Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: sMznaDui6r/Sjt7ORNdHSQ/6dlKxb6z4FVw1g6KaM50=
Subject key identifier: 83:C5:05:BF:BA:C6:F9:0F:DD:04:64:60:3F:E9:BA:89:FD:A4:CC:46
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 01A0DD98825DDEB4618E86A77FC91193743F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 11AD
Signing time: Sat 26 Sep 2026 12:02:34 +0000
Manifest this update: Sat 26 Sep 2026 12:02:34 +0000
Manifest next update: Sun 27 Sep 2026 12:02:34 +0000
Files and hashes: 1: XEPF7uppLjcGaqRN3wLfKBoo6xs.roa (hash: rUx2aHlQsnFopfmDQOlAInYswjrrWcWiZT3IoOgNBhk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: dl4vuQ3iC6+iGX1KeMhVX1m53YoRGa2SrESn8jAco+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:82:5d:de:b4:61:8e:86:a7:7f:c9:11:93:74:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Sep 26 12:02:34 2026 GMT
Not After : Sep 27 12:02:34 2026 GMT
Subject: CN=83c505bfbac6f90fdd0464603fe9ba89fda4cc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:45:fe:0d:43:58:d4:ee:2f:1c:a5:08:29:
1e:18:86:ef:c4:dc:67:3a:58:36:95:70:5e:ef:20:
8b:9f:14:b3:93:55:df:61:be:d7:03:d4:8c:04:db:
e5:08:f5:ae:31:78:36:99:8b:0f:af:ff:b5:8a:6e:
be:77:f8:b9:f4:6b:d1:ea:4e:53:7c:7f:e0:94:11:
2e:67:9e:50:89:cc:f9:83:36:4d:9f:0f:80:15:95:
90:7c:32:c6:f5:3a:6e:3e:fd:62:90:42:d8:7e:36:
21:00:fe:23:3c:aa:83:5f:93:98:0c:8e:25:24:0b:
55:fe:9d:57:c1:0a:43:ee:95:fe:a3:c3:99:81:fb:
ea:f7:7c:b1:79:35:4f:7c:03:8f:b2:6e:12:2e:d2:
a8:a0:58:31:33:dc:52:5e:09:0b:56:ad:e1:8d:d6:
ad:c6:1f:49:25:5b:8f:53:2c:a5:cd:5c:58:59:2f:
8c:fd:3f:8c:7c:c6:9b:e6:87:01:a4:dd:e5:7b:b3:
de:cb:a0:26:f4:dd:93:2e:af:92:34:cb:35:4b:b7:
d4:c5:56:7c:c4:7c:39:5a:32:f9:40:ef:ad:fc:01:
9a:c6:b8:3b:25:3d:c7:f1:84:9d:a7:3f:67:b2:61:
52:7e:ee:e3:a6:15:80:d5:52:4e:71:f7:8c:a6:88:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C5:05:BF:BA:C6:F9:0F:DD:04:64:60:3F:E9:BA:89:FD:A4:CC:46
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ff:d4:8a:e7:9d:d3:ed:47:eb:a5:7a:aa:a4:75:2a:29:60:
41:8a:c8:3d:e9:84:a3:ac:5d:27:4d:5e:a0:c8:ac:3a:a5:5e:
59:ba:41:e3:f7:c1:3b:61:a9:ac:a4:5d:6a:4e:9f:1f:98:50:
e5:5a:9d:53:42:b5:df:76:10:b7:52:c7:06:99:86:32:6f:30:
11:b8:b5:f5:3b:bf:47:46:b9:97:f2:c2:54:28:fc:6d:bc:4a:
47:53:38:a2:84:56:7a:33:d3:c8:ef:09:58:7c:3a:bd:c4:ef:
7c:76:81:31:bd:9e:45:a4:f1:4f:ac:4b:69:ec:fd:1a:0b:33:
88:3d:72:bf:62:23:5d:ed:d0:a1:88:f8:6c:01:c8:53:36:43:
db:87:31:9f:48:bf:db:05:d2:99:ad:a9:9d:cc:2f:6a:b0:5f:
bd:5d:07:43:75:62:60:bd:54:04:9b:0b:00:65:ed:6c:b7:95:
aa:f0:3f:e9:6f:97:6e:54:56:08:fe:7d:10:41:54:52:5a:bf:
08:ba:60:e8:fe:40:97:76:82:26:08:80:dc:ef:be:e6:55:c3:
cb:34:44:67:49:72:3b:41:7d:84:f3:6c:36:51:ad:46:fa:07:
c3:e8:72:6f:18:72:0e:b8:0a:d8:14:c9:5f:75:63:3c:c5:b2:
be:cc:94:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdmIJd3rRhjoanf8kRk3Q/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYzRjZTc4YTRkMThjYTZlZjMxMDhmNGEzNjU5MDZkYTZi
NmI3ZjMwHhcNMjYwOTI2MTIwMjM0WhcNMjYwOTI3MTIwMjM0WjAzMTEwLwYDVQQD
Eyg4M2M1MDViZmJhYzZmOTBmZGQwNDY0NjAzZmU5YmE4OWZkYTRjYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIhF/g1DWNTuLxylCCkeGIbvxNxn
Olg2lXBe7yCLnxSzk1XfYb7XA9SMBNvlCPWuMXg2mYsPr/+1im6+d/i59GvR6k5T
fH/glBEuZ55Qicz5gzZNnw+AFZWQfDLG9TpuPv1ikELYfjYhAP4jPKqDX5OYDI4l
JAtV/p1XwQpD7pX+o8OZgfvq93yxeTVPfAOPsm4SLtKooFgxM9xSXgkLVq3hjdat
xh9JJVuPUyylzVxYWS+M/T+MfMab5ocBpN3le7Pey6Am9N2TLq+SNMs1S7fUxVZ8
xHw5WjL5QO+t/AGaxrg7JT3H8YSdpz9nsmFSfu7jphWA1VJOcfeMpoiL+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPFBb+6xvkP3QRkYD/puon9pMxGMB8GA1UdIwQY
MBaAFP/Eznik0Yym7zEI9KNlkG2mtrfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAt
OGQxMDY0ODNlMzZlLzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAtOGQxMDY0ODNlMzZl
LzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApP/Uiued
0+1H66V6qqR1KilgQYrIPemEo6xdJ01eoMisOqVeWbpB4/fBO2GprKRdak6fH5hQ
5VqdU0K133YQt1LHBpmGMm8wEbi19Tu/R0a5l/LCVCj8bbxKR1M4ooRWejPTyO8J
WHw6vcTvfHaBMb2eRaTxT6xLaez9GgsziD1yv2IjXe3QoYj4bAHIUzZD24cxn0i/
2wXSma2pncwvarBfvV0HQ3ViYL1UBJsLAGXtbLeVqvA/6W+XblRWCP59EEFUUlq/
CLpg6P5Al3aCJgiA3O++5lXDyzREZ0lyO0F9hPNsNlGtRvoHw+hybxhyDrgK2BTJ
X3VjPMWyvsyUKw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:41:18 2026 by rpki-client