Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
File: 80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json)
Hash identifier: +B5+wttjbaxIjJ52HfCGGKNogS4eueO9eg7v0lG0vZs=
Subject key identifier: 59:A2:8B:1E:2D:62:30:DC:C5:B6:B8:79:FD:39:22:85:6B:A2:15:49
Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Certificate issuer: /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Certificate serial: 01A1C09C4EB8BD8C520C4F88FAB2DB2EC64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
Manifest number: 109A
Signing time: Mon 09 Nov 2026 14:00:31 +0000
Manifest this update: Mon 09 Nov 2026 14:00:31 +0000
Manifest next update: Tue 10 Nov 2026 14:00:31 +0000
Files and hashes: 1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: /dOUPkPNMh7F/VVtnWWX1YoyAIUjjrugSKHPGPWSvHI=)
2: epa_Kdx-LVaM8CuhAOU9qbUA_EM.roa (hash: Aa6u3inS9dGYjD1jBcsF2Mf4ginAblBytDS0JIhmA9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:9c:4e:b8:bd:8c:52:0c:4f:88:fa:b2:db:2e:c6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Validity
Not Before: Nov 9 14:00:31 2026 GMT
Not After : Nov 10 14:00:31 2026 GMT
Subject: CN=59a28b1e2d6230dcc5b6b879fd3922856ba21549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:23:2e:dd:0e:96:16:3b:2d:66:e0:57:f5:
3a:f1:2d:9a:fe:5a:07:a2:89:01:ad:77:9d:9b:22:
06:84:98:2d:6e:d9:b6:e3:d7:2f:29:01:9b:63:03:
8b:08:56:97:e1:d9:10:67:a1:92:6f:8f:61:1d:20:
3f:60:4e:57:6d:f4:cf:6a:ae:be:57:a3:ee:19:3f:
e5:3a:12:2a:5c:16:33:62:82:d3:d1:f9:fe:7e:27:
e1:d4:f9:9c:e3:de:3a:a1:6e:4c:99:1e:c0:2c:df:
c8:3a:46:17:69:b9:a4:dd:b2:b9:6b:85:38:1e:69:
4d:87:fc:ed:ea:75:7b:04:ed:6b:da:3f:5b:4a:10:
6a:43:a7:ad:d3:3f:a5:48:af:77:64:de:8a:98:3e:
66:66:4c:b0:74:a5:94:d2:bb:7e:5b:43:31:13:d1:
60:eb:92:5e:8b:c7:eb:58:1a:1a:96:ff:7a:59:65:
9f:cc:48:3b:54:82:fe:20:b5:47:80:fa:3c:6a:30:
14:09:24:45:5e:60:dd:e4:0d:0a:f8:65:a4:c8:b4:
96:a8:e5:06:71:73:9b:2e:ef:48:6d:d0:a2:24:d2:
5b:ac:6d:08:e8:ea:08:86:a6:9b:6f:87:4d:19:b8:
f1:36:83:2d:ca:45:ad:0b:8c:a6:a4:a9:63:29:78:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A2:8B:1E:2D:62:30:DC:C5:B6:B8:79:FD:39:22:85:6B:A2:15:49
X509v3 Authority Key Identifier:
keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:87:8f:e0:04:9a:ec:89:31:7e:5f:7e:44:6c:11:39:3b:2b:
2f:d3:cd:7b:35:37:04:92:5b:ac:d9:55:11:0c:c4:69:d0:e6:
96:a2:5d:23:07:0e:d9:85:92:bf:77:7a:20:a4:e9:99:7f:01:
36:c3:f6:e6:24:03:b3:c7:12:bb:74:93:47:41:88:41:8e:42:
2c:5c:c1:3f:fb:82:8b:c5:e4:cf:2c:67:3a:9c:d8:e6:b2:ca:
0e:ac:d2:a3:c8:81:f5:50:a9:c8:64:ed:8c:35:f7:3a:5b:15:
cc:24:8b:6b:71:2c:e6:53:e2:9d:ec:fe:66:16:a3:46:54:ed:
ff:12:08:a7:2a:28:b4:fb:72:19:42:99:b8:a3:fc:97:6e:2f:
4c:df:a3:10:23:e2:a9:d3:06:74:ff:91:77:29:1f:27:2f:d0:
77:fd:89:14:39:ae:a4:55:e0:60:d0:1d:d3:6a:86:2d:2a:96:
0d:22:f7:85:5d:65:87:fc:24:7e:52:c9:e6:f3:86:de:64:c3:
5f:a6:97:d8:46:41:86:aa:90:e7:15:8c:88:01:8b:75:46:a6:
fa:4c:71:0a:9d:e4:10:34:20:8b:1f:9e:7f:6a:d1:09:82:e9:
04:25:ec:0e:06:45:f0:73:ab:09:5f:3b:a6:82:a8:69:3d:4e:
d8:b2:e8:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHAnE64vYxSDE+I+rLbLsZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNDdjZWQ5YTBlZDdmOTQ0YjlmNGVmYzM4NTc3YjM4ZTZk
MWM2NzMwHhcNMjYxMTA5MTQwMDMxWhcNMjYxMTEwMTQwMDMxWjAzMTEwLwYDVQQD
Eyg1OWEyOGIxZTJkNjIzMGRjYzViNmI4NzlmZDM5MjI4NTZiYTIxNTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoecjLt0OlhY7LWbgV/U68S2a/loH
ookBrXedmyIGhJgtbtm249cvKQGbYwOLCFaX4dkQZ6GSb49hHSA/YE5XbfTPaq6+
V6PuGT/lOhIqXBYzYoLT0fn+fifh1Pmc4946oW5MmR7ALN/IOkYXabmk3bK5a4U4
HmlNh/zt6nV7BO1r2j9bShBqQ6et0z+lSK93ZN6KmD5mZkywdKWU0rt+W0MxE9Fg
65Jei8frWBoalv96WWWfzEg7VIL+ILVHgPo8ajAUCSRFXmDd5A0K+GWkyLSWqOUG
cXObLu9IbdCiJNJbrG0I6OoIhqabb4dNGbjxNoMtykWtC4ympKljKXgjZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmiix4tYjDcxba4ef05IoVrohVJMB8GA1UdIwQY
MBaAFPNHztmg7X+US59O/DhXezjm0cZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODk2MDMtYjViZS00ZmZhLWEyYjIt
MjMyYjRiNDY1N2U5LzEvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wODk2MDMtYjViZS00ZmZhLWEyYjItMjMyYjRiNDY1N2U5
LzEvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYeP4ASa
7Ikxfl9+RGwROTsrL9PNezU3BJJbrNlVEQzEadDmlqJdIwcO2YWSv3d6IKTpmX8B
NsP25iQDs8cSu3STR0GIQY5CLFzBP/uCi8XkzyxnOpzY5rLKDqzSo8iB9VCpyGTt
jDX3OlsVzCSLa3Es5lPinez+ZhajRlTt/xIIpyootPtyGUKZuKP8l24vTN+jECPi
qdMGdP+RdykfJy/Qd/2JFDmupFXgYNAd02qGLSqWDSL3hV1lh/wkflLJ5vOG3mTD
X6aX2EZBhqqQ5xWMiAGLdUam+kxxCp3kEDQgix+ef2rRCYLpBCXsDgZF8HOrCV87
poKoaT1O2LLo6g==
-----END CERTIFICATE-----
Generated at Mon Nov 9 17:42:44 2026 by rpki-client