Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
File: G82c0xYDmcHjyAzwdIZ6cp991Pk.mft (raw, json)
Hash identifier: 4/DotIoj4Z3btRBDZUBbKElgvqJIdLHCtNEdV2XsQ58=
Subject key identifier: FF:60:BE:81:8A:C4:05:93:16:DF:50:34:6B:10:6C:22:CC:A9:30:B0
Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Certificate serial: 01A137ED8159FEBC1F27AFB80EC0E44BB017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
Manifest number: 1AA0
Signing time: Wed 14 Oct 2026 01:01:14 +0000
Manifest this update: Wed 14 Oct 2026 01:01:14 +0000
Manifest next update: Thu 15 Oct 2026 01:01:14 +0000
Files and hashes: 1: G82c0xYDmcHjyAzwdIZ6cp991Pk.crl (hash: 5hfh3IEfqOAIj0mX/Zy6veJFN1dplbFHlEvgxDuDhmw=)
2: cLvxrkkyUYgMpaai3Fsxuqy0m0Y.roa (hash: syKnvPS7DRThyoysE7TOjvIhTQSg7bMij5xdInvN0jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:ed:81:59:fe:bc:1f:27:af:b8:0e:c0:e4:4b:b0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Validity
Not Before: Oct 14 01:01:14 2026 GMT
Not After : Oct 15 01:01:14 2026 GMT
Subject: CN=ff60be818ac4059316df50346b106c22cca930b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:e8:f6:af:eb:fb:e9:98:12:55:93:b8:22:
8b:6e:c2:46:ef:91:46:5e:f1:2d:38:39:a1:2e:be:
1d:52:47:3f:68:92:0a:49:99:a5:0a:63:62:6b:ba:
72:83:e3:36:a7:75:e3:44:c3:9d:cb:db:ab:2e:33:
1c:16:6b:aa:a4:a2:01:c1:41:91:1e:cf:99:67:68:
6b:07:9e:c3:b1:cd:50:f3:6a:14:0d:8a:11:38:bb:
94:db:79:2e:08:82:62:d5:75:f3:b9:d1:47:66:f6:
da:80:b8:a8:d9:3e:9a:f8:f2:00:ed:e2:ff:06:ae:
93:27:4f:cc:84:f5:41:ea:a7:06:0b:51:51:af:56:
f9:32:9e:e9:cd:63:01:f3:8a:1c:f0:af:68:14:56:
ae:68:68:0d:f2:d7:5a:b8:6b:13:25:86:f6:82:90:
78:10:bd:67:bf:ee:51:d1:56:3d:e5:26:33:e9:e7:
3a:00:c9:17:da:45:d5:19:bc:0c:f5:05:41:bd:a2:
ea:6c:7f:ff:c3:6f:98:39:a2:8f:b2:c7:61:a2:bb:
e1:35:f8:ac:5e:e3:92:47:f0:d8:52:8c:e9:44:60:
06:30:4b:d9:60:3e:c6:77:f2:0d:70:57:18:87:a3:
9b:99:da:ea:b0:0e:ff:52:c5:8c:e0:a0:ea:71:e3:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:60:BE:81:8A:C4:05:93:16:DF:50:34:6B:10:6C:22:CC:A9:30:B0
X509v3 Authority Key Identifier:
keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0d:03:d9:93:a2:d8:e6:34:fe:b8:ac:91:a5:8e:75:e9:8d:
c4:8c:de:7d:15:e1:d9:a4:c9:51:83:24:8a:0e:ae:df:f5:68:
16:3e:bf:0d:8c:62:70:26:a6:b2:7e:ba:59:fe:cb:08:9c:2b:
