Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: GK4KdQ+kGrSx4MrJvn4dwRkEKrZ5apUlzUxr4DTj3gs=
Subject key identifier: A2:D5:94:72:D4:79:9B:B8:04:1B:68:CA:42:91:89:C6:FB:C9:97:E4
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 01A0D384037464E483C63F7DAD34DE2E9EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 1728
Signing time: Thu 24 Sep 2026 13:03:59 +0000
Manifest this update: Thu 24 Sep 2026 13:03:59 +0000
Manifest next update: Fri 25 Sep 2026 13:03:59 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: +38c3Q+2vb9tgNiBa3guif5frw6HY6dDXmfhFKfOxWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:84:03:74:64:e4:83:c6:3f:7d:ad:34:de:2e:9e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Sep 24 13:03:59 2026 GMT
Not After : Sep 25 13:03:59 2026 GMT
Subject: CN=a2d59472d4799bb8041b68ca429189c6fbc997e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:09:ea:1a:13:23:8d:da:10:24:01:6b:f7:b9:
b8:24:fa:a0:f0:79:ec:a3:6d:3d:a0:75:60:e5:af:
3a:8b:ea:cc:14:cb:42:e1:8a:28:63:cf:6e:99:1e:
e0:d8:a2:2a:2c:56:55:6f:a8:f9:a5:66:e9:64:70:
df:36:45:12:a4:2e:76:97:2c:1d:7f:d0:61:bc:72:
fd:d0:3d:1d:f1:06:45:a6:05:df:1b:f8:d3:f7:91:
cb:04:bf:40:80:14:48:28:a8:b2:51:09:18:18:65:
d6:88:11:34:66:3e:63:29:83:a3:fd:62:d7:05:ae:
b6:6f:5f:fc:11:29:e5:6c:ab:b8:1a:44:00:02:6e:
9f:1d:88:c4:44:23:8b:6c:0f:60:05:e3:12:e7:d1:
97:ca:88:26:74:37:b5:03:f4:59:00:5c:7f:95:ad:
2e:9e:eb:54:28:61:fb:1a:41:73:45:42:10:3e:1a:
d4:e4:76:37:e7:85:a2:04:c4:b5:bf:00:1b:57:f4:
7e:76:b3:ee:80:1b:21:0a:3c:67:a3:67:e9:4b:e8:
cf:80:40:00:ce:0a:e4:dc:e0:07:29:eb:ea:84:63:
01:05:49:fc:ac:59:9b:97:b7:56:74:0b:19:73:ab:
b8:26:2f:eb:0b:8c:1e:89:7f:2e:cf:41:9d:b3:6e:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D5:94:72:D4:79:9B:B8:04:1B:68:CA:42:91:89:C6:FB:C9:97:E4
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ec:1f:e4:a5:83:bf:fd:9d:18:8e:18:c0:e1:d6:a3:20:10:
0f:1b:5b:1a:46:d0:5b:26:80:5c:56:3f:6a:25:1e:75:89:ec:
a2:e4:28:fc:83:52:9d:60:6c:f8:40:d9:76:84:04:c4:93:b0:
3a:8f:44:45:fe:d2:ef:a8:52:a1:28:71:78:c2:21:5d:d8:76:
49:e9:fa:8c:b8:67:a9:7a:3e:7e:e8:2c:09:fb:0a:80:c0:d5:
e0:be:c0:e5:38:47:7f:14:12:88:3d:a6:28:a7:02:70:c8:26:
be:97:0a:89:61:d0:37:7d:10:a9:8f:b3:0a:8f:01:bb:ce:71:
7a:80:a7:ed:c1:f1:08:62:ad:4e:fa:22:39:8f:e3:16:fd:db:
4f:20:4b:58:76:f9:26:84:16:2a:ee:a8:01:f2:6e:57:a5:99:
47:dc:56:8a:e7:4d:41:f7:ff:60:37:d7:dd:67:24:36:b8:81:
c6:6f:44:e6:d9:2c:79:9e:8c:62:e0:e0:24:32:7c:89:b7:b7:
23:50:0d:53:83:5b:cd:3e:ef:bf:b0:82:8e:35:43:7a:bd:86:
08:3f:f6:57:92:76:0e:c2:58:26:2b:bc:1b:70:6b:1a:17:8a:
7b:a1:6b:a1:dd:46:89:0d:57:d2:26:90:d2:fe:ee:9e:04:d2:
a2:01:94:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDThAN0ZOSDxj99rTTeLp7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmYyOWZjMDdlZDRiNTIxOGNkMTI3ZGEyYWM1N2ZhMDYz
NDUyZDkwHhcNMjYwOTI0MTMwMzU5WhcNMjYwOTI1MTMwMzU5WjAzMTEwLwYDVQQD
EyhhMmQ1OTQ3MmQ0Nzk5YmI4MDQxYjY4Y2E0MjkxODljNmZiYzk5N2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AnqGhMjjdoQJAFr97m4JPqg8Hns
o209oHVg5a86i+rMFMtC4YooY89umR7g2KIqLFZVb6j5pWbpZHDfNkUSpC52lywd
f9BhvHL90D0d8QZFpgXfG/jT95HLBL9AgBRIKKiyUQkYGGXWiBE0Zj5jKYOj/WLX
Ba62b1/8ESnlbKu4GkQAAm6fHYjERCOLbA9gBeMS59GXyogmdDe1A/RZAFx/la0u
nutUKGH7GkFzRUIQPhrU5HY354WiBMS1vwAbV/R+drPugBshCjxno2fpS+jPgEAA
zgrk3OAHKevqhGMBBUn8rFmbl7dWdAsZc6u4Ji/rC4weiX8uz0Gds26h/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLVlHLUeZu4BBtoykKRicb7yZfkMB8GA1UdIwQY
MBaAFNEvKfwH7UtSGM0SfaKsV/oGNFLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEt
ZTBkODIxZTQ1ZmZjLzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEtZTBkODIxZTQ1ZmZj
LzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+wf5KWD
v/2dGI4YwOHWoyAQDxtbGkbQWyaAXFY/aiUedYnsouQo/INSnWBs+EDZdoQExJOw
Oo9ERf7S76hSoShxeMIhXdh2Sen6jLhnqXo+fugsCfsKgMDV4L7A5ThHfxQSiD2m
KKcCcMgmvpcKiWHQN30QqY+zCo8Bu85xeoCn7cHxCGKtTvoiOY/jFv3bTyBLWHb5
JoQWKu6oAfJuV6WZR9xWiudNQff/YDfX3WckNriBxm9E5tkseZ6MYuDgJDJ8ibe3
I1ANU4NbzT7vv7CCjjVDer2GCD/2V5J2DsJYJiu8G3BrGheKe6Frod1GiQ1X0iaQ
0v7ungTSogGUiw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:57:08 2026 by rpki-client