Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
File: 8ZJhuvRuQzbW8EWjgwKAehURTyg.mft (raw, json)
Hash identifier: HQdd9lGnQNne1eiCr4qebefaJryXniOoJi8vZHQd/SY=
Subject key identifier: 5F:D0:61:44:AF:87:25:8B:8E:DD:7D:5C:D4:22:0E:6D:A0:CC:49:4C
Authority key identifier: F1:92:61:BA:F4:6E:43:36:D6:F0:45:A3:83:02:80:7A:15:11:4F:28
Certificate issuer: /CN=f19261baf46e4336d6f045a38302807a15114f28
Certificate serial: 01A102B629D229CBF6BA24A9F5EC1EEB4620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
Manifest number: 0100
Signing time: Sat 03 Oct 2026 17:00:54 +0000
Manifest this update: Sat 03 Oct 2026 17:00:54 +0000
Manifest next update: Sun 04 Oct 2026 17:00:54 +0000
Files and hashes: 1: 8ZJhuvRuQzbW8EWjgwKAehURTyg.crl (hash: j1g/Xu9/c9WRsbruhZGlraABRu29hNWu0GHMfTGtn3g=)
2: AwjHZOUDzV2do1pKjQJTigNmWvY.asa (hash: AVjOvrWcyb3LLZ1yPyNBczaWWyURv9WbV2eyywQTRm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:29:d2:29:cb:f6:ba:24:a9:f5:ec:1e:eb:46:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19261baf46e4336d6f045a38302807a15114f28
Validity
Not Before: Oct 3 17:00:54 2026 GMT
Not After : Oct 4 17:00:54 2026 GMT
Subject: CN=5fd06144af87258b8edd7d5cd4220e6da0cc494c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ef:cf:14:bf:6d:c1:68:93:14:25:b8:c6:e6:
40:5a:d2:ec:38:d0:82:cb:42:07:a0:45:36:4d:af:
6d:6b:6f:96:82:52:f4:b4:73:4c:ff:56:7b:98:1e:
43:aa:f1:15:31:63:63:ad:42:28:35:58:a2:c2:8f:
3d:62:13:26:0a:31:0a:22:d1:0b:62:88:d2:36:20:
4e:4d:ba:c8:9f:2e:09:ab:07:4e:91:f8:53:90:0e:
71:ef:5c:49:a2:a4:6d:dc:bf:bd:1c:03:ea:66:ec:
00:a0:5a:e5:d1:70:e7:87:ed:93:71:4a:d5:bc:c1:
0d:7d:c9:8e:eb:65:d2:95:d8:b7:8a:36:1a:93:91:
1b:0b:c9:5d:7b:25:9b:9e:27:42:a4:96:16:55:89:
4f:fc:73:a9:86:08:cf:4c:a6:51:f9:6b:ca:5c:53:
55:a9:4d:ec:c8:99:ed:8b:75:a5:ef:ab:b3:00:e5:
23:8b:6c:b0:79:b9:a2:7e:51:f5:a6:75:3d:78:96:
72:95:b2:fe:3f:99:cf:e0:ef:8f:90:9a:63:7c:d8:
66:74:3a:ea:c6:65:b2:b9:fa:64:1e:59:7e:86:7a:
90:be:09:5a:f0:f4:07:38:d8:a9:e9:87:9d:6d:51:
11:46:c5:f7:26:8b:e3:c2:32:47:3b:c9:c1:6f:c6:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D0:61:44:AF:87:25:8B:8E:DD:7D:5C:D4:22:0E:6D:A0:CC:49:4C
X509v3 Authority Key Identifier:
keyid:F1:92:61:BA:F4:6E:43:36:D6:F0:45:A3:83:02:80:7A:15:11:4F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:40:e8:69:a9:47:d5:98:40:2b:f0:14:6a:04:ae:aa:4e:f4:
