Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier: xK0ExuiR9ahme5E+WE8WDC6dUkaZ23EGfuvbLLHDGdk=
Subject key identifier: 6A:41:AF:45:D5:10:7D:E7:F4:3A:EE:8F:0D:BE:34:E5:10:31:8F:30
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial: 01A0D193055EA4E6F66ADB185391D75DE4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 04:01:08 +0000
Manifest this update: Thu 24 Sep 2026 04:01:08 +0000
Manifest next update: Fri 25 Sep 2026 04:01:08 +0000
Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: NgS3waSPHDjujdC2GfxN/w+iFUmHLoZACQ0sWeKmfDA=)
2: r1byiiD8E5kv1tORv9SHaYWDCX8.roa (hash: Y7mEKt3t/ouKCUEMiF9nKEKnQJXCe30KkTBF7TaOr+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:05:5e:a4:e6:f6:6a:db:18:53:91:d7:5d:e4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Validity
Not Before: Sep 24 04:01:08 2026 GMT
Not After : Sep 25 04:01:08 2026 GMT
Subject: CN=6a41af45d5107de7f43aee8f0dbe34e510318f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:11:63:df:23:75:62:87:a3:e1:5b:cb:1a:
9e:5d:a3:52:a9:77:71:56:11:42:1b:69:38:6b:48:
d0:4a:61:ff:ba:bf:6d:e0:41:ac:8f:04:51:68:50:
07:84:23:50:09:c8:04:44:aa:b8:f2:a5:70:ae:96:
b2:01:b3:14:f6:e0:bd:dc:b2:13:80:1c:1c:45:5c:
08:e8:58:69:24:be:d8:cb:48:7a:67:e5:7f:b2:16:
6c:2c:07:0a:07:de:0a:11:d2:f4:0a:42:d5:78:52:
a7:1b:76:00:1d:d4:33:2e:a5:b1:f4:39:98:71:14:
6a:ad:9c:6d:7f:6b:4a:6a:27:0c:9d:29:13:d5:5d:
44:73:8d:b9:f9:09:a9:3a:18:e9:41:91:7c:80:64:
ef:6e:4d:86:3d:9e:1e:49:7b:4c:b1:b1:67:43:25:
1c:48:9b:56:ba:e8:d6:12:58:f1:b7:c8:7f:7a:f5:
57:4c:71:af:c3:c4:a1:4e:6a:b2:5c:ae:4e:57:a7:
fb:d8:dd:e4:77:29:8d:9d:d3:be:cc:a4:ea:db:fa:
a5:4b:c1:d4:19:1e:81:5f:d3:ba:48:3e:ed:04:4f:
48:14:fa:f0:22:2d:6a:d3:32:ca:a8:b4:b8:f2:23:
bd:77:d3:d7:b5:2b:84:b2:f4:c9:fb:77:68:ec:ea:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:41:AF:45:D5:10:7D:E7:F4:3A:EE:8F:0D:BE:34:E5:10:31:8F:30
X509v3 Authority Key Identifier:
keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c7:f9:06:78:22:f4:45:40:97:31:20:20:8d:da:80:10:b2:
af:cc:e3:f6:60:37:28:c1:e3:a0:15:88:4f:8d:2b:cb:52:46:
96:dc:d2:ab:80:f5:81:c1:aa:01:39:36:11:e5:e6:7c:9e:02:
d3:21:f3:64:71:09:5b:25:dd:a7:91:7c:99:b7:19:e8:c9:3d:
b8:b8:bf:0b:ae:bc:9b:6e:9f:01:5c:e7:36:81:30:f1:25:55:
1d:58:bf:47:bc:1c:01:d6:12:b8:e1:0b:9e:d8:55:a7:e4:c4:
f6:10:62:47:5b:7d:59:83:fc:56:e4:80:84:e9:53:17:0b:91:
fd:00:5d:8e:0d:68:b6:12:4d:ca:84:18:cd:cd:ba:07:07:96:
b8:ae:1d:16:eb:4a:69:11:12:1e:65:eb:db:22:84:fe:49:d0:
f7:4a:d1:21:9d:d3:92:7a:1e:b2:ac:2f:28:c9:e1:5f:1c:b0:
bb:55:ff:30:11:be:76:e2:77:63:a3:be:1e:02:9e:03:30:8b:
df:c6:fb:7c:43:7a:6e:f6:5f:8d:1b:1c:9f:43:da:fb:ff:ae:
7c:ba:99:0b:e7:84:ac:80:47:5e:b4:b9:0d:30:d7:6a:fd:9f:
e1:92:f4:9b:b2:53:5b:cd:f3:6c:30:5f:11:79:5c:31:96:93:
b6:44:2d:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRkwVepOb2atsYU5HXXeTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDU5ZjEyMWZjN2VmYTBjMTBiN2RkNjE0ZDk1YTg3NTZk
NTM2MDYwHhcNMjYwOTI0MDQwMTA4WhcNMjYwOTI1MDQwMTA4WjAzMTEwLwYDVQQD
Eyg2YTQxYWY0NWQ1MTA3ZGU3ZjQzYWVlOGYwZGJlMzRlNTEwMzE4ZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNgRY98jdWKHo+FbyxqeXaNSqXdx
VhFCG2k4a0jQSmH/ur9t4EGsjwRRaFAHhCNQCcgERKq48qVwrpayAbMU9uC93LIT
gBwcRVwI6FhpJL7Yy0h6Z+V/shZsLAcKB94KEdL0CkLVeFKnG3YAHdQzLqWx9DmY
cRRqrZxtf2tKaicMnSkT1V1Ec425+QmpOhjpQZF8gGTvbk2GPZ4eSXtMsbFnQyUc
SJtWuujWEljxt8h/evVXTHGvw8ShTmqyXK5OV6f72N3kdymNndO+zKTq2/qlS8HU
GR6BX9O6SD7tBE9IFPrwIi1q0zLKqLS48iO9d9PXtSuEsvTJ+3do7OrcnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpBr0XVEH3n9Drujw2+NOUQMY8wMB8GA1UdIwQY
MBaAFPDVnxIfx++gwQt91hTZWodW1TYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjct
NmVlZmU1YjMzNWFhLzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lNjk4YzctMGIxZi00MTA2LWJhNjctNmVlZmU1YjMzNWFh
LzEvOE5XZkVoX0g3NkRCQzMzV0ZObGFoMWJWTmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMf5Bngi
9EVAlzEgII3agBCyr8zj9mA3KMHjoBWIT40ry1JGltzSq4D1gcGqATk2EeXmfJ4C
0yHzZHEJWyXdp5F8mbcZ6Mk9uLi/C668m26fAVznNoEw8SVVHVi/R7wcAdYSuOEL
nthVp+TE9hBiR1t9WYP8VuSAhOlTFwuR/QBdjg1othJNyoQYzc26BweWuK4dFutK
aRESHmXr2yKE/knQ90rRIZ3TknoesqwvKMnhXxywu1X/MBG+duJ3Y6O+HgKeAzCL
38b7fEN6bvZfjRscn0Pa+/+ufLqZC+eErIBHXrS5DTDXav2f4ZL0m7JTW83zbDBf
EXlcMZaTtkQtog==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:35:45 2026 by rpki-client