Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: vzIyBedbvbkN4If0vUNUCtC3JmNWSrSmkZ8NyXXXa04=
Subject key identifier: AB:79:77:6B:81:8D:1D:BB:BD:E0:56:D1:4E:8C:80:89:3F:90:D8:86
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 01A0C143D729187608DB5D09AF2CAE9EE939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 1328
Signing time: Mon 21 Sep 2026 00:00:43 +0000
Manifest this update: Mon 21 Sep 2026 00:00:43 +0000
Manifest next update: Tue 22 Sep 2026 00:00:43 +0000
Files and hashes: 1: 7vuFGqZCxLzD91LmtcVrwRVipP0.roa (hash: exBwARjGLtxZJRWm9krMbKUblEEFQ4G0buGpMyQ+bjU=)
2: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: zZRWoKqKhaCWxdrL05yJbhiEOE6QFZZ/96Ly1Ioa+Kc=)
3: achjIHDKww_TLSJu-NnrKxU3--A.roa (hash: GHcbBAVqUMC4lX8HAJJpjhpVUyf1FlS4/jLemAj83YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:d7:29:18:76:08:db:5d:09:af:2c:ae:9e:e9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Sep 21 00:00:43 2026 GMT
Not After : Sep 22 00:00:43 2026 GMT
Subject: CN=ab79776b818d1dbbbde056d14e8c80893f90d886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f4:5b:56:1b:6d:7d:8c:19:d1:a6:68:1a:73:
dc:d9:7a:e2:5d:16:25:6c:78:66:b5:a7:c5:64:0b:
46:b0:85:3e:0e:0a:ed:ba:dc:1e:ec:77:e8:b4:8e:
80:8e:21:2d:b2:07:e7:3e:e6:b6:77:85:51:15:7f:
e4:de:69:b0:91:75:b8:d7:00:d5:05:ee:ec:d6:34:
7b:a7:94:a1:b7:c5:df:3f:ef:fe:66:4f:cc:f8:05:
1e:25:43:4f:30:03:e9:1e:2c:85:87:55:54:e5:1c:
62:5d:76:a1:fa:1c:61:ac:23:5f:31:0b:65:2e:bc:
9a:6e:bc:0f:e6:20:4f:52:f9:df:1d:d6:03:29:54:
16:38:22:48:95:8e:19:21:fd:d8:98:cf:15:82:aa:
07:8e:21:a0:97:ae:11:24:7e:a0:56:a4:13:6b:55:
aa:db:f3:57:03:5a:d2:4d:5e:6e:8b:5b:46:4d:53:
70:ad:e8:a2:fc:61:42:d2:de:6a:ad:5c:c3:b9:21:
e9:b0:b5:90:6f:db:6f:68:5c:31:db:40:60:a6:0b:
5a:0e:23:b5:cf:82:fb:35:c0:53:74:d6:4b:ab:11:
19:df:c3:93:a2:5f:7b:6d:bc:62:4a:d1:fd:fd:69:
4d:96:93:03:ab:7c:4e:96:d9:57:bb:80:3f:ce:15:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:79:77:6B:81:8D:1D:BB:BD:E0:56:D1:4E:8C:80:89:3F:90:D8:86
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:13:34:fc:a3:c2:d9:5b:28:b2:47:9f:29:5a:49:05:94:37:
cb:dd:6f:92:13:1c:d8:da:50:e1:96:64:ba:bf:75:a2:1c:e2:
11:c9:b8:24:37:d1:b1:40:1a:dc:4d:c8:95:20:5e:d4:d4:bd:
40:db:4e:7a:ab:a8:be:8b:20:c9:69:d7:a9:63:ba:7d:72:09:
eb:9d:4d:69:02:b0:0f:6f:54:c1:d0:b9:c5:52:9e:8a:fe:1b:
ea:cd:84:7d:ff:d2:cd:1a:3a:54:94:b4:ae:be:83:87:1f:c0:
e5:d1:e8:84:6a:57:a4:8c:7b:58:af:8f:b1:c7:db:ad:2d:22:
c6:ba:9b:32:c6:84:20:f7:1c:0b:92:c4:b4:ec:cb:3b:ea:53:
67:e6:4c:f9:80:89:05:f7:e4:81:ca:bb:5d:e4:04:2c:c0:fa:
31:5e:4f:51:1d:67:8d:cf:04:61:9c:c4:34:1b:f8:71:4e:17:
23:29:91:25:34:ed:d2:0b:d2:3c:ed:b9:e6:ea:10:f6:59:4c:
52:fe:f7:05:8d:06:d7:ae:27:1c:bb:d5:fa:eb:94:e3:98:b0:
c6:fd:53:ab:f2:b0:f5:85:fe:52:b5:db:5b:42:0c:6d:a2:d8:
0e:d9:67:d2:79:de:e2:65:16:53:e8:a3:fc:b5:aa:59:20:d8:
70:a3:f3:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBQ9cpGHYI210Jryyunuk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOGZiYTUyNjM1MTliN2MzYTIxNTVjNjk4NzgyMTc3NzZk
ZWZiYTAwHhcNMjYwOTIxMDAwMDQzWhcNMjYwOTIyMDAwMDQzWjAzMTEwLwYDVQQD
EyhhYjc5Nzc2YjgxOGQxZGJiYmRlMDU2ZDE0ZThjODA4OTNmOTBkODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfRbVhttfYwZ0aZoGnPc2XriXRYl
bHhmtafFZAtGsIU+Dgrtutwe7HfotI6AjiEtsgfnPua2d4VRFX/k3mmwkXW41wDV
Be7s1jR7p5Sht8XfP+/+Zk/M+AUeJUNPMAPpHiyFh1VU5RxiXXah+hxhrCNfMQtl
LryabrwP5iBPUvnfHdYDKVQWOCJIlY4ZIf3YmM8VgqoHjiGgl64RJH6gVqQTa1Wq
2/NXA1rSTV5ui1tGTVNwreii/GFC0t5qrVzDuSHpsLWQb9tvaFwx20BgpgtaDiO1
z4L7NcBTdNZLqxEZ38OTol97bbxiStH9/WlNlpMDq3xOltlXu4A/zhUxSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKt5d2uBjR27veBW0U6MgIk/kNiGMB8GA1UdIwQY
MBaAFPCPulJjUZt8OiFVxph4IXd23vugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgt
MDY0MTNjZWVmY2UwLzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgtMDY0MTNjZWVmY2Uw
LzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxM0/KPC
2VsoskefKVpJBZQ3y91vkhMc2NpQ4ZZkur91ohziEcm4JDfRsUAa3E3IlSBe1NS9
QNtOequovosgyWnXqWO6fXIJ651NaQKwD29UwdC5xVKeiv4b6s2Eff/SzRo6VJS0
rr6Dhx/A5dHohGpXpIx7WK+PscfbrS0ixrqbMsaEIPccC5LEtOzLO+pTZ+ZM+YCJ
Bffkgcq7XeQELMD6MV5PUR1njc8EYZzENBv4cU4XIymRJTTt0gvSPO255uoQ9llM
Uv73BY0G164nHLvV+uuU45iwxv1Tq/Kw9YX+UrXbW0IMbaLYDtln0nne4mUWU+ij
/LWqWSDYcKPz0w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:30:54 2026 by rpki-client