Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier: Oq1+AQbad7if6C5FdM/8EQY+Jquc7rq4H5WbJLvOIf0=
Subject key identifier: 6C:60:B5:AC:D0:68:35:A3:D6:9B:00:82:76:77:BF:CE:B6:6E:AF:61
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer: /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial: 01A0C28D246E6F47F650E03067381A802C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number: 08C0
Signing time: Mon 21 Sep 2026 06:00:24 +0000
Manifest this update: Mon 21 Sep 2026 06:00:24 +0000
Manifest next update: Tue 22 Sep 2026 06:00:24 +0000
Files and hashes: 1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: YBK/0g15amq4KCmrfBB9Zy0taCZZuKi08WjcXZH9QWE=)
2: l17vdHF4x4HHoIdKAxBn3NY8F0c.roa (hash: RAFi309N00rxNtnf9we0njxeYbrg65eo2Zw5ZnR4sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:24:6e:6f:47:f6:50:e0:30:67:38:1a:80:2c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Validity
Not Before: Sep 21 06:00:24 2026 GMT
Not After : Sep 22 06:00:24 2026 GMT
Subject: CN=6c60b5acd06835a3d69b00827677bfceb66eaf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:77:55:4b:7e:81:1f:32:ac:6f:19:4b:e9:25:
cf:22:6b:f2:8d:86:bf:28:03:9c:fe:1e:af:e8:83:
5f:05:d2:e4:b0:10:d1:34:df:a9:65:ca:b8:7e:87:
24:27:99:d7:ab:07:3a:8b:19:b6:69:cf:6d:65:5f:
fb:c9:29:e4:0a:d1:d9:a7:df:a1:09:72:31:5c:43:
a1:eb:39:b2:98:cd:07:7e:b9:3d:44:4d:c3:10:ae:
7f:aa:fe:69:4d:8c:d7:68:95:3f:4d:42:ff:6f:cd:
38:cb:a1:80:1a:ff:65:03:65:e3:5b:23:66:18:56:
f5:80:58:ec:3a:87:56:8b:b1:b4:12:93:96:f6:85:
72:1a:85:af:4c:b3:cc:cc:45:6d:a7:52:ea:e9:a9:
63:42:7b:c9:85:1e:80:d1:71:d7:87:07:eb:b6:90:
5b:e9:e1:8e:c0:75:f5:ad:bd:9f:ab:55:81:b8:77:
36:1e:5d:e5:fe:9c:79:b5:7d:f1:2a:4c:f6:71:91:
68:0f:7e:61:91:e2:cf:91:26:e9:83:a5:ef:43:ac:
46:59:57:8f:5c:22:de:6d:e9:76:3f:d1:4b:90:d9:
83:c3:d2:64:5b:80:8c:c5:2f:6e:88:80:d5:81:a0:
c7:42:32:fe:5a:59:e8:59:f1:19:9d:59:47:f4:fe:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:60:B5:AC:D0:68:35:A3:D6:9B:00:82:76:77:BF:CE:B6:6E:AF:61
X509v3 Authority Key Identifier:
keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:77:0e:73:e0:2c:bb:de:92:73:23:79:26:7a:49:5f:b7:8b:
28:67:c8:47:0a:72:2d:c8:f2:28:09:0b:c2:30:de:e5:95:e0:
76:11:6c:17:5b:bf:58:46:2e:6d:ef:91:7a:05:5e:b7:cd:c1:
f9:0a:fe:13:1b:bb:91:c9:ea:45:a6:d8:15:67:c6:be:69:3d:
3b:b8:36:03:8b:e8:ac:58:dd:52:70:3c:9f:9c:8c:ae:e2:94:
2d:f1:9f:fa:6f:06:be:4c:88:c8:fe:09:f9:0f:a0:bc:dd:13:
7e:b3:3b:6a:ad:f0:35:1b:b0:34:49:95:30:35:95:17:95:b1:
54:24:67:ae:f8:fc:09:5d:4f:43:46:81:48:6b:b4:86:8c:f4:
d4:80:5e:1f:ef:17:40:29:63:fc:89:12:c3:a7:e8:41:6e:0e:
37:39:81:f0:ec:d9:cc:59:df:35:51:c7:11:d0:10:f0:1d:21:
4d:99:cd:a7:6e:c4:15:ec:03:f9:01:03:01:0f:05:bb:80:70:
26:a2:f1:4e:7d:e1:0b:5c:68:e5:f2:a8:02:41:bc:f5:30:d9:
1f:89:89:4a:0d:67:ca:56:1a:b8:61:1e:4b:d3:31:81:ab:47:
54:59:7c:89:4b:df:c5:4a:15:e0:36:15:7a:74:30:b4:3d:33:
e7:2e:c6:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCjSRub0f2UOAwZzgagCwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2VkNGZlZGY1NmQwYjAyYjE3MmM4Zjg5ZWMzNzY1MTBj
ZDMxNzQwHhcNMjYwOTIxMDYwMDI0WhcNMjYwOTIyMDYwMDI0WjAzMTEwLwYDVQQD
Eyg2YzYwYjVhY2QwNjgzNWEzZDY5YjAwODI3Njc3YmZjZWI2NmVhZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ndVS36BHzKsbxlL6SXPImvyjYa/
KAOc/h6v6INfBdLksBDRNN+pZcq4fockJ5nXqwc6ixm2ac9tZV/7ySnkCtHZp9+h
CXIxXEOh6zmymM0Hfrk9RE3DEK5/qv5pTYzXaJU/TUL/b804y6GAGv9lA2XjWyNm
GFb1gFjsOodWi7G0EpOW9oVyGoWvTLPMzEVtp1Lq6aljQnvJhR6A0XHXhwfrtpBb
6eGOwHX1rb2fq1WBuHc2Hl3l/px5tX3xKkz2cZFoD35hkeLPkSbpg6XvQ6xGWVeP
XCLebel2P9FLkNmDw9JkW4CMxS9uiIDVgaDHQjL+WlnoWfEZnVlH9P7vZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxgtazQaDWj1psAgnZ3v862bq9hMB8GA1UdIwQY
MBaAFPA+1P7fVtCwKxcsj4nsN2UQzTF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEt
ZmI0ZmQwN2UyNmEwLzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEtZmI0ZmQwN2UyNmEw
LzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3cOc+As
u96ScyN5JnpJX7eLKGfIRwpyLcjyKAkLwjDe5ZXgdhFsF1u/WEYube+RegVet83B
+Qr+Exu7kcnqRabYFWfGvmk9O7g2A4vorFjdUnA8n5yMruKULfGf+m8GvkyIyP4J
+Q+gvN0TfrM7aq3wNRuwNEmVMDWVF5WxVCRnrvj8CV1PQ0aBSGu0hoz01IBeH+8X
QClj/IkSw6foQW4ONzmB8OzZzFnfNVHHEdAQ8B0hTZnNp27EFewD+QEDAQ8Fu4Bw
JqLxTn3hC1xo5fKoAkG89TDZH4mJSg1nylYauGEeS9MxgatHVFl8iUvfxUoV4DYV
enQwtD0z5y7GMA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:35:44 2026 by rpki-client