Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: j4V3ioESodgQxM2YlOidmJFLjEAeuyxLXVxFVyLafvE=
Subject key identifier: EF:06:5F:F7:B6:85:A4:79:85:15:9E:A9:AB:F1:C0:D3:C0:01:16:C5
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 01A0CEC8235AC4E34D13648E11DCB81D1304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 10F7
Signing time: Wed 23 Sep 2026 15:00:17 +0000
Manifest this update: Wed 23 Sep 2026 15:00:17 +0000
Manifest next update: Thu 24 Sep 2026 15:00:17 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: Z88M8kregMQR4ErU322ylu/2IPDf8rb3DuRQXHb6gR8=)
2: ofgcBJL5IkucI_t2Tbw87DuVUlg.roa (hash: 0n3F9loIDoRxXepxc9dufIeLMM9JHYgsIDsHjtK3JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:23:5a:c4:e3:4d:13:64:8e:11:dc:b8:1d:13:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Sep 23 15:00:17 2026 GMT
Not After : Sep 24 15:00:17 2026 GMT
Subject: CN=ef065ff7b685a47985159ea9abf1c0d3c00116c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:b6:30:d7:9c:92:b2:3d:a4:d7:90:53:bf:
79:13:07:39:7c:2e:02:ec:53:ae:bc:97:3b:d8:18:
69:ba:1f:5a:c1:98:c8:08:92:c2:5d:36:fd:06:d4:
32:99:e8:06:9a:04:73:23:f1:6a:66:47:49:c7:5d:
1d:f3:7f:a2:c2:02:85:8f:d4:9d:dd:89:f6:2d:8b:
63:07:f9:56:fc:26:e4:41:0c:af:41:b4:77:f7:2f:
e8:d2:c5:cc:db:ef:1c:35:09:0d:37:1e:5a:7c:6a:
75:e6:ec:08:26:eb:02:2f:bf:e4:d7:9b:4d:b3:8a:
53:4e:2c:bd:9a:35:03:0c:73:82:a0:05:73:7b:f2:
3c:84:8d:fd:85:aa:84:22:84:d8:a8:6c:e4:cd:4a:
9c:f6:46:a5:10:92:59:c4:d4:fd:6b:ff:a2:b8:e7:
3e:44:b0:23:5b:60:ba:84:14:75:83:a5:13:02:97:
2d:cc:ea:e8:c7:9f:cc:ab:4a:fc:8a:68:04:d3:99:
a9:2f:51:86:4f:df:3b:5e:b8:ce:e6:1f:1f:21:62:
54:0a:6f:37:ed:13:73:19:b4:67:6f:25:36:60:2a:
46:ed:5a:64:84:54:83:c7:b8:84:13:a8:0b:a9:46:
2c:dc:77:8c:08:fc:cf:c0:49:23:a1:fe:b5:36:0e:
1f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:06:5F:F7:B6:85:A4:79:85:15:9E:A9:AB:F1:C0:D3:C0:01:16:C5
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:83:96:fe:59:19:9c:cd:be:10:2c:fb:38:63:a4:48:65:0c:
f1:46:8f:68:c6:65:8f:0c:87:97:07:e4:4c:ea:a6:44:c8:3e:
32:2c:9a:21:b1:e4:e7:97:39:62:30:93:6b:e7:c0:6e:31:d4:
ed:e9:70:63:3f:f6:06:90:73:22:33:45:bf:d3:3e:86:f1:0d:
90:d4:c4:f9:98:36:f8:2d:e1:69:0e:b3:e9:df:df:a9:60:38:
7e:e3:af:67:02:0b:4a:7d:da:89:ef:27:6e:38:cb:f1:d5:84:
fb:77:ae:b6:57:34:d4:44:5c:cd:66:a2:58:2f:f1:81:66:82:
a2:bd:7e:32:1c:d1:5a:9a:20:e6:c4:29:4b:77:b7:b0:57:8f:
89:31:11:94:65:68:23:07:90:3c:8b:3b:75:89:88:7c:9e:f9:
76:d3:6c:7c:e6:b8:96:f2:7e:cd:8b:a2:fe:8f:66:36:3c:79:
57:02:e4:59:ee:be:cc:bb:a4:cf:cd:3c:a9:ce:9d:24:e6:4a:
dd:56:c6:b7:9f:3b:2b:df:bc:37:40:16:7a:e0:82:3b:66:be:
a1:2d:b3:94:9e:03:73:f8:1e:28:10:3e:16:6b:fd:ad:f7:6e:
c4:61:f9:1b:40:07:3d:26:d7:ea:b0:37:28:98:2f:5b:4e:88:
26:52:78:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyCNaxONNE2SOEdy4HRMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZWYxMjkwY2YzOGI0ZjZlMDE4M2U3ZTRiZjg3YWM2N2Ex
MmQ3YWIwHhcNMjYwOTIzMTUwMDE3WhcNMjYwOTI0MTUwMDE3WjAzMTEwLwYDVQQD
EyhlZjA2NWZmN2I2ODVhNDc5ODUxNTllYTlhYmYxYzBkM2MwMDExNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n+2MNeckrI9pNeQU795Ewc5fC4C
7FOuvJc72Bhpuh9awZjICJLCXTb9BtQymegGmgRzI/FqZkdJx10d83+iwgKFj9Sd
3Yn2LYtjB/lW/CbkQQyvQbR39y/o0sXM2+8cNQkNNx5afGp15uwIJusCL7/k15tN
s4pTTiy9mjUDDHOCoAVze/I8hI39haqEIoTYqGzkzUqc9kalEJJZxNT9a/+iuOc+
RLAjW2C6hBR1g6UTApctzOrox5/Mq0r8imgE05mpL1GGT987XrjO5h8fIWJUCm83
7RNzGbRnbyU2YCpG7VpkhFSDx7iEE6gLqUYs3HeMCPzPwEkjof61Ng4foQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8GX/e2haR5hRWeqavxwNPAARbFMB8GA1UdIwQY
MBaAFNjvEpDPOLT24Bg+fkv4esZ6EterMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMzA4ZjUtMjdlMy00Yzk0LWE0NmIt
NDhlNmYyNjBmYmE1LzEvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zMzA4ZjUtMjdlMy00Yzk0LWE0NmItNDhlNmYyNjBmYmE1
LzEvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4OW/lkZ
nM2+ECz7OGOkSGUM8UaPaMZljwyHlwfkTOqmRMg+MiyaIbHk55c5YjCTa+fAbjHU
7elwYz/2BpBzIjNFv9M+hvENkNTE+Zg2+C3haQ6z6d/fqWA4fuOvZwILSn3aie8n
bjjL8dWE+3eutlc01ERczWaiWC/xgWaCor1+MhzRWpog5sQpS3e3sFePiTERlGVo
IweQPIs7dYmIfJ75dtNsfOa4lvJ+zYui/o9mNjx5VwLkWe6+zLukz808qc6dJOZK
3VbGt587K9+8N0AWeuCCO2a+oS2zlJ4Dc/geKBA+Fmv9rfduxGH5G0AHPSbX6rA3
KJgvW06IJlJ4kQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:18:45 2026 by rpki-client