Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
File: 8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json)
Hash identifier: 2pDTtonoDzl9ccFIcpPxwzyDUuv0GaP741uSyyjQkBY=
Subject key identifier: 83:E6:FD:A0:29:94:4D:FD:E9:41:EA:48:3B:69:BB:99:05:9E:EA:44
Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Certificate serial: 01A0CF364A19577661BB3478F3E6476C540E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
Manifest number: 0ACB
Signing time: Wed 23 Sep 2026 17:00:36 +0000
Manifest this update: Wed 23 Sep 2026 17:00:36 +0000
Manifest next update: Thu 24 Sep 2026 17:00:36 +0000
Files and hashes: 1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: 8r8Gyr5lL06NMCUxYH2RCF3Cc6z9Z7OIx3hZSK0GhgQ=)
2: t6Z6klZ_0NjLgXvq4YpIkhB8psw.roa (hash: +OTn+I3wq5DYeVWvGcpxMDqEd8XsWHPUTKNQceql21Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:4a:19:57:76:61:bb:34:78:f3:e6:47:6c:54:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Validity
Not Before: Sep 23 17:00:36 2026 GMT
Not After : Sep 24 17:00:36 2026 GMT
Subject: CN=83e6fda029944dfde941ea483b69bb99059eea44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:0b:13:f0:a3:6d:03:90:ff:0e:a8:29:51:
c6:0d:67:b4:e0:0a:0f:1f:b2:99:10:11:3f:c5:6f:
9c:16:1e:60:81:65:95:fc:80:e0:e6:cc:7e:65:c0:
6e:82:fc:31:c4:48:1c:e0:ae:5d:87:d1:6f:dc:17:
1b:57:e6:b8:13:b5:b2:91:6c:10:cc:45:0c:77:00:
fb:2b:3e:e3:1a:1f:2c:9a:8d:87:d2:20:2a:62:af:
e8:cf:3f:5a:59:3a:9f:d4:6c:8a:78:82:61:4a:a5:
c7:8f:00:31:8d:e6:00:e9:5d:ca:c4:ee:40:52:39:
2e:83:e0:38:cc:8e:b9:f7:87:c9:ee:6a:2d:6c:cd:
17:9c:cd:dc:1f:65:09:7e:19:63:6c:8b:f4:27:6f:
75:34:a3:a9:f0:a2:10:3b:1b:dd:d4:e4:e7:8e:67:
26:a4:95:9a:3f:15:a6:56:0b:26:4f:2d:7b:3f:5a:
57:2d:a1:91:d6:ac:ae:72:79:63:4a:13:ea:72:6f:
d8:6a:08:d9:5d:68:db:48:ed:38:08:af:d1:a2:03:
6f:bb:18:da:c9:7d:62:90:35:df:ad:ed:fb:05:a5:
47:52:83:d0:48:e0:65:bf:c9:cc:43:ec:d4:cb:e3:
cf:8a:88:ea:8b:bc:78:c7:f3:60:3e:7c:f3:ab:78:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E6:FD:A0:29:94:4D:FD:E9:41:EA:48:3B:69:BB:99:05:9E:EA:44
X509v3 Authority Key Identifier:
keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:74:47:4c:61:58:7d:b0:95:a3:0a:37:ee:b2:72:1a:08:2c:
7c:58:53:5f:04:18:19:6c:dd:31:f6:cf:c0:96:d4:a6:71:85:
14:a5:d5:f4:e4:d0:70:c2:27:99:b2:3c:42:6f:30:46:a5:ad:
89:0d:35:b0:df:f5:24:14:7f:7c:f6:88:03:c8:e5:96:db:07:
44:c2:53:58:29:69:88:aa:46:ba:58:c5:f0:70:5b:75:18:16:
31:3b:35:e8:4a:c5:c6:7b:72:67:42:f1:5c:e7:51:7c:e4:6a:
bb:fa:8e:4a:be:bc:c7:3d:2b:18:31:9c:fc:e4:c9:9d:d4:54:
5e:2e:a6:d1:9d:e9:ac:b9:a8:78:7b:28:36:b1:87:ba:4d:bd:
9a:47:10:59:fe:a1:95:38:18:c7:93:84:5f:45:70:30:6b:92:
e0:74:42:84:0e:84:25:c4:c4:3b:54:e3:6d:f5:ff:68:e5:23:
5e:f9:a3:1b:7d:91:a7:ed:5c:84:77:96:ea:ac:d8:1b:f0:24:
b5:c4:c6:a1:7c:36:68:98:6b:78:1d:62:e1:df:8b:00:ec:93:
32:f3:38:cd:f0:00:27:70:a0:90:4a:b6:bc:90:f6:d2:fb:e7:
4f:0b:c5:4e:b4:59:ce:12:ee:9d:a7:52:73:1a:8f:12:f3:55:
4e:6f:80:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNkoZV3ZhuzR48+ZHbFQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjE3ZWJjYzJhNTI1YWZjZmM5MjIxODE1OWNhZjUyODgy
OTc4ZDIwHhcNMjYwOTIzMTcwMDM2WhcNMjYwOTI0MTcwMDM2WjAzMTEwLwYDVQQD
Eyg4M2U2ZmRhMDI5OTQ0ZGZkZTk0MWVhNDgzYjY5YmI5OTA1OWVlYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfYLE/CjbQOQ/w6oKVHGDWe04AoP
H7KZEBE/xW+cFh5ggWWV/IDg5sx+ZcBugvwxxEgc4K5dh9Fv3BcbV+a4E7WykWwQ
zEUMdwD7Kz7jGh8smo2H0iAqYq/ozz9aWTqf1GyKeIJhSqXHjwAxjeYA6V3KxO5A
Ujkug+A4zI6594fJ7motbM0XnM3cH2UJfhljbIv0J291NKOp8KIQOxvd1OTnjmcm
pJWaPxWmVgsmTy17P1pXLaGR1qyucnljShPqcm/YagjZXWjbSO04CK/RogNvuxja
yX1ikDXfre37BaVHUoPQSOBlv8nMQ+zUy+PPiojqi7x4x/NgPnzzq3jpZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPm/aAplE396UHqSDtpu5kFnupEMB8GA1UdIwQY
MBaAFPHxfrzCpSWvz8kiGBWcr1KIKXjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUt
ZmYzNGE4YWU5MDFhLzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUtZmYzNGE4YWU5MDFh
LzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwnRHTGFY
fbCVowo37rJyGggsfFhTXwQYGWzdMfbPwJbUpnGFFKXV9OTQcMInmbI8Qm8wRqWt
iQ01sN/1JBR/fPaIA8jlltsHRMJTWClpiKpGuljF8HBbdRgWMTs16ErFxntyZ0Lx
XOdRfORqu/qOSr68xz0rGDGc/OTJndRUXi6m0Z3prLmoeHsoNrGHuk29mkcQWf6h
lTgYx5OEX0VwMGuS4HRChA6EJcTEO1TjbfX/aOUjXvmjG32Rp+1chHeW6qzYG/Ak
tcTGoXw2aJhreB1i4d+LAOyTMvM4zfAAJ3CgkEq2vJD20vvnTwvFTrRZzhLunadS
cxqPEvNVTm+A9A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:07:19 2026 by rpki-client