Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: mCfyCFv1qvhpeeZxmE62nk84O6RV61hIj4UkSaRnKqs=
Subject key identifier: 6C:70:DD:27:68:56:67:3C:B9:A1:34:91:62:2A:1E:34:9E:C3:4F:16
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 01A0D2375F96F5C6139C346FE39175056C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0EEC
Signing time: Thu 24 Sep 2026 07:00:39 +0000
Manifest this update: Thu 24 Sep 2026 07:00:39 +0000
Manifest next update: Fri 25 Sep 2026 07:00:39 +0000
Files and hashes: 1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: PXSJQTXU1iBQpz2eSNDDJMexLcEQlNKkh1+JocBEUSE=)
2: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (hash: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:5f:96:f5:c6:13:9c:34:6f:e3:91:75:05:6c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Sep 24 07:00:39 2026 GMT
Not After : Sep 25 07:00:39 2026 GMT
Subject: CN=6c70dd276856673cb9a13491622a1e349ec34f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f1:e3:2d:79:17:6f:67:33:15:de:4a:45:c9:
44:41:3d:60:a4:5a:fa:f2:3e:6a:3f:4a:6e:bb:ac:
fb:e3:b1:f2:5b:be:fe:d4:b0:88:f5:7d:9a:c3:f1:
5b:ea:e3:3c:71:31:65:47:31:94:ef:f3:74:89:5e:
61:fd:61:bc:55:4d:c1:fc:0b:35:ed:a4:f1:8e:7b:
5a:6a:56:f6:e2:7e:a2:95:91:f7:6d:49:03:51:90:
fb:39:01:70:5e:13:e2:42:8a:03:ce:09:81:b6:57:
69:bb:05:07:85:e3:97:31:7f:03:6a:44:53:da:7e:
dd:0c:b0:c3:29:9f:61:e7:5b:ae:7e:3a:eb:14:71:
6d:4e:45:8e:31:1a:4a:00:ef:39:17:ef:60:6f:b3:
ac:f3:ae:d0:d5:e4:43:37:99:37:3c:73:17:96:f9:
30:1f:df:3e:87:ef:03:8f:67:e7:58:bc:76:c5:ca:
ec:5b:30:d2:b5:2b:fd:f2:03:c2:1c:76:8e:2c:d2:
b3:92:81:04:ed:d6:41:3d:37:03:f5:84:08:c6:6f:
5b:7e:f6:60:7f:c7:a3:02:d0:ed:54:20:52:5d:b2:
6c:82:27:43:d2:1e:7d:3d:8f:34:3c:93:f0:b1:01:
8d:9c:ba:84:13:46:c2:65:9a:8a:d8:50:39:65:83:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:70:DD:27:68:56:67:3C:B9:A1:34:91:62:2A:1E:34:9E:C3:4F:16
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:99:eb:5e:2e:77:66:8e:a3:5a:45:bf:20:c6:e3:f6:76:9b:
c2:8a:01:5d:cb:8c:31:bd:2b:99:da:1d:af:cc:f6:23:7c:ff:
dc:14:5e:17:48:31:5e:b8:0f:92:16:c5:a8:a5:2f:a0:3f:9d:
5e:15:19:33:fc:4f:d8:72:f5:cb:bc:49:46:8c:33:d7:5c:70:
10:d2:18:ee:0d:cc:15:7a:8e:87:1c:cb:b5:43:3d:2b:81:64:
e0:cc:ef:fe:12:13:bb:d7:f4:51:38:85:d2:0a:aa:6b:7a:54:
c1:b0:91:1a:a0:9f:c3:3a:0e:71:21:e4:3f:bc:17:cf:33:19:
12:cd:d8:07:4f:f8:95:35:cf:12:d2:45:04:27:64:e7:38:29:
11:83:66:88:ab:78:d2:e9:92:b8:7e:91:1e:b7:71:a0:a2:c7:
c2:af:e6:9b:44:72:21:3e:17:4e:8d:5f:0e:72:82:2b:c8:8b:
52:4a:14:40:0f:12:29:4a:ac:6a:39:f4:99:14:da:4b:fe:de:
43:24:47:4a:4a:cb:68:7c:e7:3b:ef:14:48:03:d1:cc:11:51:
a7:fe:28:a2:9b:6e:80:1b:d7:9f:ed:31:5a:dc:88:0d:90:08:
58:c5:8b:ed:c0:11:65:5d:2a:7f:91:e9:99:7c:6e:2e:96:86:
6b:33:43:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSN1+W9cYTnDRv45F1BWxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZGE2NzEzNWI3MzdjYTlkMmRmZDdiOTdmZTU5NzhiOGYz
MDBkNmIwHhcNMjYwOTI0MDcwMDM5WhcNMjYwOTI1MDcwMDM5WjAzMTEwLwYDVQQD
Eyg2YzcwZGQyNzY4NTY2NzNjYjlhMTM0OTE2MjJhMWUzNDllYzM0ZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/HjLXkXb2czFd5KRclEQT1gpFr6
8j5qP0puu6z747HyW77+1LCI9X2aw/Fb6uM8cTFlRzGU7/N0iV5h/WG8VU3B/As1
7aTxjntaalb24n6ilZH3bUkDUZD7OQFwXhPiQooDzgmBtldpuwUHheOXMX8DakRT
2n7dDLDDKZ9h51uufjrrFHFtTkWOMRpKAO85F+9gb7Os867Q1eRDN5k3PHMXlvkw
H98+h+8Dj2fnWLx2xcrsWzDStSv98gPCHHaOLNKzkoEE7dZBPTcD9YQIxm9bfvZg
f8ejAtDtVCBSXbJsgidD0h59PY80PJPwsQGNnLqEE0bCZZqK2FA5ZYNwtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxw3SdoVmc8uaE0kWIqHjSew08WMB8GA1UdIwQY
MBaAFPHaZxNbc3yp0t/XuX/ll4uPMA1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEt
ZmMxMTJhZTYzZWE0LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEtZmMxMTJhZTYzZWE0
LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZnrXi53
Zo6jWkW/IMbj9nabwooBXcuMMb0rmdodr8z2I3z/3BReF0gxXrgPkhbFqKUvoD+d
XhUZM/xP2HL1y7xJRowz11xwENIY7g3MFXqOhxzLtUM9K4Fk4Mzv/hITu9f0UTiF
0gqqa3pUwbCRGqCfwzoOcSHkP7wXzzMZEs3YB0/4lTXPEtJFBCdk5zgpEYNmiKt4
0umSuH6RHrdxoKLHwq/mm0RyIT4XTo1fDnKCK8iLUkoUQA8SKUqsajn0mRTaS/7e
QyRHSkrLaHznO+8USAPRzBFRp/4ooptugBvXn+0xWtyIDZAIWMWL7cARZV0qf5Hp
mXxuLpaGazNDvQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:29:03 2026 by rpki-client