Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.mft
File: CI3Wg9ZIlWdA7u307bvW4xqfeeY.mft (raw, json)
Hash identifier: pm48wjbYIWyJib1dmDeUePkKv4pE6gX9kcEvJKB52VQ=
Subject key identifier: C8:A7:17:DA:DE:FF:03:91:24:ED:4A:A3:BB:A4:71:AB:B0:3D:4D:52
Authority key identifier: 08:8D:D6:83:D6:48:95:67:40:EE:ED:F4:ED:BB:D6:E3:1A:9F:79:E6
Certificate issuer: /CN=088dd683d648956740eeedf4edbbd6e31a9f79e6
Certificate serial: 01A0CFA4074CF3B359823C4736E4C0AF93FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI3Wg9ZIlWdA7u307bvW4xqfeeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.mft
Manifest number: 08
Signing time: Wed 23 Sep 2026 19:00:28 +0000
Manifest this update: Wed 23 Sep 2026 19:00:28 +0000
Manifest next update: Thu 24 Sep 2026 19:00:28 +0000
Files and hashes: 1: 71lugQ5_7r4eLZmrofDqkyWcGo0.roa (hash: a/9q4zkTgyKqZhu+m/njxW9QDDH2cA3oCU55wTApOLI=)
2: CI3Wg9ZIlWdA7u307bvW4xqfeeY.crl (hash: GiEJeBI97KPb3ZlfPlNXQFxDCYXACGl0zCpRE8QLCXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI3Wg9ZIlWdA7u307bvW4xqfeeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:07:4c:f3:b3:59:82:3c:47:36:e4:c0:af:93:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088dd683d648956740eeedf4edbbd6e31a9f79e6
Validity
Not Before: Sep 23 19:00:28 2026 GMT
Not After : Sep 24 19:00:28 2026 GMT
Subject: CN=c8a717dadeff039124ed4aa3bba471abb03d4d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:e9:7b:46:19:49:80:b1:1d:08:9b:89:2a:
63:2b:5b:4c:08:7f:59:73:08:88:3d:80:6e:6c:f5:
39:ea:72:d8:65:fc:fb:42:33:25:e7:cf:65:8b:75:
71:33:01:9a:dd:36:28:34:0f:e7:d0:73:93:3d:ce:
0e:d2:44:f1:2c:05:58:40:28:23:89:35:3e:fe:05:
8e:b7:83:11:d0:2a:47:85:a9:28:85:69:2c:2c:d8:
d7:21:89:c5:b0:f7:77:c3:aa:ae:bf:8e:12:77:5e:
c3:04:48:67:27:1a:a8:f1:25:58:de:b5:eb:a3:41:
9b:c8:e0:4c:1b:cb:e3:bb:b7:bd:e4:af:30:d7:c8:
75:f8:a7:82:9b:4f:94:17:a9:ae:3e:c8:82:3d:22:
16:e5:5e:4c:d5:19:3f:27:b8:df:21:f0:15:cf:24:
90:ba:f3:7b:db:0b:a5:9f:2b:4e:5e:97:82:10:41:
ba:8e:e3:c8:5a:d3:e4:88:18:af:2a:92:40:64:1b:
23:54:1f:93:2a:48:77:1e:e7:c7:97:34:30:42:56:
b7:29:f3:3f:67:42:fa:55:2d:f2:62:7b:40:b1:ce:
ff:64:e5:c1:be:b2:77:bf:4a:21:5b:81:10:25:c0:
08:91:1b:94:c0:21:3d:b3:13:62:a7:4d:1c:02:c9:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A7:17:DA:DE:FF:03:91:24:ED:4A:A3:BB:A4:71:AB:B0:3D:4D:52
X509v3 Authority Key Identifier:
keyid:08:8D:D6:83:D6:48:95:67:40:EE:ED:F4:ED:BB:D6:E3:1A:9F:79:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI3Wg9ZIlWdA7u307bvW4xqfeeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec8009-1d99-48c3-990f-2b187e703bee/1/CI3Wg9ZIlWdA7u307bvW4xqfeeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:62:ce:66:af:3d:f4:bb:e3:d3:8c:87:d3:2e:31:85:8e:8d:
