Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier: qisKcn3ame5i0edq3SVzQzZYI7kaUFG1+IBXbLaN2L4=
Subject key identifier: 4E:AB:6D:BF:AA:21:57:CC:7B:7E:1C:1E:FC:8F:61:F3:DB:46:91:38
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 01A119065A0F7D2028CE972BE874B3CFDCE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number: 1A24
Signing time: Thu 08 Oct 2026 01:00:08 +0000
Manifest this update: Thu 08 Oct 2026 01:00:08 +0000
Manifest next update: Fri 09 Oct 2026 01:00:08 +0000
Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: 8457pmhILzotXp4MOO4E1V+UU4WswBWOFtsO/7uhxbQ=)
2: QKTIYLK1WrJ4lEHTpt0XBIkbbcY.roa (hash: Aq9b63DbV2PHKSgFXgnbBX80EJsS6u4ad6/+U2GDTlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 01:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:06:5a:0f:7d:20:28:ce:97:2b:e8:74:b3:cf:dc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: Oct 8 01:00:08 2026 GMT
Not After : Oct 9 01:00:08 2026 GMT
Subject: CN=4eab6dbfaa2157cc7b7e1c1efc8f61f3db469138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:0e:d8:52:ff:c9:7b:98:3c:d8:77:d0:66:
ef:d8:f9:e6:26:40:06:c3:5a:61:50:77:08:04:ee:
27:19:68:74:07:b6:7d:99:43:2e:87:60:6b:1a:bb:
e4:cd:0e:e4:4d:c8:28:aa:9c:5f:8d:74:20:57:91:
f1:13:eb:c9:fd:55:8e:47:34:18:47:ff:00:a7:41:
a5:14:ce:ab:23:61:f4:78:95:eb:66:42:06:7f:fe:
12:81:fe:80:71:d3:3c:95:de:4e:5f:fe:aa:f6:65:
40:ba:66:7b:f6:80:dc:35:57:5a:d9:c5:0e:f0:6b:
e6:ad:9b:fc:07:b8:a1:74:38:98:f7:09:cc:c2:f4:
a6:94:30:a4:7a:32:8a:dc:f6:f5:53:b9:78:4b:bc:
38:89:bd:68:ff:50:14:eb:1c:35:ce:a0:e2:e9:a7:
3b:70:5f:b9:d9:0c:64:6f:db:6c:2d:e3:db:0b:58:
bb:dd:26:d6:37:60:ce:a5:af:17:f0:81:6e:86:5e:
40:ce:ec:47:d2:5f:ba:86:2e:1b:1a:d8:23:c0:83:
e5:f7:76:d2:3d:68:f9:62:0d:60:3e:87:d2:0b:26:
b1:a7:fb:ff:41:99:f6:22:ee:5e:83:f0:48:07:94:
cf:bb:db:de:49:19:45:a2:c5:af:63:f0:1e:8c:85:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AB:6D:BF:AA:21:57:CC:7B:7E:1C:1E:FC:8F:61:F3:DB:46:91:38
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:19:3b:1a:b2:c1:a3:b2:b9:a0:fa:02:1b:89:ff:17:02:1c:
85:09:56:4a:2a:66:f4:d0:fa:ea:07:9e:3b:5f:d9:8c:a4:c6:
eb:14:ff:2e:4a:65:9e:24:fc:cf:f1:a4:42:95:66:fc:3b:c8:
5f:44:d3:85:53:a8:8e:b4:6a:38:fd:b1:f5:2d:dd:47:36:08:
b6:72:6a:6f:6e:d4:d7:de:08:c3:54:fa:8e:70:75:c0:c9:e3:
59:ad:19:7e:bf:11:d1:f4:62:7b:ff:fa:af:d0:1a:8c:4d:e3:
2d:99:d5:19:db:f0:d9:32:08:2a:fe:2f:69:1b:b2:a9:98:86:
57:5e:fc:17:b6:9c:a2:6c:e2:2a:d9:e9:ed:7b:ff:ba:b0:2c:
8e:65:b6:ac:84:bc:2b:d8:91:14:33:18:ea:ba:de:be:2f:c2:
89:81:a7:dd:f2:21:5d:3d:99:1a:31:60:53:9d:22:a6:8a:3f:
e4:cb:e2:41:48:50:be:15:f4:69:6b:8e:8a:00:ee:df:03:98:
76:e3:d0:67:cc:2b:69:a6:3f:c6:9d:8c:e0:d7:09:e9:83:a0:
a1:6d:a1:a3:b5:45:1f:5b:59:1f:5e:05:4a:14:04:3c:df:b6:
aa:fd:9d:bd:9b:b6:0d:bd:bf:31:67:88:8d:a1:b1:ea:e7:2a:
d1:05:87:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZBloPfSAozpcr6HSzz9zlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZjY3MmJkYjdiMDc2NTkxNDdlNTg3ZDQ0MzFhYTYwNGY3
NmEzODQwHhcNMjYxMDA4MDEwMDA4WhcNMjYxMDA5MDEwMDA4WjAzMTEwLwYDVQQD
Eyg0ZWFiNmRiZmFhMjE1N2NjN2I3ZTFjMWVmYzhmNjFmM2RiNDY5MTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ0O2FL/yXuYPNh30Gbv2PnmJkAG
w1phUHcIBO4nGWh0B7Z9mUMuh2BrGrvkzQ7kTcgoqpxfjXQgV5HxE+vJ/VWORzQY
R/8Ap0GlFM6rI2H0eJXrZkIGf/4Sgf6AcdM8ld5OX/6q9mVAumZ79oDcNVda2cUO
8GvmrZv8B7ihdDiY9wnMwvSmlDCkejKK3Pb1U7l4S7w4ib1o/1AU6xw1zqDi6ac7
cF+52Qxkb9tsLePbC1i73SbWN2DOpa8X8IFuhl5AzuxH0l+6hi4bGtgjwIPl93bS
PWj5Yg1gPofSCyaxp/v/QZn2Iu5eg/BIB5TPu9veSRlFosWvY/AejIU0SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6rbb+qIVfMe34cHvyPYfPbRpE4MB8GA1UdIwQY
MBaAFPL2cr23sHZZFH5YfUQxqmBPdqOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEt
NjI2ZWY4OGYyMWE5LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEtNjI2ZWY4OGYyMWE5
LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehk7GrLB
o7K5oPoCG4n/FwIchQlWSipm9ND66geeO1/ZjKTG6xT/LkplniT8z/GkQpVm/DvI
X0TThVOojrRqOP2x9S3dRzYItnJqb27U194Iw1T6jnB1wMnjWa0Zfr8R0fRie//6
r9AajE3jLZnVGdvw2TIIKv4vaRuyqZiGV178F7acomziKtnp7Xv/urAsjmW2rIS8
K9iRFDMY6rrevi/CiYGn3fIhXT2ZGjFgU50ipoo/5MviQUhQvhX0aWuOigDu3wOY
duPQZ8wraaY/xp2M4NcJ6YOgoW2ho7VFH1tZH14FShQEPN+2qv2dvZu2Db2/MWeI
jaGx6ucq0QWHXA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 11:57:55 2026 by rpki-client