Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: cafNa5mOhABey7Qr4OnFs818GXqQmO/Ek0Ypoe7mmq8=
Subject key identifier: 45:8E:0C:9E:DD:13:0B:58:F0:CF:D7:67:DA:17:92:03:5F:8E:96:94
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 01A0CFA3DD04C6DE0915A495D015C2868DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 1A72
Signing time: Wed 23 Sep 2026 19:00:17 +0000
Manifest this update: Wed 23 Sep 2026 19:00:17 +0000
Manifest next update: Thu 24 Sep 2026 19:00:17 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: k43ypT4FeEZSSFo9qBsU6DHAVT8HpWuGbavSOAquRoc=)
2: l6d-s6pGrwjzo2MVrYFXt_vj8FQ.roa (hash: GWCGfDBQXbx8zU/9pE2/fyqt5ipxe1FQBrMDGvjciQY=)
3: wNW1OJ6nNt-LJ_qt91rusWZGqUk.roa (hash: Uf/zMrnHEJKdoypvZyEP0WBvkTlQGSBhuCZb5Fsvgco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:dd:04:c6:de:09:15:a4:95:d0:15:c2:86:8d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Sep 23 19:00:17 2026 GMT
Not After : Sep 24 19:00:17 2026 GMT
Subject: CN=458e0c9edd130b58f0cfd767da1792035f8e9694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:d7:9b:e3:5c:22:6e:f4:09:d4:99:82:da:
88:83:44:60:21:89:cf:f5:4a:ea:8f:51:18:2f:e2:
c5:b7:11:7a:d2:03:1f:22:80:44:47:a5:e3:4c:40:
f2:56:8e:e2:34:32:6b:92:fc:a7:67:fd:15:15:ad:
32:51:f3:cf:e6:fc:99:b0:dc:fb:b9:81:d3:a1:93:
33:fa:97:af:14:7c:4e:13:d1:63:cc:a3:2c:b8:da:
5d:4d:5f:b7:6b:2d:96:a4:f1:d7:79:8d:bd:57:ec:
d0:49:d7:ab:a0:07:08:b6:b7:ed:8e:11:6a:d1:c4:
c3:13:68:da:23:1d:32:72:0e:4b:34:a5:3f:d2:fe:
65:60:9c:77:81:59:d6:0f:ba:0f:f7:f1:01:60:d6:
df:a0:65:6b:3b:1b:89:38:4a:52:5a:0d:44:6a:f2:
5c:bf:fd:9a:a5:1d:83:1e:2a:e5:dc:63:d5:45:bd:
92:75:66:fa:64:ff:2f:d1:10:5b:d1:ee:2d:9a:36:
d9:e9:e8:b9:d3:45:e9:8b:4e:2c:e0:54:da:47:8e:
24:fe:27:d0:78:74:7e:77:03:10:3e:85:7e:a8:4e:
a3:e7:f0:62:e3:41:ad:76:c1:8e:ff:21:51:b3:45:
8b:29:a5:7f:a0:67:ee:6a:57:8a:9c:2c:c2:96:00:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8E:0C:9E:DD:13:0B:58:F0:CF:D7:67:DA:17:92:03:5F:8E:96:94
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c4:4e:cd:83:b5:0d:f6:ca:75:9e:7a:ee:23:3e:0d:aa:dc:
d4:de:2e:a9:9f:52:91:cb:b8:40:0f:4e:5c:79:26:c9:7f:a3:
cd:3a:86:55:87:65:38:7b:66:f7:41:67:4d:91:b4:e3:45:73:
57:b3:18:ad:4f:5b:a4:bd:fa:41:dd:49:48:fe:ec:69:d6:86:
b0:1f:8e:ea:33:34:7b:3c:57:c3:c1:09:46:d4:a7:2d:93:14:
44:bd:13:f3:cd:ed:2c:7e:f1:3e:ec:a2:d6:e9:67:18:9c:f9:
29:d4:67:30:eb:d3:72:95:48:0b:21:a1:91:b9:b0:6a:80:98:
10:8f:76:02:d1:25:77:61:6d:e5:66:4e:77:53:6c:cf:30:f6:
7c:01:48:f0:e0:c6:f1:02:45:31:82:a5:a6:6c:c8:05:35:84:
dc:57:37:f2:52:85:fc:6c:10:0d:9f:75:d4:e2:3c:f5:db:26:
7d:6b:3f:f0:f6:3d:de:b2:f3:95:27:67:32:9a:27:8e:af:84:
f5:d5:51:2f:0a:1e:bf:73:60:07:67:78:43:26:31:7a:46:5a:
2c:cf:34:37:4e:81:72:c1:2b:50:41:7d:b3:8b:54:cd:20:f0:
ec:de:15:59:cc:67:ca:bb:bf:b4:b4:91:21:c0:7a:73:16:59:
8e:e9:aa:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPo90Ext4JFaSV0BXCho3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMmJlOTgyMDYwYTQzNzM0ZDBhZDEyNmFkNDZkYTJmMzk1
YzlkZWYwHhcNMjYwOTIzMTkwMDE3WhcNMjYwOTI0MTkwMDE3WjAzMTEwLwYDVQQD
Eyg0NThlMGM5ZWRkMTMwYjU4ZjBjZmQ3NjdkYTE3OTIwMzVmOGU5Njk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTLXm+NcIm70CdSZgtqIg0RgIYnP
9Urqj1EYL+LFtxF60gMfIoBER6XjTEDyVo7iNDJrkvynZ/0VFa0yUfPP5vyZsNz7
uYHToZMz+pevFHxOE9FjzKMsuNpdTV+3ay2WpPHXeY29V+zQSderoAcItrftjhFq
0cTDE2jaIx0ycg5LNKU/0v5lYJx3gVnWD7oP9/EBYNbfoGVrOxuJOEpSWg1EavJc
v/2apR2DHirl3GPVRb2SdWb6ZP8v0RBb0e4tmjbZ6ei500Xpi04s4FTaR44k/ifQ
eHR+dwMQPoV+qE6j5/Bi40GtdsGO/yFRs0WLKaV/oGfualeKnCzClgCmvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWODJ7dEwtY8M/XZ9oXkgNfjpaUMB8GA1UdIwQY
MBaAFPMr6YIGCkNzTQrRJq1G2i85XJ3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGIt
OTliY2JlNmQ3ZjYzLzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGItOTliY2JlNmQ3ZjYz
LzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMROzYO1
DfbKdZ567iM+Darc1N4uqZ9Skcu4QA9OXHkmyX+jzTqGVYdlOHtm90FnTZG040Vz
V7MYrU9bpL36Qd1JSP7sadaGsB+O6jM0ezxXw8EJRtSnLZMURL0T883tLH7xPuyi
1ulnGJz5KdRnMOvTcpVICyGhkbmwaoCYEI92AtEld2Ft5WZOd1NszzD2fAFI8ODG
8QJFMYKlpmzIBTWE3Fc38lKF/GwQDZ911OI89dsmfWs/8PY93rLzlSdnMponjq+E
9dVRLwoev3NgB2d4QyYxekZaLM80N06BcsErUEF9s4tUzSDw7N4VWcxnyru/tLSR
IcB6cxZZjumqOw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:04:44 2026 by rpki-client