Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
File: 8kufSnwM67H5f6JAO2Me5tFuxjM.mft (raw, json)
Hash identifier: /uPQX5AixyOWwm00WVjhSzQf9S9GJXTs+lTv1sfOSM4=
Subject key identifier: 67:73:51:34:78:4E:7B:EA:4A:B0:6F:43:40:40:F0:6E:09:5C:72:8E
Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Certificate serial: 01A0CB229A495D2FD560923C86150D9F6E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
Manifest number: 03BF
Signing time: Tue 22 Sep 2026 22:00:37 +0000
Manifest this update: Tue 22 Sep 2026 22:00:37 +0000
Manifest next update: Wed 23 Sep 2026 22:00:37 +0000
Files and hashes: 1: 8kufSnwM67H5f6JAO2Me5tFuxjM.crl (hash: NakqWHlQlfCWa9gsNPuKzyzjyjpH++zNKpI9rbjUxQ8=)
2: l226mFgK6T2Z60Q9UPJ4UVEXvGI.roa (hash: sMVz2G2/suJpzTvieIkpkHigX+RGGXDj8VHYY+8cT9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:9a:49:5d:2f:d5:60:92:3c:86:15:0d:9f:6e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Validity
Not Before: Sep 22 22:00:37 2026 GMT
Not After : Sep 23 22:00:37 2026 GMT
Subject: CN=67735134784e7bea4ab06f434040f06e095c728e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:60:d0:44:18:a1:e5:f0:3c:42:a6:a5:3e:37:
e1:6b:d2:be:7b:a3:cb:93:d3:ec:91:e9:2c:a0:82:
7d:31:d4:c3:b4:f5:ee:d2:9d:7e:43:db:d7:0c:14:
a0:93:5a:60:16:b5:02:5a:f4:9c:fd:ee:9c:a4:8a:
0f:01:95:e7:08:e7:f4:b9:70:a9:ad:90:0c:2b:d5:
de:a5:d4:76:19:14:e5:d8:61:d3:69:f8:54:28:32:
6f:38:65:b0:92:f1:4d:cf:e2:54:2b:32:db:83:d9:
3f:41:41:8e:7e:65:8f:c6:c6:bc:67:e0:03:a5:f3:
1d:f3:80:b6:6d:f1:e3:a5:b0:e9:43:67:e2:b2:29:
e9:cc:4d:9c:d7:b3:73:6e:26:1a:00:6e:69:82:da:
33:a2:fa:6f:2f:34:e9:c0:7d:f4:3a:69:8a:ef:d2:
ca:5e:10:c6:9f:c7:b5:42:cf:90:07:33:63:d5:69:
17:08:af:a2:03:e5:f5:5e:75:a8:54:e9:1e:38:fd:
d6:aa:3d:12:e5:4f:b6:08:df:59:b8:0d:cf:a5:75:
0a:2a:4e:27:d1:87:08:d0:95:fb:5e:6b:f4:36:b6:
7e:48:ae:d4:56:e2:1d:36:09:70:b1:c7:39:b6:25:
1d:57:4e:64:4c:a1:bd:da:f7:77:c5:b7:db:ba:05:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:73:51:34:78:4E:7B:EA:4A:B0:6F:43:40:40:F0:6E:09:5C:72:8E
X509v3 Authority Key Identifier:
keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cf:f6:47:6e:2f:9d:9d:1e:84:06:9b:b7:dd:e7:a5:d3:d7:
c2:5b:95:8f:d3:fe:be:e1:74:96:ba:cc:3b:9e:91:2a:8d:ec:
60:47:f9:77:13:11:b5:96:c1:4c:59:ba:26:25:0f:14:9b:24:
6c:70:12:cc:ac:60:e3:96:3f:61:ef:33:af:c6:82:ac:0e:d6:
f8:44:06:47:93:e8:cc:f7:eb:56:fb:da:88:9a:83:4e:20:50:
1a:0d:c7:41:24:a5:e4:8e:4c:47:6f:02:80:cc:9a:1f:c2:5c:
34:6e:ed:a8:f1:6a:73:70:60:cc:4d:8c:ee:87:84:0d:39:b3:
90:26:41:37:df:4a:0f:b7:3d:8f:08:29:54:80:20:ca:3d:09:
91:0c:ff:d0:64:05:03:a3:e4:96:af:71:0e:80:eb:03:3c:ba:
54:f0:b5:49:8d:1c:c0:f5:8c:c1:2b:c8:0d:38:a7:5b:74:30:
55:3e:5e:ec:66:1c:03:76:4f:a7:54:0b:cf:43:b5:62:9b:15:
5d:c1:c8:df:a5:cd:2f:ec:50:33:cc:41:d6:51:32:4a:1e:fc:
c2:a6:6a:ce:b6:06:1c:4d:54:86:43:84:34:76:05:88:5b:a2:
33:5c:04:4a:5e:a3:57:46:ec:0f:0b:a9:ba:80:f6:1c:21:2b:
58:15:2a:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLIppJXS/VYJI8hhUNn24qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNGI5ZjRhN2MwY2ViYjFmOTdmYTI0MDNiNjMxZWU2ZDE2
ZWM2MzMwHhcNMjYwOTIyMjIwMDM3WhcNMjYwOTIzMjIwMDM3WjAzMTEwLwYDVQQD
Eyg2NzczNTEzNDc4NGU3YmVhNGFiMDZmNDM0MDQwZjA2ZTA5NWM3MjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGDQRBih5fA8QqalPjfha9K+e6PL
k9PskeksoIJ9MdTDtPXu0p1+Q9vXDBSgk1pgFrUCWvSc/e6cpIoPAZXnCOf0uXCp
rZAMK9XepdR2GRTl2GHTafhUKDJvOGWwkvFNz+JUKzLbg9k/QUGOfmWPxsa8Z+AD
pfMd84C2bfHjpbDpQ2fisinpzE2c17NzbiYaAG5pgtozovpvLzTpwH30OmmK79LK
XhDGn8e1Qs+QBzNj1WkXCK+iA+X1XnWoVOkeOP3Wqj0S5U+2CN9ZuA3PpXUKKk4n
0YcI0JX7Xmv0NrZ+SK7UVuIdNglwscc5tiUdV05kTKG92vd3xbfbugUaKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdzUTR4TnvqSrBvQ0BA8G4JXHKOMB8GA1UdIwQY
MBaAFPJLn0p8DOux+X+iQDtjHubRbsYzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzkt
OWM4ZWFiNzZkYTk4LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzktOWM4ZWFiNzZkYTk4
LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiM/2R24v
nZ0ehAabt93npdPXwluVj9P+vuF0lrrMO56RKo3sYEf5dxMRtZbBTFm6JiUPFJsk
bHASzKxg45Y/Ye8zr8aCrA7W+EQGR5PozPfrVvvaiJqDTiBQGg3HQSSl5I5MR28C
gMyaH8JcNG7tqPFqc3BgzE2M7oeEDTmzkCZBN99KD7c9jwgpVIAgyj0JkQz/0GQF
A6Pklq9xDoDrAzy6VPC1SY0cwPWMwSvIDTinW3QwVT5e7GYcA3ZPp1QLz0O1YpsV
XcHI36XNL+xQM8xB1lEySh78wqZqzrYGHE1UhkOENHYFiFuiM1wESl6jV0bsDwup
uoD2HCErWBUqvg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:07:12 2026 by rpki-client