Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json)
Hash identifier: iaEuFDerR1oliDVRyrhfc5GQeWHYI1I+E6AQoeCd3dY=
Subject key identifier: 2F:B7:06:17:27:2B:BA:26:8A:91:D8:0A:7C:E1:B3:D9:E1:D7:BA:F3
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial: 01A13590B39126CDF5839B44F74FF42435E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
Manifest number: 1A34
Signing time: Tue 13 Oct 2026 14:00:37 +0000
Manifest this update: Tue 13 Oct 2026 14:00:37 +0000
Manifest next update: Wed 14 Oct 2026 14:00:37 +0000
Files and hashes: 1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: zFkOnDskTrXP5qKApfHNzXYviye1nALTyzRb7TsHemI=)
2: VHl37ymtX_2i6CyUoQNBTqA5Q14.roa (hash: eqHS99H1UTAx9btxTzK1grjqxkNHSX5THANz/qDbL1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:90:b3:91:26:cd:f5:83:9b:44:f7:4f:f4:24:35:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Validity
Not Before: Oct 13 14:00:37 2026 GMT
Not After : Oct 14 14:00:37 2026 GMT
Subject: CN=2fb70617272bba268a91d80a7ce1b3d9e1d7baf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:c7:d6:94:0b:57:c9:83:6e:59:94:37:bb:
75:49:10:7a:17:ec:3d:b4:a8:7e:f7:2d:0e:19:eb:
d3:15:e4:8e:c1:84:c5:1d:b0:c1:54:8c:42:df:f8:
05:cd:36:ae:72:6b:0e:ff:19:23:a2:f3:8a:e5:fa:
72:89:e5:ae:6e:07:04:ab:f4:d7:af:bf:d6:2d:05:
bb:15:6c:3d:cb:84:4a:14:4f:44:90:eb:dd:40:e0:
91:4f:1a:91:8f:36:06:44:61:99:1d:22:bf:b4:54:
f9:c6:cf:5a:6e:da:6b:9c:5f:de:65:15:e3:ca:1d:
8a:75:86:c1:cf:c0:66:6d:57:d8:df:78:a6:7a:d6:
4b:c1:f3:2f:d5:28:d4:8a:70:96:31:e3:51:1a:39:
ec:a3:57:da:53:ac:d0:db:62:e9:ab:4d:97:12:d1:
22:5d:11:1e:ef:8f:a8:96:b4:fa:c2:1b:f8:7f:55:
e8:0b:85:15:47:3b:60:e4:84:3d:25:62:e6:b5:23:
4a:24:68:b8:c7:b5:00:91:1a:18:a9:79:26:7a:7c:
c5:22:26:dd:10:69:44:62:3d:2a:05:56:5b:19:4f:
22:6c:20:54:2b:01:b7:56:1d:5d:66:fb:5b:65:8d:
62:74:02:d4:0c:04:7e:c2:59:73:10:cc:34:cf:b3:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B7:06:17:27:2B:BA:26:8A:91:D8:0A:7C:E1:B3:D9:E1:D7:BA:F3
X509v3 Authority Key Identifier:
keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:76:ab:e2:f5:fe:69:c4:96:e1:2a:89:2b:a4:5a:a1:62:c1:
ff:64:cb:47:23:22:84:41:05:9b:c3:e1:e1:fb:cf:84:96:4b:
6d:82:66:01:0e:ee:63:d9:61:13:82:68:ad:9f:e3:4a:e4:ea:
13:da:a3:f3:89:11:11:50:45:94:3d:ad:bf:5e:63:66:2f:4b:
a1:72:21:ec:c9:99:27:9a:0f:8c:d6:6b:eb:cf:d2:fa:75:49:
39:c9:34:cf:70:6b:1e:10:c5:3a:dc:4f:a4:09:b8:63:70:1c:
95:6c:4b:cf:13:c2:fc:b8:d4:15:9c:da:c1:42:f1:50:94:3f:
1e:3f:cb:15:93:87:33:26:a7:ec:49:7e:85:28:f4:31:a4:51:
51:af:a9:28:76:1c:3f:06:d1:d3:63:31:5a:d7:67:8b:ed:75:
6b:83:eb:d8:75:ce:09:da:17:4a:a9:db:20:09:68:10:5b:a8:
c9:a7:e8:62:34:7e:01:3d:f3:6c:83:28:38:f7:98:d3:3e:2b:
a8:b0:e8:ca:fe:fd:80:59:b3:60:aa:99:0b:88:36:5f:28:d3:
b1:6a:51:93:c3:40:3e:bf:38:8f:db:40:83:59:68:98:c6:62:
4e:95:d7:71:9e:93:b6:b6:f5:bb:07:c8:15:6e:7d:0e:36:5b:
c8:d5:1b:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1kLORJs31g5tE90/0JDXiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMTBiYWM5NmFmZjI1YjJhYTkzMWM0Mjk3NDQ2YmUzN2Zm
ZTJhZGEwHhcNMjYxMDEzMTQwMDM3WhcNMjYxMDE0MTQwMDM3WjAzMTEwLwYDVQQD
EygyZmI3MDYxNzI3MmJiYTI2OGE5MWQ4MGE3Y2UxYjNkOWUxZDdiYWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ3H1pQLV8mDblmUN7t1SRB6F+w9
tKh+9y0OGevTFeSOwYTFHbDBVIxC3/gFzTaucmsO/xkjovOK5fpyieWubgcEq/TX
r7/WLQW7FWw9y4RKFE9EkOvdQOCRTxqRjzYGRGGZHSK/tFT5xs9abtprnF/eZRXj
yh2KdYbBz8BmbVfY33imetZLwfMv1SjUinCWMeNRGjnso1faU6zQ22Lpq02XEtEi
XREe74+olrT6whv4f1XoC4UVRztg5IQ9JWLmtSNKJGi4x7UAkRoYqXkmenzFIibd
EGlEYj0qBVZbGU8ibCBUKwG3Vh1dZvtbZY1idALUDAR+wllzEMw0z7NjywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+3BhcnK7omipHYCnzhs9nh17rzMB8GA1UdIwQY
MBaAFPIQuslq/yWyqpMcQpdEa+N//iraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTI0MjEtMWEzZC00OGY1LTk0OWYt
YTMyOTM5NDY5OGQyLzEvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTI0MjEtMWEzZC00OGY1LTk0OWYtYTMyOTM5NDY5OGQy
LzEvOGhDNnlXcl9KYktxa3h4Q2wwUnI0M18tS3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHar4vX+
acSW4SqJK6RaoWLB/2TLRyMihEEFm8Ph4fvPhJZLbYJmAQ7uY9lhE4JorZ/jSuTq
E9qj84kREVBFlD2tv15jZi9LoXIh7MmZJ5oPjNZr68/S+nVJOck0z3BrHhDFOtxP
pAm4Y3AclWxLzxPC/LjUFZzawULxUJQ/Hj/LFZOHMyan7El+hSj0MaRRUa+pKHYc
PwbR02MxWtdni+11a4Pr2HXOCdoXSqnbIAloEFuoyafoYjR+AT3zbIMoOPeY0z4r
qLDoyv79gFmzYKqZC4g2XyjTsWpRk8NAPr84j9tAg1lomMZiTpXXcZ6Ttrb1uwfI
FW59DjZbyNUbqA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:27:59 2026 by rpki-client