
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: oWD/sKzyRI2rv/SGau4nU0AtXjuEm4Ybic1wOCPg8ic=
Subject key identifier: E7:33:29:CC:21:C6:CF:20:D1:02:AA:1D:E6:55:B8:B1:80:E7:9C:E4
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 01A0D07F9DF0C9E93694C31AAF48F33607E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 23:00:19 +0000
Manifest this update: Wed 23 Sep 2026 23:00:19 +0000
Manifest next update: Thu 24 Sep 2026 23:00:19 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: h+T8nL/yJQn/jBwU08Mrt9ur4cYKECt1mBFTrCj2c+0=)
2: NuU8W7V2quwnNAYLT9_LV52Vbbk.roa (hash: SGhDxlcXeif+7R/rxn7Q7SC8rZycoqSPaENJlB28piw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:9d:f0:c9:e9:36:94:c3:1a:af:48:f3:36:07:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Sep 23 23:00:19 2026 GMT
Not After : Sep 24 23:00:19 2026 GMT
Subject: CN=e73329cc21c6cf20d102aa1de655b8b180e79ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:9e:92:45:bf:7f:c4:a6:05:e4:f4:8f:af:
d3:13:9e:a3:68:89:ff:48:ca:14:e7:22:8d:c5:e5:
b3:66:6c:b7:67:bc:7f:80:f1:21:85:d2:3b:38:7c:
d9:78:3b:b6:36:a8:0e:67:44:63:ba:4f:c5:42:7b:
54:2b:f7:bc:6b:0d:90:04:ac:ba:4c:1b:2c:c0:4c:
67:40:3d:6f:93:0c:2c:fb:13:b0:64:8a:54:c6:54:
68:d0:f9:be:93:e0:26:79:18:a5:53:6d:68:c3:f8:
a4:5c:42:1b:e4:a2:65:f6:5a:a1:75:19:a1:60:cb:
3a:01:a0:24:77:03:78:49:5b:5f:a6:07:39:0b:64:
cf:e5:17:0b:48:de:c6:a8:e3:2d:c4:2b:01:5d:29:
72:6b:5d:eb:1b:a3:02:53:48:1e:59:52:7c:fa:ab:
e3:c6:f5:0c:c1:d7:bc:fe:16:15:ca:67:e5:62:b4:
e3:16:00:d6:91:7e:51:55:a4:30:af:27:98:b5:4c:
f0:67:e1:41:73:61:a9:9d:e0:c5:0e:ab:09:0f:af:
51:a6:a8:f7:c5:51:84:6e:b5:6f:0b:25:85:78:ae:
03:08:87:e1:83:7e:9e:57:46:80:15:27:fa:e8:79:
25:52:f9:ad:8f:17:87:a8:f8:05:0c:45:e2:91:e3:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:33:29:CC:21:C6:CF:20:D1:02:AA:1D:E6:55:B8:B1:80:E7:9C:E4
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e6:3c:76:74:c6:2e:a7:f3:4d:58:ad:6d:78:b4:9a:04:60:
7a:38:f1:21:bb:23:3f:be:94:dc:f0:60:25:5d:1a:91:5f:7f:
fd:28:b4:c4:b2:ff:33:99:28:1e:21:7b:ee:5f:37:49:57:8a:
7b:06:49:3c:4c:22:0b:65:71:c0:da:64:29:77:dc:c0:41:de:
bb:93:e7:95:0b:fd:e7:1b:2e:2b:e2:eb:96:70:42:49:25:3b:
bb:aa:a3:52:f6:e6:1c:29:ee:05:75:bf:1c:95:e5:7c:91:96:
20:37:b6:ee:dd:ef:96:c0:73:9b:0f:98:7c:ea:85:50:a1:88:
9f:32:bb:b1:17:af:18:4f:45:18:e8:f3:2f:e7:89:1b:80:4a:
90:b9:d3:49:ce:fc:5c:71:b5:49:9c:32:96:62:27:d2:f1:74:
dc:68:39:89:5f:b0:da:f5:1b:4c:d8:34:4c:3f:65:45:d0:e0:
e8:58:26:55:20:f9:e6:6b:ec:ba:c7:d9:50:5b:1c:a6:07:80:
3f:bd:ba:9c:15:66:4e:20:19:5b:d2:9e:ee:6d:a3:a8:68:3d:
b1:11:da:73:76:97:6d:83:54:52:5a:af:1a:dd:e1:da:27:d6:
e0:89:33:93:81:1a:24:63:39:f6:9a:2a:ed:6e:6d:ab:fc:95:
8f:a1:0b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQf53wyek2lMMar0jzNgfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjY4MWNhYTFkMzdlNTg5OWJhMjdkZmJjMzY5NjBlMDZi
NWQzZjIwHhcNMjYwOTIzMjMwMDE5WhcNMjYwOTI0MjMwMDE5WjAzMTEwLwYDVQQD
EyhlNzMzMjljYzIxYzZjZjIwZDEwMmFhMWRlNjU1YjhiMTgwZTc5Y2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+mekkW/f8SmBeT0j6/TE56jaIn/
SMoU5yKNxeWzZmy3Z7x/gPEhhdI7OHzZeDu2NqgOZ0Rjuk/FQntUK/e8aw2QBKy6
TBsswExnQD1vkwws+xOwZIpUxlRo0Pm+k+AmeRilU21ow/ikXEIb5KJl9lqhdRmh
YMs6AaAkdwN4SVtfpgc5C2TP5RcLSN7GqOMtxCsBXSlya13rG6MCU0geWVJ8+qvj
xvUMwde8/hYVymflYrTjFgDWkX5RVaQwryeYtUzwZ+FBc2GpneDFDqsJD69Rpqj3
xVGEbrVvCyWFeK4DCIfhg36eV0aAFSf66HklUvmtjxeHqPgFDEXikeO5owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOczKcwhxs8g0QKqHeZVuLGA55zkMB8GA1UdIwQY
MBaAFPJmgcqh035Ymbon37w2lg4GtdPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMt
NjQwNzVjMmFlNDYzLzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMtNjQwNzVjMmFlNDYz
LzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+Y8dnTG
LqfzTVitbXi0mgRgejjxIbsjP76U3PBgJV0akV9//Si0xLL/M5koHiF77l83SVeK
ewZJPEwiC2VxwNpkKXfcwEHeu5PnlQv95xsuK+LrlnBCSSU7u6qjUvbmHCnuBXW/
HJXlfJGWIDe27t3vlsBzmw+YfOqFUKGInzK7sRevGE9FGOjzL+eJG4BKkLnTSc78
XHG1SZwylmIn0vF03Gg5iV+w2vUbTNg0TD9lRdDg6FgmVSD55mvsusfZUFscpgeA
P726nBVmTiAZW9Ke7m2jqGg9sRHac3aXbYNUUlqvGt3h2ifW4Ikzk4EaJGM59poq
7W5tq/yVj6ELMA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:09:59 2026 by rpki-client