Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: SuefL5d5fXJlyIWlLu5SKPoW3sprVYtqw5TVZcZpyb0=
Subject key identifier: D9:30:44:F5:8C:04:F6:30:99:C7:0B:A2:28:A6:23:F0:F2:6D:59:6C
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 01A10CCB5F6DC00FAAECFE972A7ED1BD6FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 1450
Signing time: Mon 05 Oct 2026 16:00:17 +0000
Manifest this update: Mon 05 Oct 2026 16:00:17 +0000
Manifest next update: Tue 06 Oct 2026 16:00:17 +0000
Files and hashes: 1: 2hKU1NYjNBDhpco5HEAK3um-kbE.roa (hash: YhjeByYxX6wVLssUtZI4v3Qulxa9a1zwl57K6O3z8yo=)
2: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: V+bYI/LXDZEsJgJNkNA4YY2spxXqZpaw1QcUhi88ack=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:cb:5f:6d:c0:0f:aa:ec:fe:97:2a:7e:d1:bd:6f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Oct 5 16:00:17 2026 GMT
Not After : Oct 6 16:00:17 2026 GMT
Subject: CN=d93044f58c04f63099c70ba228a623f0f26d596c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:7c:ae:20:6c:77:44:1f:a2:80:0b:4a:a8:
6c:2f:2a:0e:ca:12:f0:8a:9c:c5:18:eb:e9:f7:c7:
9b:4a:c7:9d:4f:5f:36:e7:83:17:ef:90:87:c0:08:
0e:c0:6a:55:c6:ef:58:5e:64:56:86:bb:07:ea:0b:
6e:cd:ac:ff:5a:76:50:94:4b:92:fe:1b:9a:9c:1c:
f0:fb:94:7c:71:7b:67:f2:aa:4e:53:15:d1:49:4a:
82:3b:78:95:60:31:71:61:58:7f:f7:86:43:89:cd:
0c:c0:a3:b0:f2:c4:b1:62:ad:7c:85:a7:01:1e:ae:
ab:94:f2:7e:67:26:a4:20:54:aa:26:85:cf:f0:d0:
9b:c6:21:75:98:22:08:45:bb:4a:71:62:ce:49:18:
d8:08:1f:48:0e:5b:7b:20:06:41:71:77:92:4d:6d:
57:e7:4d:c7:c4:76:7e:29:b9:d6:e4:28:95:c0:dd:
41:fb:83:bb:de:db:77:e0:a1:eb:bf:a9:7d:5e:a2:
a0:31:0a:a3:24:4f:97:18:e4:8f:f6:f7:ea:4c:a2:
07:7b:b9:26:f8:c9:aa:56:c0:63:d7:84:a9:e5:69:
18:14:48:f0:37:c0:fa:8a:cb:95:03:63:c7:70:29:
2d:71:b7:1d:46:63:c0:33:7b:55:1b:2d:56:1c:79:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:30:44:F5:8C:04:F6:30:99:C7:0B:A2:28:A6:23:F0:F2:6D:59:6C
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cc:91:48:b8:a3:8a:07:a9:78:4c:f5:db:02:7d:82:8b:50:
1b:cf:cc:5f:1c:86:bf:98:e0:cd:91:68:08:20:48:4c:30:01:
d7:b6:f7:34:b8:6d:81:8c:21:84:45:c1:f4:5d:8e:9c:62:45:
74:e7:8f:60:66:c8:99:07:2e:5c:03:10:3a:b7:5e:52:86:e6:
93:53:34:55:0c:ed:0f:34:9e:d4:a0:62:36:3c:ec:9e:90:56:
2c:aa:55:2e:10:ff:c9:77:86:7a:9f:a1:32:a3:2d:2e:f3:05:
9b:03:4c:dd:5c:64:9e:61:29:f5:52:d2:42:bb:ff:4e:e6:10:
7c:fb:76:93:63:fc:29:f5:06:73:3c:3b:19:69:b4:50:7d:52:
89:20:c6:e9:40:c8:6c:af:e4:f6:44:f1:24:8f:6a:eb:01:ec:
8a:24:27:42:4d:73:0d:95:37:fc:c0:72:d5:21:9d:25:e3:95:
dc:0c:21:31:0a:5b:bb:7a:4a:5b:c3:4d:70:be:1b:59:d4:58:
bc:5c:68:ca:c4:8a:82:28:2e:b9:f7:8e:26:ef:1a:58:f9:26:
39:60:8d:1a:55:dc:28:c6:00:4f:7f:2c:40:30:a6:03:7d:7f:
c9:9e:e4:5b:14:79:02:f2:a9:f3:14:5c:27:be:f7:73:38:0f:
a3:74:48:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEMy19twA+q7P6XKn7RvW/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNzhhY2JjYzQ2ZjEzM2VmZDM5M2Y1MTE2MGZkYmI3NjA3
ZTFlMTYwHhcNMjYxMDA1MTYwMDE3WhcNMjYxMDA2MTYwMDE3WjAzMTEwLwYDVQQD
EyhkOTMwNDRmNThjMDRmNjMwOTljNzBiYTIyOGE2MjNmMGYyNmQ1OTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Z8riBsd0QfooALSqhsLyoOyhLw
ipzFGOvp98ebSsedT18254MX75CHwAgOwGpVxu9YXmRWhrsH6gtuzaz/WnZQlEuS
/huanBzw+5R8cXtn8qpOUxXRSUqCO3iVYDFxYVh/94ZDic0MwKOw8sSxYq18hacB
Hq6rlPJ+ZyakIFSqJoXP8NCbxiF1mCIIRbtKcWLOSRjYCB9IDlt7IAZBcXeSTW1X
503HxHZ+KbnW5CiVwN1B+4O73tt34KHrv6l9XqKgMQqjJE+XGOSP9vfqTKIHe7km
+MmqVsBj14Sp5WkYFEjwN8D6isuVA2PHcCktcbcdRmPAM3tVGy1WHHmgpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkwRPWMBPYwmccLoiimI/DybVlsMB8GA1UdIwQY
MBaAFPJ4rLzEbxM+/Tk/URYP27dgfh4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81MzcyNjctYjI0My00NjU3LTk5ZmYt
OTRiNTE0NDMzYzExLzEvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS81MzcyNjctYjI0My00NjU3LTk5ZmYtOTRiNTE0NDMzYzEx
LzEvOG5pc3ZNUnZFejc5T1Q5UkZnX2J0MkItSGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8yRSLij
igepeEz12wJ9gotQG8/MXxyGv5jgzZFoCCBITDAB17b3NLhtgYwhhEXB9F2OnGJF
dOePYGbImQcuXAMQOrdeUobmk1M0VQztDzSe1KBiNjzsnpBWLKpVLhD/yXeGep+h
MqMtLvMFmwNM3VxknmEp9VLSQrv/TuYQfPt2k2P8KfUGczw7GWm0UH1SiSDG6UDI
bK/k9kTxJI9q6wHsiiQnQk1zDZU3/MBy1SGdJeOV3AwhMQpbu3pKW8NNcL4bWdRY
vFxoysSKgiguufeOJu8aWPkmOWCNGlXcKMYAT38sQDCmA31/yZ7kWxR5AvKp8xRc
J773czgPo3RIHA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:18:10 2026 by rpki-client