Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: Pq4OU8orwHrrZgkepkEsSZUXMZ+0/+2l1XfKbQMW1hA=
Subject key identifier: 7D:9F:2E:F2:82:12:5B:57:81:B4:3B:E2:B4:49:0D:2E:86:19:6E:27
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 01A1DA5D041453B0ED08165983AD89D2CA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 1AF8
Signing time: Sat 14 Nov 2026 14:01:31 +0000
Manifest this update: Sat 14 Nov 2026 14:01:31 +0000
Manifest next update: Sun 15 Nov 2026 14:01:31 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: Qw2Aapeg87LQEffMqo91jEksJxr5a4+veCuNg+wPNB0=)
2: m0oKdcSNV-cSKH7tgVrl_MXsI3E.roa (hash: E8GDwRTv3+qdGdGj3xjkdxl47KDWNgRWU6Jc+RCaCnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5d:04:14:53:b0:ed:08:16:59:83:ad:89:d2:ca:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Nov 14 14:01:31 2026 GMT
Not After : Nov 15 14:01:31 2026 GMT
Subject: CN=7d9f2ef282125b5781b43be2b4490d2e86196e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:81:6d:14:fc:6e:f8:13:34:b7:10:53:26:
f7:e7:13:78:31:23:e7:66:63:5d:6e:e9:c2:19:7d:
a4:d6:75:8f:68:96:d0:4d:28:86:3d:de:26:69:8a:
e1:91:0b:73:27:16:89:77:0d:b4:9f:34:c2:7a:23:
6c:04:19:e9:9d:2c:9f:07:6f:37:50:54:be:3c:0c:
c5:c7:3b:cf:d3:dd:cd:85:47:b6:e2:4b:25:5c:f3:
c7:20:46:5c:41:e6:da:65:ed:1a:0d:5f:b2:8f:57:
fe:85:a9:e3:6e:a8:d2:36:7c:35:1f:30:c8:19:6a:
2e:5f:5c:c6:21:b4:34:6c:1a:2d:8d:17:e3:f9:93:
b7:b1:1c:73:2e:49:79:18:fd:d2:1b:aa:02:56:15:
81:26:d9:b8:6d:5f:dd:b9:33:50:a0:d9:c8:98:97:
98:34:7c:35:b3:10:2f:00:ad:b9:6c:ef:b8:0f:db:
b3:e0:d3:11:cc:f4:fd:d7:bf:4b:aa:92:50:e0:50:
90:16:cc:d7:45:50:6c:07:a2:b1:59:15:f0:35:6e:
a9:f7:4f:3b:18:91:ee:b4:4c:38:4a:84:c2:87:67:
c5:5e:af:40:4a:4e:a4:be:d9:01:3b:e5:48:74:de:
1c:25:30:58:5b:69:cc:01:f0:8f:de:ac:f0:d7:a3:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9F:2E:F2:82:12:5B:57:81:B4:3B:E2:B4:49:0D:2E:86:19:6E:27
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ad:d4:c9:15:38:d4:fb:89:35:6b:c8:d1:a0:49:65:bb:f5:
dd:c3:60:59:43:65:8e:e6:a8:75:93:07:a4:16:61:8e:71:21:
b5:68:7b:98:49:99:18:8b:58:5a:e2:7b:ef:b1:53:c8:bb:bf:
15:39:c9:ca:13:df:0f:a8:1a:35:87:a2:a7:9f:8b:c2:d6:13:
4b:20:4f:66:37:dc:d2:ef:14:d6:2a:2b:69:b4:3f:7e:d1:ce:
0b:a7:69:2f:12:d6:6a:e9:77:99:12:91:01:7a:7e:b9:ef:94:
61:20:22:e4:e3:61:96:29:8f:2d:bd:b2:4a:ed:be:1b:b0:a8:
cb:af:9c:86:e2:e0:bf:47:d0:fc:e5:3f:d5:80:47:32:bb:08:
48:c2:97:96:af:53:2d:ab:20:c3:ba:d4:90:4c:df:1d:eb:0f:
01:16:22:d7:7c:32:ed:e1:04:a7:21:da:af:9d:d4:53:ea:22:
5c:b3:53:20:27:5d:d2:1a:79:77:54:8d:21:00:7b:83:85:ba:
e1:f5:f3:36:17:49:17:e8:11:3e:74:f4:10:79:aa:b7:f0:31:
cf:9e:4a:ab:42:50:48:73:3b:a0:9b:9a:5f:b0:49:d5:c2:71:
f4:bf:1f:ad:cf:37:3e:9e:85:98:06:63:a5:55:8a:c3:42:b9:
c6:e4:a7:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHaXQQUU7DtCBZZg62J0spnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNWYyY2QxYTlmMGRhNDM1ZjJlM2IzZWU3MGU2NGZkYWY0
YjYxMjEwHhcNMjYxMTE0MTQwMTMxWhcNMjYxMTE1MTQwMTMxWjAzMTEwLwYDVQQD
Eyg3ZDlmMmVmMjgyMTI1YjU3ODFiNDNiZTJiNDQ5MGQyZTg2MTk2ZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ByBbRT8bvgTNLcQUyb35xN4MSPn
ZmNdbunCGX2k1nWPaJbQTSiGPd4maYrhkQtzJxaJdw20nzTCeiNsBBnpnSyfB283
UFS+PAzFxzvP093NhUe24kslXPPHIEZcQebaZe0aDV+yj1f+hanjbqjSNnw1HzDI
GWouX1zGIbQ0bBotjRfj+ZO3sRxzLkl5GP3SG6oCVhWBJtm4bV/duTNQoNnImJeY
NHw1sxAvAK25bO+4D9uz4NMRzPT9179LqpJQ4FCQFszXRVBsB6KxWRXwNW6p9087
GJHutEw4SoTCh2fFXq9ASk6kvtkBO+VIdN4cJTBYW2nMAfCP3qzw16NN5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2fLvKCEltXgbQ74rRJDS6GGW4nMB8GA1UdIwQY
MBaAFNJfLNGp8NpDXy47PucOZP2vS2EhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yZDEyNWYtMWE2MC00NjhkLWE5M2Et
YzViNmFlY2I2YzljLzEvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8yZDEyNWYtMWE2MC00NjhkLWE5M2EtYzViNmFlY2I2Yzlj
LzEvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKa3UyRU4
1PuJNWvI0aBJZbv13cNgWUNljuaodZMHpBZhjnEhtWh7mEmZGItYWuJ777FTyLu/
FTnJyhPfD6gaNYeip5+LwtYTSyBPZjfc0u8U1iorabQ/ftHOC6dpLxLWaul3mRKR
AXp+ue+UYSAi5ONhlimPLb2ySu2+G7Coy6+chuLgv0fQ/OU/1YBHMrsISMKXlq9T
Lasgw7rUkEzfHesPARYi13wy7eEEpyHar53UU+oiXLNTICdd0hp5d1SNIQB7g4W6
4fXzNhdJF+gRPnT0EHmqt/Axz55Kq0JQSHM7oJuaX7BJ1cJx9L8frc83Pp6FmAZj
pVWKw0K5xuSnIw==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:39 2026 by rpki-client