Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
File: 8oS7eVhYemBZneFztOhaDJSRoaQ.mft (raw, json)
Hash identifier: b/iACryxpmLm6XsxIMdqgANOsdwjL1JTFSgy5jG9dGA=
Subject key identifier: 39:17:F1:F5:50:EE:07:70:4B:8C:9C:DE:7B:63:CC:D4:EC:F6:A1:EC
Authority key identifier: F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
Certificate issuer: /CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Certificate serial: 01A119755124F5A2D3A529204F147CB16C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
Manifest number: 010B
Signing time: Thu 08 Oct 2026 03:01:21 +0000
Manifest this update: Thu 08 Oct 2026 03:01:21 +0000
Manifest next update: Fri 09 Oct 2026 03:01:21 +0000
Files and hashes: 1: 8oS7eVhYemBZneFztOhaDJSRoaQ.crl (hash: JQhd0HZGJV68uUBzlcYKVpPiniZzeLYGJYJ1Drs5xYs=)
2: IVY6iWcM0h4WNsuJ0C_dYZMPbEY.asa (hash: vJRxB/YA0VSs2+csKGJpplBLmMHFGaBIIWUMdGp+a7U=)
3: t3aKyQAZqp0JpNY9WkTBO5wmV88.roa (hash: 2JKrAMaSBOfAdSssyHnAfVhbKUiXcGPrBZgPHZSrc8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:75:51:24:f5:a2:d3:a5:29:20:4f:14:7c:b1:6c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Validity
Not Before: Oct 8 03:01:21 2026 GMT
Not After : Oct 9 03:01:21 2026 GMT
Subject: CN=3917f1f550ee07704b8c9cde7b63ccd4ecf6a1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:b8:b7:ea:6d:d0:be:27:fb:a3:b7:e6:4e:
e3:e8:43:e3:7d:3c:d8:7a:4f:81:4b:04:bb:50:e0:
d2:c6:95:b2:79:6d:24:73:21:3e:eb:1c:5c:18:a7:
b8:a6:d7:1d:a6:a1:08:db:49:2e:11:61:60:c4:50:
c5:4f:e3:94:f9:12:21:52:99:71:ab:21:1b:08:69:
19:49:6e:b9:75:d5:0e:e6:38:c0:bc:6a:76:03:94:
da:45:7c:d7:f0:14:4f:a8:58:1a:5a:15:c7:f3:2f:
be:4a:1c:78:e6:e3:0e:78:60:38:66:98:96:17:2f:
a2:5f:16:ed:0e:af:bb:fd:cd:88:ed:b6:04:be:cd:
e4:a9:f5:ba:d2:6c:02:48:f2:2d:e3:e7:b7:5f:b3:
67:e2:27:41:1d:9d:cd:2d:05:5f:b3:18:93:0e:b5:
c4:0f:1d:8f:5b:4a:62:59:cd:34:c3:96:c0:13:a1:
07:0c:e3:40:63:08:19:4e:af:0b:3a:2f:44:7f:8f:
14:80:23:c0:c5:ed:b6:1d:e4:2b:1e:20:9d:6a:69:
bd:8d:0f:4b:60:39:76:cb:4e:ba:77:04:ba:1a:9c:
f4:91:48:69:11:c3:95:8f:d7:d0:73:95:b2:ef:a9:
c5:df:22:91:1a:e0:22:1a:1b:f3:e5:42:3a:13:fd:
74:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:17:F1:F5:50:EE:07:70:4B:8C:9C:DE:7B:63:CC:D4:EC:F6:A1:EC
X509v3 Authority Key Identifier:
keyid:F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3a:64:58:f5:ad:d1:8d:7a:2d:fc:b1:7a:2c:bf:a9:a8:17:
5f:70:46:2d:c5:0a:89:fc:79:bb:9e:7b:90:13:36:a2:52:71:
04:f3:62:34:e5:80:45:c3:d8:0c:3f:c0:4f:9e:e0:87:c8:1c:
05:cf:b7:e0:28:6e:23:d3:c4:5c:93:b0:e7:c2:66:5a:57:eb:
44:15:3d:ca:38:3e:f5:66:64:15:e7:53:d0:f1:a1:ce:34:c3:
c7:56:bf:43:38:5d:26:ee:30:e7:04:b7:e5:7b:e2:06:5b:bd:
53:85:6a:12:15:0c:87:9d:99:f4:d9:59:24:46:e6:fa:dd:9b:
a1:55:b7:b4:36:c1:5a:90:b0:92:b0:e7:74:af:83:fa:46:c6:
a2:98:89:a9:00:f9:02:3c:4b:3e:f7:e6:ed:79:67:19:74:23:
c9:4f:11:76:40:0e:81:f8:0c:7d:94:43:ff:49:e2:3e:f1:4b:
40:3e:86:81:2d:b1:11:85:cb:af:fd:a1:11:2b:5a:a6:67:4c:
3c:7e:cc:39:5f:de:86:3e:f0:92:f3:dd:39:34:ac:85:5f:b0:
b7:b2:78:38:7d:80:04:6a:82:9c:9d:80:a9:6e:fb:9f:ba:93:
1c:0f:b0:4b:49:20:8b:8b:b4:cd:ea:e9:f7:25:f9:89:0d:fa:
6b:90:1d:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZdVEk9aLTpSkgTxR8sWwaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyODRiYjc5NTg1ODdhNjA1OTlkZTE3M2I0ZTg1YTBjOTQ5
MWExYTQwHhcNMjYxMDA4MDMwMTIxWhcNMjYxMDA5MDMwMTIxWjAzMTEwLwYDVQQD
EygzOTE3ZjFmNTUwZWUwNzcwNGI4YzljZGU3YjYzY2NkNGVjZjZhMWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOy4t+pt0L4n+6O35k7j6EPjfTzY
ek+BSwS7UODSxpWyeW0kcyE+6xxcGKe4ptcdpqEI20kuEWFgxFDFT+OU+RIhUplx
qyEbCGkZSW65ddUO5jjAvGp2A5TaRXzX8BRPqFgaWhXH8y++Shx45uMOeGA4ZpiW
Fy+iXxbtDq+7/c2I7bYEvs3kqfW60mwCSPIt4+e3X7Nn4idBHZ3NLQVfsxiTDrXE
Dx2PW0piWc00w5bAE6EHDONAYwgZTq8LOi9Ef48UgCPAxe22HeQrHiCdamm9jQ9L
YDl2y066dwS6Gpz0kUhpEcOVj9fQc5Wy76nF3yKRGuAiGhvz5UI6E/10OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkX8fVQ7gdwS4yc3ntjzNTs9qHsMB8GA1UdIwQY
MBaAFPKEu3lYWHpgWZ3hc7ToWgyUkaGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG9TN2VWaFllbUJabmVGenRPaGFESlNSb2FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yMjhlMTYtZjgwOC00NDcxLWE5ODQt
MzY0ZWUyODU5ZjJjLzEvOG9TN2VWaFllbUJabmVGenRPaGFESlNSb2FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yMjhlMTYtZjgwOC00NDcxLWE5ODQtMzY0ZWUyODU5ZjJj
LzEvOG9TN2VWaFllbUJabmVGenRPaGFESlNSb2FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazpkWPWt
0Y16Lfyxeiy/qagXX3BGLcUKifx5u557kBM2olJxBPNiNOWARcPYDD/AT57gh8gc
Bc+34ChuI9PEXJOw58JmWlfrRBU9yjg+9WZkFedT0PGhzjTDx1a/QzhdJu4w5wS3
5XviBlu9U4VqEhUMh52Z9NlZJEbm+t2boVW3tDbBWpCwkrDndK+D+kbGopiJqQD5
AjxLPvfm7XlnGXQjyU8RdkAOgfgMfZRD/0niPvFLQD6GgS2xEYXLr/2hEStapmdM
PH7MOV/ehj7wkvPdOTSshV+wt7J4OH2ABGqCnJ2AqW77n7qTHA+wS0kgi4u0zerp
9yX5iQ36a5AdXA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 12:23:58 2026 by rpki-client