Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
File: 8okKqmI_iRMlIMqknt14C4WW2qA.mft (raw, json)
Hash identifier: EV0GD6RAEvC9zcr4H3aiNXuFsuz9PUK3Zi6ZrlHcZcs=
Subject key identifier: 41:66:59:D5:89:81:F2:81:6B:89:B3:32:E2:8E:85:2C:10:29:F9:D7
Authority key identifier: F2:89:0A:AA:62:3F:89:13:25:20:CA:A4:9E:DD:78:0B:85:96:DA:A0
Certificate issuer: /CN=f2890aaa623f89132520caa49edd780b8596daa0
Certificate serial: 01A0D012C921526958205029830D10F83D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8okKqmI_iRMlIMqknt14C4WW2qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
Manifest number: 06
Signing time: Wed 23 Sep 2026 21:01:27 +0000
Manifest this update: Wed 23 Sep 2026 21:01:27 +0000
Manifest next update: Thu 24 Sep 2026 21:01:27 +0000
Files and hashes: 1: 8okKqmI_iRMlIMqknt14C4WW2qA.crl (hash: L/LHwiG3nte2uB3Pp4MbgPfHqaFdWabn82uDSA8OlG8=)
2: xF1DzDjk2x1kIAUmYjScihsLh94.roa (hash: c33mejelY728d79n3OH435ljL0H9k5ztSPf/lo5be4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8okKqmI_iRMlIMqknt14C4WW2qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:c9:21:52:69:58:20:50:29:83:0d:10:f8:3d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2890aaa623f89132520caa49edd780b8596daa0
Validity
Not Before: Sep 23 21:01:27 2026 GMT
Not After : Sep 24 21:01:27 2026 GMT
Subject: CN=416659d58981f2816b89b332e28e852c1029f9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:6a:29:fa:e0:1e:8c:e7:ab:9f:9f:e7:1d:
90:12:28:c9:84:e3:0e:1b:31:ec:e3:63:d0:64:0b:
0e:74:0c:f4:5d:f8:e5:9a:b1:cb:27:e4:18:26:11:
c3:c2:c4:ce:45:a9:4b:06:3e:3e:4c:fa:6c:85:74:
20:97:b9:54:ba:72:c7:e3:47:bc:26:56:a2:7d:05:
9a:cd:7c:96:d1:4a:3a:38:06:70:4e:80:dd:eb:40:
cd:53:54:0b:ef:00:23:7c:6f:e0:4d:8c:e2:26:89:
8b:60:68:33:be:ae:39:8e:fc:75:f3:94:a1:e6:e7:
30:9f:13:9e:26:57:33:15:75:42:5e:6c:c0:ff:9c:
7e:15:dd:f7:8e:ad:3c:80:f2:54:5d:83:27:39:e7:
a4:42:43:9c:15:48:30:df:2d:0a:a0:1e:5a:cf:e3:
d2:30:84:7a:3f:b6:65:9c:6f:d5:c5:f1:c8:b5:5f:
6f:34:21:81:fc:97:b1:5b:d8:42:00:60:8a:bc:9a:
b9:3b:53:36:2e:02:07:bb:98:59:3c:2e:46:6e:f0:
87:a4:1c:d4:61:84:75:d9:ee:a1:f0:09:dc:68:d6:
59:da:1b:fd:49:c3:4c:c4:29:cd:ad:bb:2e:47:a7:
8b:35:fe:cc:f0:c3:9b:c3:b9:e5:01:f3:9e:8d:96:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:66:59:D5:89:81:F2:81:6B:89:B3:32:E2:8E:85:2C:10:29:F9:D7
X509v3 Authority Key Identifier:
keyid:F2:89:0A:AA:62:3F:89:13:25:20:CA:A4:9E:DD:78:0B:85:96:DA:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8okKqmI_iRMlIMqknt14C4WW2qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7a3c6-2d4b-4f00-a994-a791717de4aa/1/8okKqmI_iRMlIMqknt14C4WW2qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0d:c2:12:ba:d3:79:b3:0a:d1:a0:67:f7:a2:82:2b:67:fc:
