Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: 9aFIN076GhYnBumkuZj044nYY74s40QaaNDreCiZSKQ=
Subject key identifier: 30:0B:CF:75:86:AC:83:0F:F2:75:27:47:0C:04:D3:9A:9C:B0:AD:E7
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 01A0CEFF227F12DFD3F51A51B4F8C02F0086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 08D4
Signing time: Wed 23 Sep 2026 16:00:21 +0000
Manifest this update: Wed 23 Sep 2026 16:00:21 +0000
Manifest next update: Thu 24 Sep 2026 16:00:21 +0000
Files and hashes: 1: 6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa (hash: H1Tpf8B6yk+21S4AcVHmhmY0uxxPu+V39L+M+Ee8RSU=)
2: da64birjCL1XOPzp_ziknWIOF3Y.roa (hash: QMnviuNiCANn1NxPMK2JmFlgecXmL0gQbTXvBPWsqD4=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: lNLmF/x1d6EviNtKWNBLAqvmrzlikwQ7thr3ZzPgmWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:22:7f:12:df:d3:f5:1a:51:b4:f8:c0:2f:00:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Sep 23 16:00:21 2026 GMT
Not After : Sep 24 16:00:21 2026 GMT
Subject: CN=300bcf7586ac830ff27527470c04d39a9cb0ade7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:6a:7c:4e:4b:3e:59:28:6d:32:f0:84:6f:
60:0d:15:20:f1:ef:a3:9a:8e:50:b9:ac:5b:67:ca:
44:9e:78:b5:49:3b:c9:cf:e9:72:58:7f:36:b3:eb:
b6:d7:da:f4:5f:6b:24:38:8d:01:2d:68:0f:8f:c8:
a3:6e:3c:27:46:97:17:24:a0:54:2a:79:ed:b3:d0:
bf:13:0b:f8:26:1c:a6:b1:bc:12:f8:2f:6a:ee:61:
53:12:3d:9f:7f:6f:46:de:94:bb:ee:19:fe:55:0e:
f4:16:de:5e:73:bd:32:cb:c7:18:86:06:3b:ec:e5:
ba:1e:d8:48:0d:68:55:83:93:b3:7c:a1:52:2f:d3:
47:b6:83:8d:04:93:a5:9b:85:ec:41:3c:67:23:95:
ea:bc:b8:64:77:44:fc:b8:cb:4c:47:d3:aa:12:d6:
7c:d4:9a:f7:11:61:ea:81:68:d7:07:04:1e:d3:b9:
f0:b4:8e:cc:fd:83:d6:ad:1c:d2:cb:7e:64:07:f0:
10:a3:22:71:f7:db:a9:3c:67:a8:3d:42:14:f5:f5:
75:3a:ff:a5:2f:e9:01:dc:7b:99:45:d6:87:27:c2:
a4:a9:45:1c:09:1d:6a:42:ac:d4:4d:1f:ba:38:19:
72:58:95:10:1f:5d:37:3f:30:77:0f:fc:84:29:a3:
7a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0B:CF:75:86:AC:83:0F:F2:75:27:47:0C:04:D3:9A:9C:B0:AD:E7
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:81:d4:41:cf:6e:7b:b2:2d:3f:9a:34:6a:65:de:ee:e1:6e:
d0:b6:18:c5:91:17:9f:d6:6a:23:05:78:d5:71:11:5b:c1:b8:
d7:8a:e9:60:bf:18:54:91:7f:93:83:19:67:41:e1:70:58:6b:
45:13:c1:ca:b6:bb:d9:f4:38:fe:31:f5:c7:3f:ed:04:a4:ec:
07:73:92:69:4b:04:3c:28:25:d5:8d:59:99:de:e6:16:b6:e4:
a9:aa:f4:dc:33:b7:ac:49:06:a7:bd:51:b3:41:c6:44:cf:24:
7e:d8:2e:32:12:7d:40:e1:4e:63:cf:1f:3c:c0:16:58:74:7a:
f6:01:0a:fa:f8:73:dd:88:9c:53:d7:e4:34:e8:e2:81:1c:c6:
8f:d5:e5:96:5f:9e:5a:f0:20:8f:c0:c5:4b:7a:4e:58:3b:81:
5d:d1:5f:b8:78:87:37:ca:06:18:e2:53:a1:95:6e:ca:98:47:
9d:61:4e:37:be:6f:89:2a:39:c4:0a:9e:39:40:3a:b7:14:71:
0b:c2:cd:b4:19:c9:3c:77:6e:3a:5e:e6:2e:47:9f:7c:a8:7e:
3f:db:dc:95:98:99:d9:b6:21:73:d6:ed:94:62:6b:05:a1:f6:
8f:63:1a:de:36:06:e6:eb:82:e6:b4:78:5f:bb:8b:67:14:39:
af:c9:0d:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/yJ/Et/T9RpRtPjALwCGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzRiY2RkNTMxMmY4YTdjMzNkZTRiN2Q3NWMxNWI0Y2Ji
YzFkZGEwHhcNMjYwOTIzMTYwMDIxWhcNMjYwOTI0MTYwMDIxWjAzMTEwLwYDVQQD
EygzMDBiY2Y3NTg2YWM4MzBmZjI3NTI3NDcwYzA0ZDM5YTljYjBhZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBNqfE5LPlkobTLwhG9gDRUg8e+j
mo5QuaxbZ8pEnni1STvJz+lyWH82s+u219r0X2skOI0BLWgPj8ijbjwnRpcXJKBU
Knnts9C/Ewv4JhymsbwS+C9q7mFTEj2ff29G3pS77hn+VQ70Ft5ec70yy8cYhgY7
7OW6HthIDWhVg5OzfKFSL9NHtoONBJOlm4XsQTxnI5XqvLhkd0T8uMtMR9OqEtZ8
1Jr3EWHqgWjXBwQe07nwtI7M/YPWrRzSy35kB/AQoyJx99upPGeoPUIU9fV1Ov+l
L+kB3HuZRdaHJ8KkqUUcCR1qQqzUTR+6OBlyWJUQH103PzB3D/yEKaN67QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDALz3WGrIMP8nUnRwwE05qcsK3nMB8GA1UdIwQY
MBaAFJfEvN1TEvinwz3kt9dcFbTLvB3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUt
ZTkzYmRiOGQ5Yzg1LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUtZTkzYmRiOGQ5Yzg1
LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIHUQc9u
e7ItP5o0amXe7uFu0LYYxZEXn9ZqIwV41XERW8G414rpYL8YVJF/k4MZZ0HhcFhr
RRPByra72fQ4/jH1xz/tBKTsB3OSaUsEPCgl1Y1Zmd7mFrbkqar03DO3rEkGp71R
s0HGRM8kftguMhJ9QOFOY88fPMAWWHR69gEK+vhz3YicU9fkNOjigRzGj9Xlll+e
WvAgj8DFS3pOWDuBXdFfuHiHN8oGGOJToZVuyphHnWFON75viSo5xAqeOUA6txRx
C8LNtBnJPHduOl7mLkeffKh+P9vclZiZ2bYhc9btlGJrBaH2j2Ma3jYG5uuC5rR4
X7uLZxQ5r8kNfg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:00:01 2026 by rpki-client