38:95:11:b9:a5:93:ec:f0:bd:90:c2:01:27:25:59:c0:33:61:
a2:e5:76:22:6f:c1:31:4a:ba:96:54:64:6d:87:0a:87:44:8c:
fe:1b:b8:18:46:b5:99:22:ec:ac:e6:20:dc:28:f7:1d:e7:e5:
ae:51:7c:8a:f3:9a:33:e5:a9:0a:54:f7:5a:22:0a:cd:69:09:
a0:56:e5:12:9f:ea:e5:a9:0c:69:0b:d2:8c:9e:c3:5a:13:78:
47:d6:6d:7f:55:9f:a8:a1:12:5e:d7:7d:9b:83:bb:80:4d:4b:
f2:da:e1:0e:e9:6c:f2:e5:7e:6b:7c:c9:ba:52:90:99:9d:32:
68:b4:b9:4b:e4:bd:aa:e3:4e:ff:cf:86:b2:29:df:f4:24:05:
35:39:ad:bd:82:8d:6c:98:58:5e:20:77:56:37:86:e3:18:60:
df:cd:38:d1:f8:1f:09:7d:2e:e3:7c:8c:60:e9:60:fd:28:dd:
5c:37:9d:d9:93:c8:bc:0b:e8:4d:6f:a9:4a:9b:fc:c7:58:55:
f2:4f:92:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE37YFZ/rwfJ6+4DsDkS7AXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiY2Q5Y2QzMTYwMzk5YzFlM2M4MGNmMDc0ODY3YTcyOWY3
ZGQ0ZjkwHhcNMjYxMDE0MDEwMTE0WhcNMjYxMDE1MDEwMTE0WjAzMTEwLwYDVQQD
EyhmZjYwYmU4MThhYzQwNTkzMTZkZjUwMzQ2YjEwNmMyMmNjYTkzMGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySDo9q/r++mYElWTuCKLbsJG75FG
XvEtODmhLr4dUkc/aJIKSZmlCmNia7pyg+M2p3XjRMOdy9urLjMcFmuqpKIBwUGR
Hs+ZZ2hrB57Dsc1Q82oUDYoROLuU23kuCIJi1XXzudFHZvbagLio2T6a+PIA7eL/
Bq6TJ0/MhPVB6qcGC1FRr1b5Mp7pzWMB84oc8K9oFFauaGgN8tdauGsTJYb2gpB4
EL1nv+5R0VY95SYz6ec6AMkX2kXVGbwM9QVBvaLqbH//w2+YOaKPssdhorvhNfis
XuOSR/DYUozpRGAGMEvZYD7Gd/INcFcYh6ObmdrqsA7/UsWM4KDqceMsLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9gvoGKxAWTFt9QNGsQbCLMqTCwMB8GA1UdIwQY
MBaAFBvNnNMWA5nB48gM8HSGenKffdT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzgyYzB4WURtY0hqeUF6d2RJWjZjcDk5MVBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS80Mjc0NTYtNDk1Ny00ZDMzLTljNjQt
MTZmNDA1N2ZhYzI2LzEvRzgyYzB4WURtY0hqeUF6d2RJWjZjcDk5MVBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS80Mjc0NTYtNDk1Ny00ZDMzLTljNjQtMTZmNDA1N2ZhYzI2
LzEvRzgyYzB4WURtY0hqeUF6d2RJWjZjcDk5MVBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUg0D2ZOi
2OY0/riskaWOdemNxIzefRXh2aTJUYMkig6u3/VoFj6/DYxicCamsn66Wf7LCJwr
OJURuaWT7PC9kMIBJyVZwDNhouV2Im/BMUq6llRkbYcKh0SM/hu4GEa1mSLsrOYg
3Cj3HeflrlF8ivOaM+WpClT3WiIKzWkJoFblEp/q5akMaQvSjJ7DWhN4R9Ztf1Wf
qKESXtd9m4O7gE1L8trhDuls8uV+a3zJulKQmZ0yaLS5S+S9quNO/8+Gsinf9CQF
NTmtvYKNbJhYXiB3VjeG4xhg38040fgfCX0u43yMYOlg/SjdXDed2ZPIvAvoTW+p
Spv8x1hV8k+Stg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 10:06:44 2026 by rpki-client