b9:02:e7:d0:47:5d:82:97:c1:3d:45:2c:4a:d7:fc:3b:87:5f:
cf:c1:2f:20:a4:7c:02:a1:30:a8:06:2e:44:70:96:ff:10:27:
c7:1d:58:a7:39:39:67:41:2b:30:e4:31:b8:32:47:94:51:e0:
c1:f9:45:3e:bb:63:1d:88:af:4b:39:a6:3b:94:8c:79:03:d5:
01:51:8b:2d:c6:f1:da:50:1c:aa:91:41:a2:cf:fe:30:c3:7b:
98:56:74:85:10:8b:6a:19:90:32:58:6d:03:77:c5:90:32:0c:
d3:b4:2f:77:49:1f:24:ee:de:66:60:1a:21:8f:de:80:d0:70:
85:65:d6:ad:b4:af:ab:7f:62:41:d6:95:2e:a3:d8:de:55:64:
6a:c8:ba:1d:84:95:0d:ee:1c:3a:9c:6f:13:9a:a1:a6:27:1b:
09:d2:49:44:7b:9f:f0:51:ef:2c:07:65:40:36:78:0f:8f:98:
01:d9:3d:36:65:e5:7d:10:da:3a:f2:1b:8b:16:2f:0c:7e:d7:
ca:a2:d0:62:03:c8:3c:f4:98:69:84:7b:a9:39:7b:ed:64:bd:
2c:3d:a9:9c:c7:f5:cf:d2:b2:a6:32:ad:59:9b:72:39:ff:72:
d2:d0:0b:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEskhUmlYIFApgw0Q+D0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyODkwYWFhNjIzZjg5MTMyNTIwY2FhNDllZGQ3ODBiODU5
NmRhYTAwHhcNMjYwOTIzMjEwMTI3WhcNMjYwOTI0MjEwMTI3WjAzMTEwLwYDVQQD
Eyg0MTY2NTlkNTg5ODFmMjgxNmI4OWIzMzJlMjhlODUyYzEwMjlmOWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+pqKfrgHoznq5+f5x2QEijJhOMO
GzHs42PQZAsOdAz0XfjlmrHLJ+QYJhHDwsTORalLBj4+TPpshXQgl7lUunLH40e8
JlaifQWazXyW0Uo6OAZwToDd60DNU1QL7wAjfG/gTYziJomLYGgzvq45jvx185Sh
5ucwnxOeJlczFXVCXmzA/5x+Fd33jq08gPJUXYMnOeekQkOcFUgw3y0KoB5az+PS
MIR6P7ZlnG/VxfHItV9vNCGB/JexW9hCAGCKvJq5O1M2LgIHu5hZPC5GbvCHpBzU
YYR12e6h8AncaNZZ2hv9ScNMxCnNrbsuR6eLNf7M8MObw7nlAfOejZYpEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFmWdWJgfKBa4mzMuKOhSwQKfnXMB8GA1UdIwQY
MBaAFPKJCqpiP4kTJSDKpJ7deAuFltqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG9rS3FtSV9pUk1sSU1xa250MTRDNFdXMnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mN2EzYzYtMmQ0Yi00ZjAwLWE5OTQt
YTc5MTcxN2RlNGFhLzEvOG9rS3FtSV9pUk1sSU1xa250MTRDNFdXMnFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mN2EzYzYtMmQ0Yi00ZjAwLWE5OTQtYTc5MTcxN2RlNGFh
LzEvOG9rS3FtSV9pUk1sSU1xa250MTRDNFdXMnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmw3CErrT
ebMK0aBn96KCK2f8uQLn0EddgpfBPUUsStf8O4dfz8EvIKR8AqEwqAYuRHCW/xAn
xx1Ypzk5Z0ErMOQxuDJHlFHgwflFPrtjHYivSzmmO5SMeQPVAVGLLcbx2lAcqpFB
os/+MMN7mFZ0hRCLahmQMlhtA3fFkDIM07Qvd0kfJO7eZmAaIY/egNBwhWXWrbSv
q39iQdaVLqPY3lVkasi6HYSVDe4cOpxvE5qhpicbCdJJRHuf8FHvLAdlQDZ4D4+Y
Adk9NmXlfRDaOvIbixYvDH7XyqLQYgPIPPSYaYR7qTl77WS9LD2pnMf1z9KypjKt
WZtyOf9y0tALJA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:45:41 2026 by rpki-client