Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
File: 8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json)
Hash identifier: 988mYZXJ4JJZD4jbEhlqUHwJHtxoLURytLkFryVeqzA=
Subject key identifier: 99:B1:04:61:FE:19:6B:F9:F0:44:12:53:E8:79:23:75:E3:C6:BF:3E
Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
Certificate issuer: /CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Certificate serial: 01A0CC3526019951591AE81E7771AB5EE10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
Manifest number: 161D
Signing time: Wed 23 Sep 2026 03:00:30 +0000
Manifest this update: Wed 23 Sep 2026 03:00:30 +0000
Manifest next update: Thu 24 Sep 2026 03:00:30 +0000
Files and hashes: 1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: C/fNE87/NUaezCS7L3wJKZRTIJqFIjHb/lKaJ7jFVSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:26:01:99:51:59:1a:e8:1e:77:71:ab:5e:e1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Validity
Not Before: Sep 23 03:00:30 2026 GMT
Not After : Sep 24 03:00:30 2026 GMT
Subject: CN=99b10461fe196bf9f0441253e8792375e3c6bf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:81:21:41:ff:e1:29:4c:1b:18:0e:d4:2c:
eb:39:7c:e0:ef:a2:65:d6:7d:2a:6a:ef:70:2e:94:
51:67:7e:1a:99:dc:50:c1:f0:6c:3e:f8:ad:60:89:
41:f8:d0:92:e9:1b:a2:72:52:4c:56:0d:ff:8a:02:
f5:b4:45:9b:08:ec:24:c8:92:71:69:01:f0:99:3f:
34:25:57:3a:af:b8:20:1d:13:da:e0:ce:7e:d1:3a:
e3:e5:21:02:ad:ef:5e:01:7b:50:ec:4f:8e:ac:85:
36:89:04:83:0f:03:66:37:b0:a1:28:6d:63:4a:ab:
80:2a:4b:fb:ee:b5:49:30:77:48:0c:30:eb:f2:c8:
4d:7b:e5:a2:54:2b:85:5a:60:76:7d:be:eb:2b:e3:
10:32:66:96:8c:a2:3d:10:86:5b:b8:05:57:a4:b9:
70:70:e9:ee:5c:9e:c3:e4:e2:6e:8e:b2:af:61:35:
57:cc:f5:9c:81:1a:e2:84:92:1b:aa:70:46:81:8e:
bc:d9:e5:4d:95:d1:3a:42:68:ef:9b:0d:93:a0:f4:
ba:72:8f:63:56:ea:26:0d:86:57:54:b4:c5:71:fa:
a2:af:05:dc:c6:9c:87:96:94:0b:3a:1a:57:90:52:
dc:d1:24:4c:1b:94:c0:cb:c0:5e:78:aa:c9:c1:92:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B1:04:61:FE:19:6B:F9:F0:44:12:53:E8:79:23:75:E3:C6:BF:3E
X509v3 Authority Key Identifier:
keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d7:e4:49:74:40:a0:59:c9:2e:52:28:fe:0f:46:47:8d:26:
58:f1:cd:27:90:c5:07:a5:42:f9:1c:8f:74:ce:78:89:de:25:
1e:9f:9b:12:6a:f8:d8:df:69:17:81:33:74:c1:c9:c5:17:d7:
80:be:d8:b0:90:fc:21:6b:f2:7e:29:02:2c:14:9d:82:a6:c3:
eb:0e:b8:19:59:4d:57:06:99:5f:2f:71:0c:c7:67:78:80:92:
27:a4:52:3f:c7:e7:9e:2b:e3:6d:5b:60:9e:97:97:ed:f7:f2:
69:11:ca:56:3e:98:4f:99:20:28:f2:da:d8:97:76:02:58:b1:
61:f4:59:e3:67:a8:f9:75:90:35:7e:33:9c:00:30:b9:8c:96:
60:13:e5:11:7d:96:fb:53:a5:d5:9c:9d:da:82:3c:e3:57:65:
2c:e9:1c:d5:2c:fd:0f:5e:b2:86:8e:4b:e0:71:08:5d:a1:79:
f6:e8:aa:00:bf:15:0e:c5:2e:bc:a8:97:6d:a4:cb:ef:95:c3:
74:ed:13:26:78:d8:26:1d:8c:2f:db:4a:87:3f:e2:40:99:c9:
a8:7a:44:92:3f:bb:08:25:b7:a5:01:c9:cd:f3:b2:28:e6:9b:
ec:c4:03:30:dc:09:92:0e:c0:dd:be:32:b7:e4:e4:cb:8f:e4:
91:95:14:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNSYBmVFZGuged3GrXuENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMDMxN2YyNGQ3MWE1MTZkNzUwNDNiZTkwZjVhYmUzZmEx
YzkyNTkwHhcNMjYwOTIzMDMwMDMwWhcNMjYwOTI0MDMwMDMwWjAzMTEwLwYDVQQD
Eyg5OWIxMDQ2MWZlMTk2YmY5ZjA0NDEyNTNlODc5MjM3NWUzYzZiZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunqBIUH/4SlMGxgO1CzrOXzg76Jl
1n0qau9wLpRRZ34amdxQwfBsPvitYIlB+NCS6RuiclJMVg3/igL1tEWbCOwkyJJx
aQHwmT80JVc6r7ggHRPa4M5+0Trj5SECre9eAXtQ7E+OrIU2iQSDDwNmN7ChKG1j
SquAKkv77rVJMHdIDDDr8shNe+WiVCuFWmB2fb7rK+MQMmaWjKI9EIZbuAVXpLlw
cOnuXJ7D5OJujrKvYTVXzPWcgRrihJIbqnBGgY682eVNldE6Qmjvmw2ToPS6co9j
VuomDYZXVLTFcfqirwXcxpyHlpQLOhpXkFLc0SRMG5TAy8BeeKrJwZJwpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmxBGH+GWv58EQSU+h5I3Xjxr8+MB8GA1UdIwQY
MBaAFPEDF/JNcaUW11BDvpD1q+P6HJJZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMzVhMDMtZTExYS00NzBhLTg0NmMt
NjZkNDlkZjUzZWYxLzEvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xMzVhMDMtZTExYS00NzBhLTg0NmMtNjZkNDlkZjUzZWYx
LzEvOFFNWDhrMXhwUmJYVUVPLWtQV3I0X29ja2xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdfkSXRA
oFnJLlIo/g9GR40mWPHNJ5DFB6VC+RyPdM54id4lHp+bEmr42N9pF4EzdMHJxRfX
gL7YsJD8IWvyfikCLBSdgqbD6w64GVlNVwaZXy9xDMdneICSJ6RSP8fnnivjbVtg
npeX7ffyaRHKVj6YT5kgKPLa2Jd2AlixYfRZ42eo+XWQNX4znAAwuYyWYBPlEX2W
+1Ol1Zyd2oI841dlLOkc1Sz9D16yho5L4HEIXaF59uiqAL8VDsUuvKiXbaTL75XD
dO0TJnjYJh2ML9tKhz/iQJnJqHpEkj+7CCW3pQHJzfOyKOab7MQDMNwJkg7A3b4y
t+Tky4/kkZUUag==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:25:13 2026 by rpki-client