Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier: vmRH1pH392UFvAltoWRMTGwQBcX9/sy9+q6qB2um9Sk=
Subject key identifier: D3:5E:CE:39:8A:82:79:A8:CF:15:52:10:48:8A:0F:E1:51:A9:BF:EF
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial: 01A0D872B739B58C9A0DFDBCA75559B721A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number: 0E33
Signing time: Fri 25 Sep 2026 12:03:11 +0000
Manifest this update: Fri 25 Sep 2026 12:03:11 +0000
Manifest next update: Sat 26 Sep 2026 12:03:11 +0000
Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: A4HMe0EAWuwSlhD+C43TXHccl10pzHmFm/5wk7C7W5M=)
2: oDHRY2p4X6qIRWZRDGncYz0E4F0.roa (hash: DS/v77bYi2U6NujVd5gI6DZQbrS7LjtyuAFDzI6STCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:b7:39:b5:8c:9a:0d:fd:bc:a7:55:59:b7:21:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Validity
Not Before: Sep 25 12:03:11 2026 GMT
Not After : Sep 26 12:03:11 2026 GMT
Subject: CN=d35ece398a8279a8cf155210488a0fe151a9bfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:7d:1d:0d:5e:b6:d2:6a:8b:65:38:36:51:
d1:2d:f1:61:08:1e:23:c8:c9:d1:2f:51:03:82:36:
7f:1b:9e:7c:ad:f3:bb:05:d2:10:6c:7d:77:12:7b:
e3:98:e8:a7:2b:a2:84:88:fc:b4:31:b2:36:a2:f8:
58:18:c0:37:79:24:d5:e4:a3:8a:5a:3e:fa:e1:23:
94:2e:2e:df:65:fc:7c:ee:95:83:6c:cc:f7:4b:ae:
3f:d4:c4:47:2f:71:71:74:2a:ad:3a:49:0a:ff:35:
26:8b:dd:09:cf:a0:f0:0b:ab:72:c6:85:76:5a:bf:
fa:67:f1:cc:01:58:60:b4:d9:f5:d1:df:b7:1c:ef:
34:e3:d2:98:5e:32:0f:ac:2f:d1:3d:48:32:d9:bc:
ad:e2:94:94:cf:af:26:54:b1:4d:c7:9d:97:25:56:
8a:ef:24:67:0a:95:cf:c0:27:6b:92:09:9f:a6:80:
07:ed:29:c3:92:28:6f:9f:14:2d:e1:3c:2a:f7:37:
84:30:2b:cd:78:50:5e:d5:3a:aa:85:f5:37:04:f1:
8d:5b:89:c0:2c:53:cc:b8:20:04:87:b0:a6:ba:cd:
e4:b6:52:45:40:12:70:b7:9e:0e:ad:5e:ab:9f:37:
9f:7d:c8:97:8a:f7:8e:9f:1a:fd:e3:bb:5d:9a:68:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5E:CE:39:8A:82:79:A8:CF:15:52:10:48:8A:0F:E1:51:A9:BF:EF
X509v3 Authority Key Identifier:
keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:94:5e:03:92:5f:d6:52:50:e0:94:32:1f:f0:d0:9b:90:06:
04:0c:13:80:43:52:51:87:fc:15:a4:5f:80:6c:32:bb:e5:84:
0b:a5:0d:4f:8d:7b:91:a0:39:1a:da:8f:04:43:9d:15:cb:21:
1f:63:99:1b:1b:82:52:59:19:1f:6c:eb:90:a3:77:19:99:8d:
31:bf:08:34:15:c6:8f:99:09:0d:c6:f7:9f:c0:9a:24:88:dc:
81:e8:00:9e:ad:44:6a:84:91:22:df:39:9b:08:0f:2e:2c:ab:
fd:69:02:79:df:4c:cc:b4:14:be:b6:6f:7b:18:12:6e:7f:47:
a1:c9:f0:40:79:74:73:63:54:e6:e5:80:ef:2c:88:57:0c:a5:
dd:35:21:c1:cd:82:23:b7:7f:c0:e8:71:93:b3:d7:73:41:97:
f3:9e:cd:72:a6:6e:70:9a:10:56:32:65:41:00:89:f5:99:69:
02:49:c3:0c:23:d3:e9:22:1a:f8:a8:3b:22:9a:b4:d8:63:a0:
0e:79:b4:66:bb:83:de:47:5f:6a:96:3e:ae:9e:22:36:f8:25:
0a:5f:f3:9c:a4:a8:82:a4:11:68:37:34:aa:6e:6d:95:87:c7:
92:c3:5f:54:55:35:df:9c:5e:f8:a7:54:5d:90:43:3f:06:29:
18:f3:49:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcrc5tYyaDf28p1VZtyGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2E5MTM3NzRkYmM5ZTYwNWRjMTdhYjIzYTA1YTE2ODAz
OThkZTUwHhcNMjYwOTI1MTIwMzExWhcNMjYwOTI2MTIwMzExWjAzMTEwLwYDVQQD
EyhkMzVlY2UzOThhODI3OWE4Y2YxNTUyMTA0ODhhMGZlMTUxYTliZmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudJ9HQ1ettJqi2U4NlHRLfFhCB4j
yMnRL1EDgjZ/G558rfO7BdIQbH13EnvjmOinK6KEiPy0MbI2ovhYGMA3eSTV5KOK
Wj764SOULi7fZfx87pWDbMz3S64/1MRHL3FxdCqtOkkK/zUmi90Jz6DwC6tyxoV2
Wr/6Z/HMAVhgtNn10d+3HO8049KYXjIPrC/RPUgy2byt4pSUz68mVLFNx52XJVaK
7yRnCpXPwCdrkgmfpoAH7SnDkihvnxQt4Twq9zeEMCvNeFBe1TqqhfU3BPGNW4nA
LFPMuCAEh7Cmus3ktlJFQBJwt54OrV6rnzeffciXiveOnxr947tdmmhPKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNezjmKgnmozxVSEEiKD+FRqb/vMB8GA1UdIwQY
MBaAFPA6kTd028nmBdwXqyOgWhaAOY3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mODI0MjYtN2ViMC00NzY1LThkZTkt
ZTAwNjMyNjllNDY5LzEvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mODI0MjYtN2ViMC00NzY1LThkZTktZTAwNjMyNjllNDY5
LzEvOERxUk4zVGJ5ZVlGM0Jlckk2QmFGb0E1amVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZReA5Jf
1lJQ4JQyH/DQm5AGBAwTgENSUYf8FaRfgGwyu+WEC6UNT417kaA5GtqPBEOdFcsh
H2OZGxuCUlkZH2zrkKN3GZmNMb8INBXGj5kJDcb3n8CaJIjcgegAnq1EaoSRIt85
mwgPLiyr/WkCed9MzLQUvrZvexgSbn9HocnwQHl0c2NU5uWA7yyIVwyl3TUhwc2C
I7d/wOhxk7PXc0GX857NcqZucJoQVjJlQQCJ9ZlpAknDDCPT6SIa+Kg7Ipq02GOg
Dnm0ZruD3kdfapY+rp4iNvglCl/znKSogqQRaDc0qm5tlYfHksNfVFU135xe+KdU
XZBDPwYpGPNJ6A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:15:28 2026 by rpki-client