Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: +SX6CGMZbc4FwPwR31kkbAFbS9uj5a2VXNToHMhVxfo=
Subject key identifier: 21:D4:CC:6F:E1:6E:36:AF:10:2C:F2:B0:22:34:D3:A2:AC:26:57:72
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 01A0D8DF230D435F5A5561F7E097AB1C0F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0F06
Signing time: Fri 25 Sep 2026 14:01:37 +0000
Manifest this update: Fri 25 Sep 2026 14:01:37 +0000
Manifest next update: Sat 26 Sep 2026 14:01:37 +0000
Files and hashes: 1: 8X-vY96aKKHfj_txGbHwT7KRdWc.roa (hash: 0WIWIIW0b9953A6VR0CU69w8OMoDd9V6tcRbkVExZv4=)
2: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: RgN+YGpscK4cBTk1wRPAGshG/CHZZvEePzHQUyLg58U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:23:0d:43:5f:5a:55:61:f7:e0:97:ab:1c:0f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Sep 25 14:01:37 2026 GMT
Not After : Sep 26 14:01:37 2026 GMT
Subject: CN=21d4cc6fe16e36af102cf2b02234d3a2ac265772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:5b:32:59:b1:b7:15:88:0b:48:f4:1b:06:
c0:ce:7d:67:a8:67:6b:e9:82:77:09:0d:0f:31:b0:
5b:3e:e0:7b:28:c0:3f:b7:71:22:49:81:1f:6b:4e:
6f:e9:a6:3d:3f:ef:ef:1e:16:c3:58:99:3c:8b:60:
fd:e6:9d:2b:64:fc:2e:78:e2:d9:d6:e7:0b:be:f7:
f4:d6:58:aa:6d:f7:51:17:8e:7a:50:f0:7d:6c:fe:
76:c9:53:bd:47:75:1a:96:d4:6e:14:e4:5f:be:e1:
86:3a:81:00:b0:da:82:c7:a1:3e:66:67:96:bd:f3:
8d:dd:7f:1a:ba:16:48:5b:f8:be:1e:a9:5e:01:ff:
1b:90:e9:ba:35:4d:9f:94:d8:aa:54:d3:20:57:c5:
f6:d4:4d:7f:a1:d1:f2:62:4a:3d:77:3e:53:58:69:
b9:b6:1a:bb:ef:44:15:64:a1:93:e5:ff:84:27:9f:
76:a7:cb:a6:ba:39:b0:50:26:78:28:c7:1f:d5:4b:
fa:63:46:ac:16:01:e6:99:ce:17:32:6b:ad:c3:97:
d8:ac:c7:6a:ff:34:ff:92:2e:a1:04:b6:da:f9:c0:
0a:dc:9f:bb:0c:c2:eb:e9:a1:bf:df:38:cb:d3:4b:
00:c0:9c:61:5a:ca:fe:93:42:28:82:10:ee:9d:7a:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D4:CC:6F:E1:6E:36:AF:10:2C:F2:B0:22:34:D3:A2:AC:26:57:72
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d1:29:a2:c5:b6:95:57:09:99:cf:ae:d7:16:15:d9:67:4e:
d5:9f:19:80:88:a7:3a:83:53:cb:4a:fc:08:33:57:5c:a0:dd:
6f:da:05:ef:8f:73:6b:12:b2:cf:5e:ad:bb:b7:f5:34:ff:a2:
47:ff:55:1f:cb:f1:f6:7e:68:4d:16:3d:39:90:a0:f2:ae:4c:
b2:16:b9:39:33:bc:60:3c:19:4f:05:6f:a1:d5:45:a8:9b:03:
72:04:b9:ba:06:e4:1c:b6:f5:c1:56:f3:87:14:aa:03:b1:03:
a6:09:4a:37:14:be:0e:6a:df:c9:a5:11:b5:f6:38:ab:c6:01:
77:17:c6:a3:ad:5f:fa:38:b0:3e:06:65:bd:28:f6:bc:09:8a:
d2:42:54:1a:37:6c:58:ee:c5:47:a8:46:5f:b0:21:ee:b0:ae:
0b:6b:3d:f3:dc:47:39:d8:55:1e:b3:88:e6:54:b6:06:03:7a:
33:35:f9:d6:ad:f0:07:3e:7d:9f:54:2c:79:b8:d7:29:b7:be:
17:f0:1b:c5:80:de:88:54:5d:18:47:30:97:2c:5c:4f:c3:b8:
39:96:03:77:16:ba:55:38:a0:a4:d9:d5:d8:76:d9:fb:fa:13:
38:f9:b6:4f:7e:1b:60:f7:34:4d:55:00:9c:4c:15:d4:e1:14:
be:95:4d:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3yMNQ19aVWH34JerHA8rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZTNhYjZiMzExOGUwYmRlMGU2NDg4ZTZiZWQ2Yzk2OTQx
ZTBlODQwHhcNMjYwOTI1MTQwMTM3WhcNMjYwOTI2MTQwMTM3WjAzMTEwLwYDVQQD
EygyMWQ0Y2M2ZmUxNmUzNmFmMTAyY2YyYjAyMjM0ZDNhMmFjMjY1NzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql9bMlmxtxWIC0j0GwbAzn1nqGdr
6YJ3CQ0PMbBbPuB7KMA/t3EiSYEfa05v6aY9P+/vHhbDWJk8i2D95p0rZPwueOLZ
1ucLvvf01liqbfdRF456UPB9bP52yVO9R3UaltRuFORfvuGGOoEAsNqCx6E+ZmeW
vfON3X8auhZIW/i+HqleAf8bkOm6NU2flNiqVNMgV8X21E1/odHyYko9dz5TWGm5
thq770QVZKGT5f+EJ592p8umujmwUCZ4KMcf1Uv6Y0asFgHmmc4XMmutw5fYrMdq
/zT/ki6hBLba+cAK3J+7DMLr6aG/3zjL00sAwJxhWsr+k0IoghDunXp2HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHUzG/hbjavECzysCI006KsJldyMB8GA1UdIwQY
MBaAFPLjq2sxGOC94OZIjmvtbJaUHg6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAt
ODNiMDM4NzAwOTRkLzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zNmM0YTMtNmUxZC00NjE0LThmOTAtODNiMDM4NzAwOTRk
LzEvOHVPcmF6RVk0TDNnNWtpT2EtMXNscFFlRG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAodEposW2
lVcJmc+u1xYV2WdO1Z8ZgIinOoNTy0r8CDNXXKDdb9oF749zaxKyz16tu7f1NP+i
R/9VH8vx9n5oTRY9OZCg8q5Msha5OTO8YDwZTwVvodVFqJsDcgS5ugbkHLb1wVbz
hxSqA7EDpglKNxS+DmrfyaURtfY4q8YBdxfGo61f+jiwPgZlvSj2vAmK0kJUGjds
WO7FR6hGX7Ah7rCuC2s989xHOdhVHrOI5lS2BgN6MzX51q3wBz59n1QsebjXKbe+
F/AbxYDeiFRdGEcwlyxcT8O4OZYDdxa6VTigpNnV2HbZ+/oTOPm2T34bYPc0TVUA
nEwV1OEUvpVNqg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:37:34 2026 by rpki-client