Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: KyK7UFgHKDHTG+MAJXX4mfaWN/hfmoy7YP8/twF28+w=
Subject key identifier: 82:15:55:41:27:FE:4D:2E:B6:DA:8C:47:E9:B8:E5:27:86:AB:6E:60
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 01A0D5A72FC8B745898B61601AD36B40FDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 1959
Signing time: Thu 24 Sep 2026 23:01:38 +0000
Manifest this update: Thu 24 Sep 2026 23:01:38 +0000
Manifest next update: Fri 25 Sep 2026 23:01:38 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: ohbjmah+Eja/kdrKBuukDNt6qzYwhpjnwolB1DqPqUI=)
2: BmNLDCfpNhMuta2ovEkjhRgE3XE.roa (hash: 8pxnmm0DlGNm9U9Ei6IyeVDeTXCLFrg3l4BtLYG1QcE=)
3: yS5UEuhVvuTniTo0Rp3QBfAIY2w.roa (hash: EwvpzM71As4QzkpNR7WlLGyGWJ5qcNqZIHlrR3sWFGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:2f:c8:b7:45:89:8b:61:60:1a:d3:6b:40:fd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Sep 24 23:01:38 2026 GMT
Not After : Sep 25 23:01:38 2026 GMT
Subject: CN=8215554127fe4d2eb6da8c47e9b8e52786ab6e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:a2:b2:c3:37:d7:f5:95:a0:ce:9e:da:c2:
e0:5b:32:73:58:ab:78:c1:93:3c:06:19:a5:f9:99:
6a:35:32:34:e6:b8:f9:19:d2:68:95:55:13:ee:35:
cc:28:9c:db:c3:02:0c:a5:ff:41:21:5e:af:d2:82:
ba:63:cf:e5:55:7c:85:a8:bf:15:cc:4c:59:37:53:
9a:96:15:28:e8:c5:31:30:f0:c6:58:e9:5d:6a:fd:
01:b0:76:ec:03:04:37:61:8f:40:5d:7d:cd:13:77:
5a:b1:26:e7:15:4f:b1:ba:9d:36:98:a1:56:58:f3:
e1:ef:61:87:3f:4a:5f:4c:87:f4:a7:6a:47:06:dd:
a8:70:87:01:86:d1:19:0b:b7:6a:78:c7:ed:92:e3:
e1:ce:fe:04:8d:86:69:a1:91:6a:58:e3:7e:62:67:
88:d0:c1:ba:e9:d2:12:73:90:2e:a1:f4:f3:bc:b0:
85:da:02:be:b2:b6:d3:0c:46:a2:9c:ce:f1:9b:9c:
06:58:5b:5d:42:a1:b3:0c:28:9b:c2:d0:1b:cd:ac:
0e:4a:0e:10:96:d3:b5:ef:6d:26:cb:e6:88:b8:ce:
69:85:29:e9:83:11:68:d7:f2:d2:32:85:a0:71:e4:
b4:98:ec:58:75:b0:c0:c0:08:9b:70:50:79:7e:bc:
81:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:15:55:41:27:FE:4D:2E:B6:DA:8C:47:E9:B8:E5:27:86:AB:6E:60
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e3:51:90:8a:47:80:31:67:06:37:7e:58:76:88:37:a3:f1:
a8:8f:59:70:71:e5:64:d1:c8:cb:f5:45:59:f5:89:75:33:8f:
2b:47:8d:06:14:a0:69:72:c9:44:84:6c:c7:60:55:28:e6:84:
e2:41:d4:72:98:42:44:a3:58:a8:c6:9c:91:66:ef:40:5f:4f:
68:fd:ff:8c:e2:62:5a:00:41:6e:97:64:60:b5:71:fe:87:b1:
0a:7b:38:89:8b:b9:dd:8e:66:69:0f:40:81:3b:82:f9:cd:3f:
19:04:b8:62:8b:ac:4b:56:52:94:2d:cf:f4:06:ca:43:0e:e7:
ae:c5:14:e7:61:9e:92:81:72:c2:23:53:7f:85:7e:66:c5:91:
0e:6c:9f:e4:d3:7d:00:cd:e2:e8:6b:16:fa:5f:56:25:3e:06:
18:67:46:36:43:6d:da:7f:55:fe:3b:a7:98:93:d1:28:0d:b5:
88:b0:41:7e:2c:b1:72:53:6a:30:d7:ee:1e:4b:dc:fe:cc:77:
f2:de:ba:55:e2:14:d6:e0:9d:c3:f7:de:70:fb:f7:86:91:f2:
55:f1:59:98:83:15:0a:a6:15:a3:e6:3b:d3:81:60:98:3a:f0:
52:e1:f6:b1:6f:3e:a9:d8:ee:8e:06:46:bd:a0:bd:96:fb:e6:
9d:8e:98:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVpy/It0WJi2FgGtNrQP2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzQ5YzIxNzhlODJmZGMxZjQxOWY1YTdjNTE3MjFkZjUz
ZDdhNDgwHhcNMjYwOTI0MjMwMTM4WhcNMjYwOTI1MjMwMTM4WjAzMTEwLwYDVQQD
Eyg4MjE1NTU0MTI3ZmU0ZDJlYjZkYThjNDdlOWI4ZTUyNzg2YWI2ZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDSissM31/WVoM6e2sLgWzJzWKt4
wZM8Bhml+ZlqNTI05rj5GdJolVUT7jXMKJzbwwIMpf9BIV6v0oK6Y8/lVXyFqL8V
zExZN1OalhUo6MUxMPDGWOldav0BsHbsAwQ3YY9AXX3NE3dasSbnFU+xup02mKFW
WPPh72GHP0pfTIf0p2pHBt2ocIcBhtEZC7dqeMftkuPhzv4EjYZpoZFqWON+YmeI
0MG66dISc5AuofTzvLCF2gK+srbTDEainM7xm5wGWFtdQqGzDCibwtAbzawOSg4Q
ltO1720my+aIuM5phSnpgxFo1/LSMoWgceS0mOxYdbDAwAibcFB5fryB8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIVVUEn/k0uttqMR+m45SeGq25gMB8GA1UdIwQY
MBaAFPDEnCF46C/cH0GfWnxRch31PXpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1TY0lYam9MOXdmUVo5YWZGRnlIZlU5ZWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lMjJmZWEtODRkMC00MDZhLThhNmYt
NDZmNWZhMmM5MzAzLzEvOE1TY0lYam9MOXdmUVo5YWZGRnlIZlU5ZWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lMjJmZWEtODRkMC00MDZhLThhNmYtNDZmNWZhMmM5MzAz
LzEvOE1TY0lYam9MOXdmUVo5YWZGRnlIZlU5ZWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+NRkIpH
gDFnBjd+WHaIN6PxqI9ZcHHlZNHIy/VFWfWJdTOPK0eNBhSgaXLJRIRsx2BVKOaE
4kHUcphCRKNYqMackWbvQF9PaP3/jOJiWgBBbpdkYLVx/oexCns4iYu53Y5maQ9A
gTuC+c0/GQS4YousS1ZSlC3P9AbKQw7nrsUU52GekoFywiNTf4V+ZsWRDmyf5NN9
AM3i6GsW+l9WJT4GGGdGNkNt2n9V/junmJPRKA21iLBBfiyxclNqMNfuHkvc/sx3
8t66VeIU1uCdw/fecPv3hpHyVfFZmIMVCqYVo+Y704FgmDrwUuH2sW8+qdjujgZG
vaC9lvvmnY6YZQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:39:27 2026 by rpki-client