Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: UczGaKnxvlY/9VH6i7hk8vpzw5XpSXROB6WuJgEAwJU=
Subject key identifier: A7:41:59:53:7C:91:43:52:48:62:29:30:51:21:A0:DD:8A:FE:E3:41
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 01A0CC6C4FEEBC2328FC3F6524CC32789CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: 0514
Signing time: Wed 23 Sep 2026 04:00:45 +0000
Manifest this update: Wed 23 Sep 2026 04:00:45 +0000
Manifest next update: Thu 24 Sep 2026 04:00:45 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: BITvRXlxOYbnqRY6moHwAdNSD4n+OYjBWQBVwVFuSa4=)
2: Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa (hash: KhcCVOzCZNjhliNrDxOy2a8F19I6yxCDsbXLuV/7DNo=)
3: nTgR9PLLMxj6DumejGUp3QxDic4.roa (hash: 6jyqKs+vhmdq7Zq8Pff708q5roK5Wwnu9eGjYqiN4qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:4f:ee:bc:23:28:fc:3f:65:24:cc:32:78:9c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Sep 23 04:00:45 2026 GMT
Not After : Sep 24 04:00:45 2026 GMT
Subject: CN=a74159537c914352486229305121a0dd8afee341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:f8:df:b5:2e:d4:33:33:90:76:a8:37:52:
51:69:02:c8:59:3f:62:cb:f9:5a:bf:6e:59:f8:fc:
8f:55:da:26:2a:e2:ad:68:1f:64:54:88:7d:41:df:
c2:3b:f8:ab:3f:9b:98:6c:12:ea:ce:fd:4f:38:91:
55:90:f3:db:58:68:d6:0c:be:08:c5:21:78:cf:16:
21:1b:8f:68:81:55:69:ac:27:3c:26:08:84:ed:e6:
44:97:5d:19:e9:01:86:70:ae:34:7d:02:6b:fd:fc:
f7:ae:5d:4b:1f:ce:18:bd:fb:e0:43:d0:ff:bb:bf:
50:47:7d:42:99:77:02:c3:18:dc:80:0d:e9:26:fa:
e4:09:fd:08:96:63:77:fa:e4:3f:78:bb:c3:45:36:
28:37:e2:ec:16:ba:9e:26:d3:c1:d2:b9:2f:1a:13:
c1:ef:43:25:fe:48:b7:e0:28:6f:11:e2:eb:6f:fc:
75:a3:c6:af:5a:3c:71:79:29:54:19:6a:1b:ac:06:
69:8c:0b:8a:cc:d1:98:c3:31:12:85:34:94:c9:a8:
88:6d:ed:b6:ca:df:b0:31:4f:24:08:f2:1c:f9:f7:
cb:6d:7d:1b:d6:fe:52:b5:74:32:40:64:04:2a:61:
35:d8:b4:81:0f:7b:ab:e1:75:45:45:c4:fb:46:96:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:41:59:53:7C:91:43:52:48:62:29:30:51:21:A0:DD:8A:FE:E3:41
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:35:25:0e:17:45:cb:07:1e:dc:ec:c6:6c:3e:b7:52:e7:79:
9b:e9:d7:90:9f:19:f8:ed:e0:7f:6e:18:93:22:ab:15:c5:4c:
4d:1a:7e:57:12:e1:0f:e6:a5:c9:4e:b4:da:20:ad:c3:34:db:
d1:c9:88:ab:68:be:42:3e:08:7a:7b:22:ee:4c:fc:e5:0b:7a:
64:67:19:5d:2a:38:e4:40:8d:20:b2:f5:c2:08:6a:b4:55:3a:
1a:9e:47:16:e7:2c:86:5f:95:1a:2c:bf:9b:d2:d6:9e:1a:b3:
e2:03:85:9a:2c:1d:5d:da:8e:81:f4:23:39:14:6d:84:f7:da:
f6:95:ea:d0:76:51:a5:7c:97:de:ac:33:c8:a5:29:7d:a5:3b:
5c:16:02:f6:53:8a:d9:3e:70:65:a5:2a:37:16:2a:bd:30:34:
63:c6:7e:ba:63:c2:47:3f:5e:4a:21:46:c6:00:c8:14:62:67:
33:27:83:3d:aa:40:8c:6a:af:fc:d3:e9:64:df:f7:64:cb:72:
60:bd:65:c2:df:8a:5f:4e:b9:9a:7f:9b:a2:40:d2:cf:ea:4e:
cf:1c:a0:5f:91:ba:17:42:6b:9d:4c:d1:ef:be:46:72:6d:62:
4e:14:be:30:89:57:ee:b6:b2:27:5a:2b:9c:38:1c:20:9d:06:
79:eb:e3:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMbE/uvCMo/D9lJMwyeJy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2YyZGI3MmFhYjQzNWI5ZGFhMmIxZjdlMWE4YTMyNzY3
Nzg4YmUwHhcNMjYwOTIzMDQwMDQ1WhcNMjYwOTI0MDQwMDQ1WjAzMTEwLwYDVQQD
EyhhNzQxNTk1MzdjOTE0MzUyNDg2MjI5MzA1MTIxYTBkZDhhZmVlMzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFH437Uu1DMzkHaoN1JRaQLIWT9i
y/lav25Z+PyPVdomKuKtaB9kVIh9Qd/CO/irP5uYbBLqzv1POJFVkPPbWGjWDL4I
xSF4zxYhG49ogVVprCc8JgiE7eZEl10Z6QGGcK40fQJr/fz3rl1LH84YvfvgQ9D/
u79QR31CmXcCwxjcgA3pJvrkCf0IlmN3+uQ/eLvDRTYoN+LsFrqeJtPB0rkvGhPB
70Ml/ki34ChvEeLrb/x1o8avWjxxeSlUGWobrAZpjAuKzNGYwzEShTSUyaiIbe22
yt+wMU8kCPIc+ffLbX0b1v5StXQyQGQEKmE12LSBD3ur4XVFRcT7RpY5jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdBWVN8kUNSSGIpMFEhoN2K/uNBMB8GA1UdIwQY
MBaAFPM/Lbcqq0NbnaorH34aijJ2d4i+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEt
YzZjMDZlMmIzYTlmLzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEtYzZjMDZlMmIzYTlm
LzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjUlDhdF
ywce3OzGbD63Uud5m+nXkJ8Z+O3gf24YkyKrFcVMTRp+VxLhD+alyU602iCtwzTb
0cmIq2i+Qj4Iensi7kz85Qt6ZGcZXSo45ECNILL1wghqtFU6Gp5HFucshl+VGiy/
m9LWnhqz4gOFmiwdXdqOgfQjORRthPfa9pXq0HZRpXyX3qwzyKUpfaU7XBYC9lOK
2T5wZaUqNxYqvTA0Y8Z+umPCRz9eSiFGxgDIFGJnMyeDPapAjGqv/NPpZN/3ZMty
YL1lwt+KX065mn+bokDSz+pOzxygX5G6F0JrnUzR775Gcm1iThS+MIlX7rayJ1or
nDgcIJ0GeevjDA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:01:59 2026 by rpki-client