Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
File: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json)
Hash identifier: AbtvsTBv1Op7OXuPziR1D57RT4TX5adhsHRDCzbXfY0=
Subject key identifier: B5:7F:A7:0F:48:23:05:90:F6:A3:8E:0E:3C:C6:D3:31:9A:EF:EF:85
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial: 01A0EC65CD9EE0C43A0910CE58DA8060D0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
Manifest number: 04E8
Signing time: Tue 29 Sep 2026 09:01:29 +0000
Manifest this update: Tue 29 Sep 2026 09:01:29 +0000
Manifest next update: Wed 30 Sep 2026 09:01:29 +0000
Files and hashes: 1: 3W0r7_vH4Ttz-bP11_crp0stnDs.roa (hash: n+/Ciq7cGqaPplZE7FEUrLiSmC9wkdkZUvzoaApzzuc=)
2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: IYInWlwIyEJSldoNlLZH4a6x+wB1dvDEzCBt3OY7quk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:cd:9e:e0:c4:3a:09:10:ce:58:da:80:60:d0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Validity
Not Before: Sep 29 09:01:29 2026 GMT
Not After : Sep 30 09:01:29 2026 GMT
Subject: CN=b57fa70f48230590f6a38e0e3cc6d3319aefef85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:19:7b:1c:64:6b:31:a6:d6:c7:63:12:6e:
19:24:6b:36:28:b9:2a:7e:7a:3c:1f:ea:db:b7:f3:
ca:4d:f6:1e:11:76:ad:e1:16:b7:08:2a:9b:ad:32:
23:61:1d:5b:04:53:4e:20:ac:86:eb:30:39:50:f5:
db:4b:b6:3d:1a:38:81:48:35:c8:87:97:cf:a0:c4:
a3:4f:63:72:e1:24:28:2f:9b:d9:fa:be:43:40:9f:
b9:d9:37:93:dd:59:b4:a5:4e:55:1d:84:f1:46:dd:
b3:b0:0b:bb:c1:47:01:e9:e0:cb:4f:e1:d1:58:f8:
24:64:dd:20:8d:5d:1d:76:b5:1a:10:03:3b:02:16:
e6:a8:dd:95:03:d0:31:de:23:2b:7b:78:97:7c:6d:
57:7f:4b:50:98:c8:b0:9c:53:ee:d2:ac:90:2a:ef:
f5:6e:22:66:1e:1d:be:c1:5e:96:fd:d7:33:ae:7c:
5f:e8:32:60:76:ad:17:ca:33:8f:de:07:ca:b8:e7:
71:9c:c6:fe:fe:0e:2a:35:96:83:25:52:33:f3:bf:
17:ce:00:fa:0d:a5:95:d8:f5:8d:2d:4c:98:11:66:
60:ed:05:74:48:08:9c:69:ce:16:93:50:53:9f:99:
e5:ae:3c:81:9d:d7:79:40:c3:4f:9c:a8:e2:69:6d:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7F:A7:0F:48:23:05:90:F6:A3:8E:0E:3C:C6:D3:31:9A:EF:EF:85
X509v3 Authority Key Identifier:
keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:93:7b:e6:25:98:60:08:54:e1:8b:4d:ec:bd:b0:4d:98:e5:
56:49:48:91:39:82:ae:c6:15:0f:5b:6a:33:de:37:66:08:dd:
9d:1c:23:a9:22:6a:ad:4c:00:08:b7:6a:2a:ca:eb:37:1d:75:
42:cf:81:12:e5:a3:c2:0f:99:9b:91:59:17:ec:41:87:08:d7:
b2:94:04:49:04:4a:41:ad:b8:d8:eb:56:0a:ae:8c:e6:1a:5d:
0a:64:a5:c1:e4:c2:81:69:fc:6a:d8:13:8d:f9:38:64:2e:54:
56:bd:bb:6b:38:88:c7:41:93:f9:b5:07:1f:03:65:0a:ff:be:
f1:26:15:e1:b2:0e:5b:f8:c4:a4:a1:a4:ac:81:37:05:08:31:
fc:03:f9:f6:7d:33:cb:c3:0a:d6:9b:0e:5f:e7:02:44:d9:61:
18:9e:6d:71:c8:96:fd:6b:c2:ac:25:9f:89:02:70:82:68:36:
a2:54:a8:44:d0:9e:df:ba:a1:fd:a9:3a:ae:27:a6:e1:02:d9:
c2:c5:6b:8b:29:35:e1:88:39:92:6b:9d:98:55:07:a7:f1:c2:
e8:5c:68:d2:7d:3a:63:e2:44:96:60:aa:cc:a6:b2:6d:87:a9:
db:e0:15:26:09:3d:82:5e:a0:ef:44:c2:bf:e0:5a:b7:aa:a6:
8a:19:e2:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsZc2e4MQ6CRDOWNqAYNDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MmYzZmYzYzBhMWZmYjNhZjIwZjViOTVlOGNiNjRjODgw
NDNmMzkwHhcNMjYwOTI5MDkwMTI5WhcNMjYwOTMwMDkwMTI5WjAzMTEwLwYDVQQD
EyhiNTdmYTcwZjQ4MjMwNTkwZjZhMzhlMGUzY2M2ZDMzMTlhZWZlZjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pcZexxkazGm1sdjEm4ZJGs2KLkq
fno8H+rbt/PKTfYeEXat4Ra3CCqbrTIjYR1bBFNOIKyG6zA5UPXbS7Y9GjiBSDXI
h5fPoMSjT2Ny4SQoL5vZ+r5DQJ+52TeT3Vm0pU5VHYTxRt2zsAu7wUcB6eDLT+HR
WPgkZN0gjV0ddrUaEAM7AhbmqN2VA9Ax3iMre3iXfG1Xf0tQmMiwnFPu0qyQKu/1
biJmHh2+wV6W/dczrnxf6DJgdq0XyjOP3gfKuOdxnMb+/g4qNZaDJVIz878XzgD6
DaWV2PWNLUyYEWZg7QV0SAicac4Wk1BTn5nlrjyBndd5QMNPnKjiaW0xxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLV/pw9IIwWQ9qOODjzG0zGa7++FMB8GA1UdIwQY
MBaAFIkvP/PAof+zryD1uV6MtkyIBD85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZDJhZjctMzgyYi00ZGQ2LWE4YjQt
ZjkyMWRiNzViZGY5LzEvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81ZDJhZjctMzgyYi00ZGQ2LWE4YjQtZjkyMWRiNzViZGY5
LzEvaVM4Xzg4Q2hfN092SVBXNVhveTJUSWdFUHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpN75iWY
YAhU4YtN7L2wTZjlVklIkTmCrsYVD1tqM943ZgjdnRwjqSJqrUwACLdqKsrrNx11
Qs+BEuWjwg+Zm5FZF+xBhwjXspQESQRKQa242OtWCq6M5hpdCmSlweTCgWn8atgT
jfk4ZC5UVr27aziIx0GT+bUHHwNlCv++8SYV4bIOW/jEpKGkrIE3BQgx/AP59n0z
y8MK1psOX+cCRNlhGJ5tcciW/WvCrCWfiQJwgmg2olSoRNCe37qh/ak6riem4QLZ
wsVriyk14Yg5kmudmFUHp/HC6Fxo0n06Y+JElmCqzKaybYep2+AVJgk9gl6g70TC
v+Bat6qmihniRA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:20:15 2026 by rpki-client