
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File: 8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier: +/j9MyAHv7Kclb+W0GsAlk/9NobdIGqUAPTaw/fy54k=
Subject key identifier: ED:67:20:5F:F7:20:5F:FD:8D:B0:F6:72:2A:35:EF:7E:90:A3:4F:B7
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial: 01A0C8FD97F2FB8BB4F90F44371CDA61BFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 12:00:57 +0000
Manifest this update: Tue 22 Sep 2026 12:00:57 +0000
Manifest next update: Wed 23 Sep 2026 12:00:57 +0000
Files and hashes: 1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: iy4aI1IDEVjv+nPDde/SwsQhpLyY5NOwUh0AWJ9uBcQ=)
2: RlwzmymQw4BKJ8E0igozFpwiNNo.roa (hash: UVpzzvY69LGOYgMZuAZgP3abVssHII4njzML7dW06y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:97:f2:fb:8b:b4:f9:0f:44:37:1c:da:61:bf:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Validity
Not Before: Sep 22 12:00:57 2026 GMT
Not After : Sep 23 12:00:57 2026 GMT
Subject: CN=ed67205ff7205ffd8db0f6722a35ef7e90a34fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:66:a4:d9:9a:f8:5b:fc:77:b5:b8:9e:2f:
63:a0:99:28:e9:d3:d7:f0:c0:a8:40:79:7b:92:f0:
3d:fc:3d:5c:b7:67:36:bd:4a:90:eb:57:43:81:45:
74:00:93:f2:95:c1:64:ac:85:8a:dc:ff:16:af:7d:
5b:24:63:3a:90:80:3b:2e:f6:ee:81:d2:5c:7c:0f:
88:64:05:6e:52:91:ee:41:fb:86:d7:a1:03:c8:12:
63:bb:f9:56:f1:aa:2e:b7:df:45:28:2d:17:e7:ee:
20:7e:b7:95:7a:3f:a2:16:45:8e:98:08:fa:bd:61:
f6:d9:d4:b5:61:8a:a7:9e:af:8a:a2:0f:1d:57:9d:
82:8d:81:e8:2e:63:c5:a1:bc:d6:b0:f4:9f:1a:b3:
39:ba:b1:b7:d5:2f:fb:42:8e:1c:af:00:4d:7c:c9:
e6:ff:49:6b:ec:f1:25:57:83:8f:e7:4a:3e:bc:56:
f6:ec:a6:a3:34:c9:bf:55:99:0d:0c:c9:43:a3:5e:
f9:0a:9a:02:15:85:a9:b5:89:af:6c:0b:42:af:21:
f3:b8:e5:88:8e:e1:ec:a5:40:cb:02:a7:84:dd:b3:
9b:40:66:d1:1a:fe:a4:6d:e6:b3:c5:af:48:c5:6e:
e4:92:f1:ca:43:7d:60:8a:ca:d8:30:66:d9:5e:dc:
b3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:67:20:5F:F7:20:5F:FD:8D:B0:F6:72:2A:35:EF:7E:90:A3:4F:B7
X509v3 Authority Key Identifier:
keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3c:18:af:12:5a:47:5b:cf:df:82:17:c3:5d:2e:e4:a5:fb:
3d:c4:26:c2:97:c4:b8:00:50:31:0c:e7:c9:25:23:a5:d6:f9:
e1:93:85:6d:09:11:2d:c3:91:6f:3f:0a:41:91:1f:d9:35:69:
16:83:13:9c:9b:42:8b:5d:97:5e:68:21:26:46:f1:4b:a4:c6:
3f:56:b9:37:f8:94:4b:68:0d:35:c2:e2:b1:d8:44:0c:57:0b:
8b:57:4b:e0:31:93:94:c9:42:e6:ca:64:a3:ce:2f:f7:b4:cc:
21:80:8c:89:dd:0b:49:ee:86:51:ba:86:b6:53:63:09:d2:8c:
af:a5:91:2d:ed:3a:e0:64:76:5a:4e:7f:e2:5a:7f:d7:96:15:
1a:e3:34:a8:c5:74:ed:49:95:e1:2c:8b:bb:b6:21:3a:5c:2f:
50:6e:b9:0e:cf:cb:19:a7:ce:2d:31:26:a5:f7:75:30:6b:2a:
4a:9c:99:45:54:40:a5:41:ad:88:39:95:a4:fc:68:f6:9d:ba:
d6:8f:f9:8c:94:5d:01:74:8c:67:80:d7:2c:a4:f6:8a:b6:0f:
bf:6b:1b:cd:0d:1a:02:76:ef:14:2a:3c:c4:2f:a8:8c:f8:e7:
8a:27:50:d9:a8:f5:10:bb:e4:26:14:f2:b2:34:ac:e6:a3:73:
6a:14:ac:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDI/Zfy+4u0+Q9ENxzaYb/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWVlYmU0MWQwNTE4Mjg0YWJhM2E0ZjVlNWRhMDVjZmFi
ZDZmNzYwHhcNMjYwOTIyMTIwMDU3WhcNMjYwOTIzMTIwMDU3WjAzMTEwLwYDVQQD
EyhlZDY3MjA1ZmY3MjA1ZmZkOGRiMGY2NzIyYTM1ZWY3ZTkwYTM0ZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms5mpNma+Fv8d7W4ni9joJko6dPX
8MCoQHl7kvA9/D1ct2c2vUqQ61dDgUV0AJPylcFkrIWK3P8Wr31bJGM6kIA7Lvbu
gdJcfA+IZAVuUpHuQfuG16EDyBJju/lW8aout99FKC0X5+4gfreVej+iFkWOmAj6
vWH22dS1YYqnnq+Kog8dV52CjYHoLmPFobzWsPSfGrM5urG31S/7Qo4crwBNfMnm
/0lr7PElV4OP50o+vFb27KajNMm/VZkNDMlDo175CpoCFYWptYmvbAtCryHzuOWI
juHspUDLAqeE3bObQGbRGv6kbeazxa9IxW7kkvHKQ31gisrYMGbZXtyzewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1nIF/3IF/9jbD2cio1736Qo0+3MB8GA1UdIwQY
MBaAFPKu6+QdBRgoSro6T15doFz6vW92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMt
YzBhZDc0Y2E1ZDliLzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMtYzBhZDc0Y2E1ZDli
LzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzwYrxJa
R1vP34IXw10u5KX7PcQmwpfEuABQMQznySUjpdb54ZOFbQkRLcORbz8KQZEf2TVp
FoMTnJtCi12XXmghJkbxS6TGP1a5N/iUS2gNNcLisdhEDFcLi1dL4DGTlMlC5spk
o84v97TMIYCMid0LSe6GUbqGtlNjCdKMr6WRLe064GR2Wk5/4lp/15YVGuM0qMV0
7UmV4SyLu7YhOlwvUG65Ds/LGafOLTEmpfd1MGsqSpyZRVRApUGtiDmVpPxo9p26
1o/5jJRdAXSMZ4DXLKT2irYPv2sbzQ0aAnbvFCo8xC+ojPjniidQ2aj1ELvkJhTy
sjSs5qNzahSs9g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:54:00 2026 by rpki-client