1saQr7clwl9d5cQSEmmWlAs
CwksgA/F7Sb8V/LStlOR4ImYr58Dx0NChS+b1pJPLFTqaTuiQtQXaq0fUDCo6Byd
bEZy1NU+lIQbxM3gSrZiG+4dozL6ibD7KMHOJ5EngOq+4T9lQzxDTgGD6I5M7l60
nAIQ0o3RfPtPOgtI3M/+bKL1n1HnxE2vivUClrF9O/ykw6FJPvBDpE5tp8rMqFrg
fnoC6V6glU/SzQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:19:20 2026 by rpki-client