Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File: 8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier: 6pnBuDi726uwhmYe02lQVC8076Txkxlo8GVfzHViE/A=
Subject key identifier: 98:78:5E:CE:B6:3A:14:AE:75:7D:22:22:7D:EF:C1:CE:27:40:54:CF
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 01A0CFDAFD65E05A9F7C83C9F583E07EBC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number: 0A71
Signing time: Wed 23 Sep 2026 20:00:30 +0000
Manifest this update: Wed 23 Sep 2026 20:00:30 +0000
Manifest next update: Thu 24 Sep 2026 20:00:30 +0000
Files and hashes: 1: 2GTvWzpclUq6kJYm-wsP_GwJPLY.roa (hash: fYmZ9Cu3/ER+umCuIKfV6emnqQD55csuls9mkFBGOE4=)
2: 5oF3V0rjeL1pJ5lHiFSxxXlRiqk.roa (hash: MY4vTmIm6iMkCfXRGy7HULVmNJlJMi1dSNNh0tuV34c=)
3: 69uCRF0gJPayfWhDtOPkNyE4RrA.roa (hash: zk+4O7C/kwm21uLUwHJKUDfYHP0XyuVnc9Gjvk0nfWs=)
4: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: /iewmMquKZGDFSmzJG4LUr3eCIUsYh8VSTOYMW49i6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:fd:65:e0:5a:9f:7c:83:c9:f5:83:e0:7e:bc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: Sep 23 20:00:30 2026 GMT
Not After : Sep 24 20:00:30 2026 GMT
Subject: CN=98785eceb63a14ae757d22227defc1ce274054cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4d:1c:89:d2:e5:fe:2a:5c:1c:5b:59:0c:75:
7c:55:28:b8:df:8e:53:6e:ef:fa:e6:4a:79:23:1c:
d6:02:8b:4a:b6:28:9c:a0:9a:d2:79:ee:70:e8:0f:
0c:93:26:e9:2d:c3:47:30:f2:85:cb:3e:31:a9:20:
9e:24:be:40:30:cf:3b:bd:80:22:39:47:c3:74:70:
52:29:5b:49:ca:37:e6:35:69:49:32:cd:0d:d6:7e:
54:ac:03:32:e5:95:35:ed:3c:26:2b:7b:84:80:e8:
d0:63:1e:6d:20:59:85:44:a6:b6:ee:ae:74:a8:0c:
06:25:7e:43:e1:52:a7:af:a8:c7:77:9a:8b:c7:b7:
fb:9f:b5:32:36:45:ae:93:91:9f:e7:04:31:7a:89:
6e:74:9f:63:df:99:6e:af:b4:4d:54:0f:a2:0f:8b:
80:db:59:bf:03:45:c6:64:26:34:cf:6b:c1:51:3e:
b8:3a:84:a9:d7:b0:40:06:5a:3d:6b:1c:59:5a:05:
50:69:de:3d:ab:9c:2e:a1:15:d8:28:04:c2:70:10:
2d:f8:52:0c:b6:ff:2b:15:b7:ab:b5:dc:e0:20:c2:
75:73:4d:8e:ff:49:b7:23:54:2e:15:38:5a:9c:77:
db:bc:50:a1:dc:13:d1:da:98:36:df:cb:d6:d9:4e:
c8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:78:5E:CE:B6:3A:14:AE:75:7D:22:22:7D:EF:C1:CE:27:40:54:CF
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:36:d0:e7:4c:c7:9d:e2:6c:3f:e3:f0:09:34:6a:84:f0:a2:
3b:0c:87:f2:64:1a:88:18:97:49:6d:c1:f0:93:ac:a8:03:62:
49:26:51:a1:e5:74:68:a8:de:57:8b:23:00:a0:26:56:9d:dd:
97:7f:7d:23:75:e2:74:7d:6d:5e:38:35:24:fc:07:31:a9:46:
e4:bd:15:aa:40:d4:00:72:1c:49:90:87:9a:02:07:07:57:d6:
78:0a:ba:3f:f9:50:c0:41:4f:a8:e0:c3:07:5e:46:f8:ef:d3:
df:ec:9c:06:03:76:47:db:aa:cd:4c:c7:64:e8:57:f7:e0:ff:
f6:1f:22:11:00:2f:25:f3:71:1f:0a:24:0b:b8:0e:44:6c:57:
96:09:58:d4:da:61:d5:8f:62:3e:90:cf:4d:f4:63:d2:c0:ab:
cb:17:a9:96:7e:e1:8f:be:72:2d:68:f7:1a:69:c1:66:b5:90:
5b:e7:3a:39:c6:f7:78:01:ce:d3:0e:ea:88:1c:2b:25:0c:24:
03:c5:b9:8a:73:4d:ee:db:ec:13:c6:4f:db:a0:59:ae:96:06:
da:b6:27:b6:e2:12:73:2f:82:b3:a3:c6:cb:b7:ed:e7:b0:40:
13:79:9b:b9:01:a4:26:06:c1:86:29:2f:83:5e:06:55:e7:17:
90:3d:4c:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDP2v1l4FqffIPJ9YPgfrwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZWU1YjY4NDljOGM4MWY1YTc2MzU5NTU4OGE2YmE2ODIx
ZTc2N2IwHhcNMjYwOTIzMjAwMDMwWhcNMjYwOTI0MjAwMDMwWjAzMTEwLwYDVQQD
Eyg5ODc4NWVjZWI2M2ExNGFlNzU3ZDIyMjI3ZGVmYzFjZTI3NDA1NGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4U0cidLl/ipcHFtZDHV8VSi4345T
bu/65kp5IxzWAotKtiicoJrSee5w6A8MkybpLcNHMPKFyz4xqSCeJL5AMM87vYAi
OUfDdHBSKVtJyjfmNWlJMs0N1n5UrAMy5ZU17TwmK3uEgOjQYx5tIFmFRKa27q50
qAwGJX5D4VKnr6jHd5qLx7f7n7UyNkWuk5Gf5wQxeoludJ9j35lur7RNVA+iD4uA
21m/A0XGZCY0z2vBUT64OoSp17BABlo9axxZWgVQad49q5wuoRXYKATCcBAt+FIM
tv8rFbertdzgIMJ1c02O/0m3I1QuFThanHfbvFCh3BPR2pg238vW2U7IlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJh4Xs62OhSudX0iIn3vwc4nQFTPMB8GA1UdIwQY
MBaAFPLuW2hJyMgfWnY1lViKa6aCHnZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTIt
NjBhMDM5ZGQxYmNhLzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTItNjBhMDM5ZGQxYmNh
LzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyjbQ50zH
neJsP+PwCTRqhPCiOwyH8mQaiBiXSW3B8JOsqANiSSZRoeV0aKjeV4sjAKAmVp3d
l399I3XidH1tXjg1JPwHMalG5L0VqkDUAHIcSZCHmgIHB1fWeAq6P/lQwEFPqODD
B15G+O/T3+ycBgN2R9uqzUzHZOhX9+D/9h8iEQAvJfNxHwokC7gORGxXlglY1Nph
1Y9iPpDPTfRj0sCryxepln7hj75yLWj3GmnBZrWQW+c6Ocb3eAHO0w7qiBwrJQwk
A8W5inNN7tvsE8ZP26BZrpYG2rYntuIScy+Cs6PGy7ft57BAE3mbuQGkJgbBhikv
g14GVecXkD1Mug==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:36:25 2026 by rpki-client