32:9b:d6:f9:3c:28:4c:e8:28:1d:da:7d:7f:1c:d8:00:29:5d:
40:9b:c9:77:30:82:b7:cc:0e:75:50:5f:2f:b0:c2:9d:de:22:
0e:33:f4:30:03:93:4e:ca:39:ab:d9:bd:b8:23:e6:2c:ab:5a:
8a:cf:28:c7:a9:cc:20:b5:a4:8b:4b:1e:ec:5a:15:0a:26:dc:
b9:ae:6d:74:55:0d:46:e7:a5:dd:06:ff:e6:a5:33:c0:56:8c:
e0:47:79:fb:08:62:f5:9c:9c:d6:df:6e:85:ae:4c:12:f5:c8:
f4:4e:7e:3c:0f:9b:91:20:84:4f:72:8f:c2:67:8f:b5:48:82:
82:a5:35:8c:40:6c:c7:d7:ef:75:16:68:95:19:f5:c2:70:1c:
e2:17:84:d1:d8:7f:fe:94:b8:85:1f:51:b8:0a:09:a6:c1:d6:
b5:27:f1:c0:23:65:03:a0:2d:57:0a:c5:ab:be:df:c7:1d:6d:
0a:aa:ef:d0:94:e1:48:e6:61:2b:f3:56:3b:6c:7b:a0:71:7f:
83:c1:4a:c1:09:a0:8b:92:83:16:6d:c6:1e:ab:66:74:ed:68:
55:ea:f3:16:0a:26:af:70:22:3e:f2:41:ef:7b:ea:bf:c4:b1:
e2:28:92:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpAdM87NZgjxHNuTAr5P/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OGRkNjgzZDY0ODk1Njc0MGVlZWRmNGVkYmJkNmUzMWE5
Zjc5ZTYwHhcNMjYwOTIzMTkwMDI4WhcNMjYwOTI0MTkwMDI4WjAzMTEwLwYDVQQD
EyhjOGE3MTdkYWRlZmYwMzkxMjRlZDRhYTNiYmE0NzFhYmIwM2Q0ZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGfpe0YZSYCxHQibiSpjK1tMCH9Z
cwiIPYBubPU56nLYZfz7QjMl589li3VxMwGa3TYoNA/n0HOTPc4O0kTxLAVYQCgj
iTU+/gWOt4MR0CpHhakohWksLNjXIYnFsPd3w6quv44Sd17DBEhnJxqo8SVY3rXr
o0GbyOBMG8vju7e95K8w18h1+KeCm0+UF6muPsiCPSIW5V5M1Rk/J7jfIfAVzySQ
uvN72wulnytOXpeCEEG6juPIWtPkiBivKpJAZBsjVB+TKkh3HufHlzQwQla3KfM/
Z0L6VS3yYntAsc7/ZOXBvrJ3v0ohW4EQJcAIkRuUwCE9sxNip00cAsmelwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMinF9re/wORJO1Ko7ukcauwPU1SMB8GA1UdIwQY
MBaAFAiN1oPWSJVnQO7t9O271uMan3nmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0kzV2c5WklsV2RBN3UzMDdidlc0eHFmZWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lYzgwMDktMWQ5OS00OGMzLTk5MGYt
MmIxODdlNzAzYmVlLzEvQ0kzV2c5WklsV2RBN3UzMDdidlc0eHFmZWVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lYzgwMDktMWQ5OS00OGMzLTk5MGYtMmIxODdlNzAzYmVl
LzEvQ0kzV2c5WklsV2RBN3UzMDdidlc0eHFmZWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWLOZq89
9Lvj04yH0y4xhY6NMpvW+TwoTOgoHdp9fxzYACldQJvJdzCCt8wOdVBfL7DCnd4i
DjP0MAOTTso5q9m9uCPmLKtais8ox6nMILWki0se7FoVCibcua5tdFUNRuel3Qb/
5qUzwFaM4Ed5+whi9Zyc1t9uha5MEvXI9E5+PA+bkSCET3KPwmePtUiCgqU1jEBs
x9fvdRZolRn1wnAc4heE0dh//pS4hR9RuAoJpsHWtSfxwCNlA6AtVwrFq77fxx1t
Cqrv0JThSOZhK/NWO2x7oHF/g8FKwQmgi5KDFm3GHqtmdO1oVerzFgomr3AiPvJB
73vqv8Sx4iiSMw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:08:36 2026 by rpki-client