Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: 3dLbllYt6mtErpKcSF5yA8vZmUVMEG2piKWc6dsqs6k=
Subject key identifier: 95:AC:A3:D1:6B:F3:97:A4:33:C5:11:DE:67:4C:19:48:B5:32:27:C2
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 01A0CEFFDEE81E7CC1548B6AD7C30C1D93E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 0A80
Signing time: Wed 23 Sep 2026 16:01:10 +0000
Manifest this update: Wed 23 Sep 2026 16:01:10 +0000
Manifest next update: Thu 24 Sep 2026 16:01:10 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: KPC0TEhhiMDX3tgRSXYXfAgG6JThdGO7sGxbsvZkSyg=)
2: il7H5XRLlPOMcGmUaTO99BZFn2I.roa (hash: Df3NCzCkDFx+xfWB8WmONNlOHJhDormcIJSvLVXSXWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:de:e8:1e:7c:c1:54:8b:6a:d7:c3:0c:1d:93:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: Sep 23 16:01:10 2026 GMT
Not After : Sep 24 16:01:10 2026 GMT
Subject: CN=95aca3d16bf397a433c511de674c1948b53227c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:20:d0:8a:3d:c8:4c:f5:26:eb:d3:8d:97:82:
e8:e9:69:5e:ec:7b:84:7d:a5:76:3d:d7:9d:b9:f2:
75:79:96:dd:18:37:11:d3:13:7a:27:e7:fb:32:69:
e7:3f:f6:0c:bd:f9:47:60:48:16:6b:ba:d5:b4:bd:
a4:df:4c:12:e6:ee:65:2f:22:30:38:50:a8:9b:ac:
71:2f:77:c4:73:fe:65:a3:8d:de:b8:97:4c:3d:b9:
ea:52:bd:24:02:3e:0f:f4:42:a1:ce:25:f7:a0:d7:
cd:65:f5:af:80:33:91:5f:21:d3:52:c6:0e:76:39:
27:74:49:fd:52:68:2d:b7:b5:65:94:80:21:7d:aa:
36:a2:e3:81:ed:31:48:97:d1:3f:83:25:96:25:65:
a1:de:17:6c:94:1f:6f:a1:c5:93:47:dc:0b:d1:4a:
a5:51:42:6b:6c:08:e3:d8:a4:88:71:3d:36:b6:e6:
bd:d4:b7:ca:62:71:2e:25:ae:05:36:f2:0a:44:eb:
4b:35:0a:70:38:d3:2a:d1:54:26:3d:5b:ea:b1:ba:
cf:5a:fd:4d:b0:da:f8:2c:7f:96:79:01:a4:ef:4b:
d0:3b:28:e1:ce:48:de:9b:00:b3:9d:61:ff:1f:2d:
2d:45:1f:f7:14:05:f7:f7:3d:4c:a2:59:ec:39:d4:
df:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:A3:D1:6B:F3:97:A4:33:C5:11:DE:67:4C:19:48:B5:32:27:C2
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:12:72:53:34:53:b1:9c:af:b2:db:f7:25:05:cc:d4:9d:01:
b6:e3:3b:bc:6d:9f:65:90:fe:89:6f:a9:e8:95:81:63:59:4f:
64:92:3f:2a:9d:a9:63:35:97:e7:7e:60:42:65:60:2c:05:2e:
82:e4:8c:52:3b:07:9f:1f:f6:11:53:16:fa:17:62:c4:1c:0b:
ed:4d:07:dc:d2:cd:ed:ca:17:a2:62:83:44:9d:d7:98:94:10:
80:73:9d:8a:8a:db:61:ad:32:b2:47:cf:c9:91:7e:40:13:1a:
ae:67:35:26:e8:1f:c2:b6:02:97:1a:09:e1:4d:10:64:f9:39:
12:ab:dc:90:a1:73:6b:f4:3c:b5:2f:17:b8:df:18:81:3e:44:
d1:12:03:6b:ba:ff:86:c2:0a:95:e9:d5:73:3a:bd:6c:38:9f:
45:e9:09:b0:d9:9f:4a:5c:6b:bf:96:1f:8e:f6:92:7b:c0:75:
fd:9b:f7:40:2b:56:f4:e8:b6:71:e9:75:29:42:6a:b7:36:bd:
3f:7e:dd:da:1b:c3:39:49:fd:17:78:26:ce:16:46:c6:e2:95:
b5:d6:7c:bf:a6:46:7c:15:60:23:7d:e4:88:d0:7f:8f:88:73:
e4:b4:0e:c6:f0:f6:26:5f:a4:1c:db:49:ff:60:38:41:a2:54:
27:87:70:f4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDO/97oHnzBVItq18MMHZPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YjE2ODY4ZjMyMmFiNjc5YWVjNzMzNzAyYmYwNjhlOTYz
N2ZjNGYwHhcNMjYwOTIzMTYwMTEwWhcNMjYwOTI0MTYwMTEwWjAzMTEwLwYDVQQD
Eyg5NWFjYTNkMTZiZjM5N2E0MzNjNTExZGU2NzRjMTk0OGI1MzIyN2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CDQij3ITPUm69ONl4Lo6Wle7HuE
faV2PdedufJ1eZbdGDcR0xN6J+f7MmnnP/YMvflHYEgWa7rVtL2k30wS5u5lLyIw
OFCom6xxL3fEc/5lo43euJdMPbnqUr0kAj4P9EKhziX3oNfNZfWvgDORXyHTUsYO
djkndEn9Umgtt7VllIAhfao2ouOB7TFIl9E/gyWWJWWh3hdslB9vocWTR9wL0Uql
UUJrbAjj2KSIcT02tua91LfKYnEuJa4FNvIKROtLNQpwONMq0VQmPVvqsbrPWv1N
sNr4LH+WeQGk70vQOyjhzkjemwCznWH/Hy0tRR/3FAX39z1MolnsOdTftwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJWso9Fr85ekM8UR3mdMGUi1MifCMB8GA1UdIwQY
MBaAFPmxaGjzIqtnmuxzNwK/Bo6WN/xPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1iRm9hUE1pcTJlYTdITTNBcjhHanBZM19FOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvOGI1Zjg4LTMwNzEtNGE0NC05ZjBj
LTI0MmEyOTQ1OTRlMC8xLzEtYkZvYVBNaXEyZWE3SE0zQXI4R2pwWTNfRTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0LzhiNWY4OC0zMDcxLTRhNDQtOWYwYy0yNDJhMjk0NTk0
ZTAvMS8xLWJGb2FQTWlxMmVhN0hNM0FyOEdqcFkzX0U4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhJy
UzRTsZyvstv3JQXM1J0BtuM7vG2fZZD+iW+p6JWBY1lPZJI/Kp2pYzWX535gQmVg
LAUuguSMUjsHnx/2EVMW+hdixBwL7U0H3NLN7coXomKDRJ3XmJQQgHOdiorbYa0y
skfPyZF+QBMarmc1JugfwrYClxoJ4U0QZPk5EqvckKFza/Q8tS8XuN8YgT5E0RID
a7r/hsIKlenVczq9bDifRekJsNmfSlxrv5YfjvaSe8B1/Zv3QCtW9Oi2cel1KUJq
tza9P37d2hvDOUn9F3gmzhZGxuKVtdZ8v6ZGfBVgI33kiNB/j4hz5LQOxvD2Jl+k
HNtJ/2A4QaJUJ4dw9A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:57:25 2026 by rpki-client