5d:72:c8:89:ca:df:a2:35:e3:8f:7e:f9:2f:91:9b:7c:cd:07:
20:3a:0a:d1:73:8c:09:47:70:b8:1b:2e:3d:e9:0c:c2:de:f2:
47:e0:3f:ab:26:1c:9e:8d:f9:49:bc:b5:ab:0d:95:a4:9f:84:
9f:d4:f9:07:1e:a4:db:58:56:82:e6:85:41:a6:4e:aa:73:7f:
39:46:4a:09:10:00:18:97:48:7e:9a:cf:a0:aa:d1:f0:b7:fd:
57:4a:54:b6:be:bc:53:84:2e:f6:ac:d2:c9:01:b6:09:f2:8f:
24:44:53:67:0c:3d:08:2f:49:53:23:94:6f:cd:b5:50:1f:56:
d9:33:af:af:1d:94:85:2d:48:8d:e8:f9:93:33:db:cd:65:d6:
96:c8:fd:d8:b8:5b:65:c5:ff:f3:a3:d1:31:ce:7a:8d:7b:4a:
2e:0f:33:ba:7c:71:89:5f:1e:bc:d8:e5:73:95:9a:42:0c:0c:
2e:ac:cf:7b:f6:55:61:77:f9:82:d5:87:5f:95:72:25:a0:9d:
21:5e:72:a0:e1:4e:7a:e4:ce:de:3c:59:b5:20:ff:91:a1:cf:
16:61:7c:25:26:97:12:75:70:9c:55:51:64:b9:6e:7c:9e:35:
cc:62:90:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECtinSKcv2uiSp9ewe60YgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOTI2MWJhZjQ2ZTQzMzZkNmYwNDVhMzgzMDI4MDdhMTUx
MTRmMjgwHhcNMjYxMDAzMTcwMDU0WhcNMjYxMDA0MTcwMDU0WjAzMTEwLwYDVQQD
Eyg1ZmQwNjE0NGFmODcyNThiOGVkZDdkNWNkNDIyMGU2ZGEwY2M0OTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8O/PFL9twWiTFCW4xuZAWtLsONCC
y0IHoEU2Ta9ta2+WglL0tHNM/1Z7mB5DqvEVMWNjrUIoNViiwo89YhMmCjEKItEL
YojSNiBOTbrIny4JqwdOkfhTkA5x71xJoqRt3L+9HAPqZuwAoFrl0XDnh+2TcUrV
vMENfcmO62XSldi3ijYak5EbC8ldeyWbnidCpJYWVYlP/HOphgjPTKZR+WvKXFNV
qU3syJnti3Wl76uzAOUji2ywebmiflH1pnU9eJZylbL+P5nP4O+PkJpjfNhmdDrq
xmWyufpkHll+hnqQvgla8PQHONip6YedbVERRsX3JovjwjJHO8nBb8a3BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/QYUSvhyWLjt19XNQiDm2gzElMMB8GA1UdIwQY
MBaAFPGSYbr0bkM21vBFo4MCgHoVEU8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFpKaHV2UnVRemJXOEVXamd3S0FlaFVSVHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80ODllODItNDc2OS00NmY4LWI0ZDYt
NTkyMGI5ODE0NDE5LzEvOFpKaHV2UnVRemJXOEVXamd3S0FlaFVSVHlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80ODllODItNDc2OS00NmY4LWI0ZDYtNTkyMGI5ODE0NDE5
LzEvOFpKaHV2UnVRemJXOEVXamd3S0FlaFVSVHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0DoaalH
1ZhAK/AUagSuqk70XXLIicrfojXjj375L5GbfM0HIDoK0XOMCUdwuBsuPekMwt7y
R+A/qyYcno35Sby1qw2VpJ+En9T5Bx6k21hWguaFQaZOqnN/OUZKCRAAGJdIfprP
oKrR8Lf9V0pUtr68U4Qu9qzSyQG2CfKPJERTZww9CC9JUyOUb821UB9W2TOvrx2U
hS1Ijej5kzPbzWXWlsj92LhbZcX/86PRMc56jXtKLg8zunxxiV8evNjlc5WaQgwM
LqzPe/ZVYXf5gtWHX5VyJaCdIV5yoOFOeuTO3jxZtSD/kaHPFmF8JSaXEnVwnFVR
ZLlufJ41zGKQqQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 01:31:16 2026 by rpki-client