
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
File: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json)
Hash identifier: 1+uuighyCzmyxL8wRx+9yMiLo/AMEf0cCKXdQpn5Vqc=
Subject key identifier: AC:CC:8D:0B:7A:B6:68:78:AA:CB:11:41:EA:80:59:69:D3:22:1E:4F
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial: 01A0D2DF029B41AD23030DAE8E469A2DADE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
Manifest number: 0C12
Signing time: Thu 24 Sep 2026 10:03:45 +0000
Manifest this update: Thu 24 Sep 2026 10:03:45 +0000
Manifest next update: Fri 25 Sep 2026 10:03:45 +0000
Files and hashes: 1: 7Nyjbqbs9N9Zh41DGSBoETJC5r0.roa (hash: mi+2zduefLUt/QSaBO9zYe4aEoiLRvtVBwAZPWRpVqo=)
2: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: Le4e63bO8wZa+Qql+uzV32Lc2v+y3Du1I6WCyHjnlEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:df:02:9b:41:ad:23:03:0d:ae:8e:46:9a:2d:ad:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Validity
Not Before: Sep 24 10:03:45 2026 GMT
Not After : Sep 25 10:03:45 2026 GMT
Subject: CN=accc8d0b7ab66878aacb1141ea805969d3221e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:71:ea:31:f8:1b:c2:8b:38:c9:99:65:58:21:
ca:5b:5d:88:5a:b4:94:7d:cd:90:ee:b1:c8:06:38:
92:e0:be:6e:cf:88:bb:85:3c:67:43:56:52:66:b6:
7f:63:87:c9:d5:d8:67:ab:6b:9c:d4:11:8b:9e:65:
a9:5f:67:80:c8:38:37:7b:90:99:47:b6:44:cd:37:
3a:ec:88:07:5d:c3:ec:2f:b3:0d:c3:45:de:95:73:
5d:98:ff:91:c8:a4:28:9f:33:f3:0a:57:fe:cd:2c:
9e:da:23:6f:bd:19:22:74:d4:8b:f3:10:89:59:ca:
18:7d:00:58:29:32:68:a0:5f:1a:1c:d2:62:90:42:
fd:f6:26:d2:f8:38:34:79:e3:dd:a4:09:5a:45:66:
84:56:0a:69:a7:fb:50:fd:97:ca:ff:4b:9b:6d:8c:
55:ca:a0:b1:e1:82:23:31:a2:02:e6:10:7c:1c:13:
e1:d6:1a:a3:46:f8:4b:e0:f3:6a:6e:1f:20:af:35:
59:8b:4e:d0:5f:1a:d5:6d:aa:3f:27:66:63:99:0e:
b6:81:1b:53:b9:86:ae:dd:73:07:d6:b3:37:81:8f:
61:8d:68:88:d5:4a:08:4f:04:ed:2f:f4:9d:2a:5b:
7b:f9:c4:27:77:55:1c:a3:3c:7c:25:e7:f8:9f:28:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CC:8D:0B:7A:B6:68:78:AA:CB:11:41:EA:80:59:69:D3:22:1E:4F
X509v3 Authority Key Identifier:
keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f4:b2:62:e4:c5:58:08:b0:78:50:f3:c6:55:7a:c8:6f:b7:
ab:3c:37:34:ba:4d:21:39:2b:88:38:a3:83:d8:e9:aa:3c:2b:
26:d4:37:5b:f4:0f:61:62:25:a9:4e:ec:0f:13:16:d4:9c:5b:
73:ab:c8:f3:59:83:5f:37:a1:1d:9f:0b:cd:45:a5:58:d6:07:
71:fc:22:50:70:05:08:4e:87:cb:23:af:0d:5a:ed:3d:0b:ce:
af:b8:10:a3:3e:84:1c:9d:da:0a:aa:9e:59:f3:ab:af:2d:a5:
13:57:7b:d8:01:1d:f9:ae:03:69:e6:fe:6b:15:48:2e:62:2f:
99:16:52:44:7f:7f:e7:13:5b:d1:00:b3:97:14:b1:f4:ff:84:
68:46:f4:55:bf:24:4c:13:a8:54:ab:cc:a3:ee:df:dc:b9:de:
c0:1d:00:5a:a9:c6:cf:6f:b3:1e:17:aa:0e:ad:74:b2:cd:20:
aa:92:c8:7f:5d:46:00:b9:b4:27:55:49:2a:0d:0a:95:af:6c:
00:ed:39:91:6f:1a:b1:88:5b:63:73:d0:b0:a0:a7:68:c3:3d:
f8:7d:f2:54:cd:a6:a2:9f:7b:a0:e8:21:4c:23:2d:ae:de:51:
29:ad:c6:74:96:2b:7e:3a:b0:53:09:31:ae:02:81:de:9c:0d:
5a:a2:d8:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3wKbQa0jAw2ujkaaLa3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzA3NDc5Zjk5MWI1MDQzYjdkMzdmN2Y4ZmQ5MDQ2NmEy
YWJmMjcwHhcNMjYwOTI0MTAwMzQ1WhcNMjYwOTI1MTAwMzQ1WjAzMTEwLwYDVQQD
EyhhY2NjOGQwYjdhYjY2ODc4YWFjYjExNDFlYTgwNTk2OWQzMjIxZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53HqMfgbwos4yZllWCHKW12IWrSU
fc2Q7rHIBjiS4L5uz4i7hTxnQ1ZSZrZ/Y4fJ1dhnq2uc1BGLnmWpX2eAyDg3e5CZ
R7ZEzTc67IgHXcPsL7MNw0XelXNdmP+RyKQonzPzClf+zSye2iNvvRkidNSL8xCJ
WcoYfQBYKTJooF8aHNJikEL99ibS+Dg0eePdpAlaRWaEVgppp/tQ/ZfK/0ubbYxV
yqCx4YIjMaIC5hB8HBPh1hqjRvhL4PNqbh8grzVZi07QXxrVbao/J2ZjmQ62gRtT
uYau3XMH1rM3gY9hjWiI1UoITwTtL/SdKlt7+cQnd1Ucozx8Jef4nyiMrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzMjQt6tmh4qssRQeqAWWnTIh5PMB8GA1UdIwQY
MBaAFPEwdHn5kbUEO3039/j9kEZqKr8nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81NGQ0NDUtYTMwNy00OTg3LThiNjgt
YjZhYTBiODkyMGU1LzEvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy81NGQ0NDUtYTMwNy00OTg3LThiNjgtYjZhYTBiODkyMGU1
LzEvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/SyYuTF
WAiweFDzxlV6yG+3qzw3NLpNITkriDijg9jpqjwrJtQ3W/QPYWIlqU7sDxMW1Jxb
c6vI81mDXzehHZ8LzUWlWNYHcfwiUHAFCE6HyyOvDVrtPQvOr7gQoz6EHJ3aCqqe
WfOrry2lE1d72AEd+a4Daeb+axVILmIvmRZSRH9/5xNb0QCzlxSx9P+EaEb0Vb8k
TBOoVKvMo+7f3LnewB0AWqnGz2+zHheqDq10ss0gqpLIf11GALm0J1VJKg0Kla9s
AO05kW8asYhbY3PQsKCnaMM9+H3yVM2mop97oOghTCMtrt5RKa3GdJYrfjqwUwkx
rgKB3pwNWqLYjA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:41:17 2026 by rpki-client