Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: eGZ9KOPv7H8IDACAn1Q6efB2Go8UyzsMQMMI8mcLyJY=
Subject key identifier: B5:8F:23:8A:A9:0D:2D:6C:48:2E:D0:5D:76:D8:57:6C:1D:80:CD:E2
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 01A0D83BAF7FA50566133BD65FE1E647BC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 17E8
Signing time: Fri 25 Sep 2026 11:03:05 +0000
Manifest this update: Fri 25 Sep 2026 11:03:05 +0000
Manifest next update: Sat 26 Sep 2026 11:03:05 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: 4rUCkPGiavD4hFONWsPIBBxWN+VCcDRCKUJBKLyg9mk=)
2: jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa (hash: 54K+k1GuCsLHpi8qK3vvD17O4Ihyjwnmzr57+VpXx/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:af:7f:a5:05:66:13:3b:d6:5f:e1:e6:47:bc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Sep 25 11:03:05 2026 GMT
Not After : Sep 26 11:03:05 2026 GMT
Subject: CN=b58f238aa90d2d6c482ed05d76d8576c1d80cde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:50:8e:7f:fe:72:2c:77:45:f2:b0:d5:9f:
9a:c6:c8:a7:c5:9d:a4:0c:05:2e:2b:c0:e0:99:3c:
26:d0:c2:63:5f:9e:f1:73:16:82:b5:6a:e3:94:40:
8d:f2:a8:32:d2:f8:95:0a:de:66:1b:2e:86:00:9e:
21:cc:6f:34:f7:62:b3:ac:a2:44:5c:cc:45:98:e0:
52:a0:4e:98:4d:ab:8c:51:d5:6e:a1:3a:03:cd:89:
e3:75:ce:e8:f7:ae:c0:a3:44:41:2b:06:fd:bc:e5:
97:42:29:fb:50:ac:ed:7a:c5:19:dc:6d:6b:05:03:
64:11:f3:1d:04:2d:0b:ae:0e:b8:4b:9c:5c:4d:31:
4b:10:d1:cd:f4:e6:b0:14:44:96:75:05:bb:a2:cd:
ed:b4:49:4f:2f:db:37:de:81:4b:5f:cc:8a:99:c3:
b3:73:42:58:41:e4:6f:47:06:0c:3d:77:97:80:c5:
f0:1c:c9:69:4c:e7:6d:9d:ed:f0:d2:17:06:8e:ae:
68:4d:8b:5f:e1:ea:3a:45:00:06:3a:b3:dc:26:45:
d3:4f:68:6f:b8:96:ab:ae:58:cf:e0:ee:2a:3e:70:
50:ce:11:ce:b8:70:d7:0c:5b:4b:14:48:b6:23:f9:
1e:88:ad:c8:3e:fa:c0:c3:10:91:38:76:31:b9:75:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8F:23:8A:A9:0D:2D:6C:48:2E:D0:5D:76:D8:57:6C:1D:80:CD:E2
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:71:9c:56:93:8c:a5:a8:1e:38:44:c1:5f:5c:0b:ee:80:bb:
fc:85:1a:32:0e:b1:f7:a6:11:9e:81:66:e8:4e:53:70:e4:71:
46:91:29:70:56:2b:33:c9:78:6f:79:d7:b8:1c:fd:66:3c:be:
79:5a:77:8c:d8:39:e8:68:96:cd:0b:da:d6:f8:33:b8:c4:ee:
6c:1d:cb:9e:11:04:ba:ef:de:80:af:b7:87:cb:74:2f:00:16:
71:00:be:d7:a0:ba:6d:71:af:15:0a:33:ea:c9:1a:47:00:6d:
25:d1:a7:38:7d:b7:0d:b4:8c:cd:9a:af:46:3e:4d:ab:e0:c3:
11:37:a6:31:54:a6:10:51:88:ad:c8:1c:72:73:bb:e8:33:d1:
a6:87:ab:d7:e7:94:33:96:a1:0a:da:46:ae:dc:1a:f5:0d:ec:
d4:f7:53:a8:0d:e3:47:95:25:97:ac:b5:86:a7:38:9b:0a:3f:
4f:64:5e:43:09:68:85:11:3e:d5:70:34:89:74:a5:98:55:07:
2b:00:ae:1e:fd:67:af:80:f8:2c:8c:12:ca:b2:b2:82:c4:94:
70:ff:bd:22:b1:1a:52:18:8d:20:ba:40:24:bf:bb:60:e2:25:
0b:ce:17:13:fc:04:c9:97:e5:53:ed:aa:aa:9f:a8:22:d5:36:
b5:2c:9e:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYO69/pQVmEzvWX+HmR7wrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNThiYzA4NjQxMmY0ZDJjNTRmYTA3MDJkOTJjZTI1NDk2
Y2U0NzkwHhcNMjYwOTI1MTEwMzA1WhcNMjYwOTI2MTEwMzA1WjAzMTEwLwYDVQQD
EyhiNThmMjM4YWE5MGQyZDZjNDgyZWQwNWQ3NmQ4NTc2YzFkODBjZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowFQjn/+cix3RfKw1Z+axsinxZ2k
DAUuK8DgmTwm0MJjX57xcxaCtWrjlECN8qgy0viVCt5mGy6GAJ4hzG8092KzrKJE
XMxFmOBSoE6YTauMUdVuoToDzYnjdc7o967Ao0RBKwb9vOWXQin7UKztesUZ3G1r
BQNkEfMdBC0Lrg64S5xcTTFLENHN9OawFESWdQW7os3ttElPL9s33oFLX8yKmcOz
c0JYQeRvRwYMPXeXgMXwHMlpTOdtne3w0hcGjq5oTYtf4eo6RQAGOrPcJkXTT2hv
uJarrljP4O4qPnBQzhHOuHDXDFtLFEi2I/keiK3IPvrAwxCROHYxuXX+pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWPI4qpDS1sSC7QXXbYV2wdgM3iMB8GA1UdIwQY
MBaAFH9YvAhkEvTSxU+gcC2SziVJbOR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjkt
NTAxMGQwNWY5OWE4LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjktNTAxMGQwNWY5OWE4
LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHGcVpOM
pageOETBX1wL7oC7/IUaMg6x96YRnoFm6E5TcORxRpEpcFYrM8l4b3nXuBz9Zjy+
eVp3jNg56GiWzQva1vgzuMTubB3LnhEEuu/egK+3h8t0LwAWcQC+16C6bXGvFQoz
6skaRwBtJdGnOH23DbSMzZqvRj5Nq+DDETemMVSmEFGIrcgccnO76DPRpoer1+eU
M5ahCtpGrtwa9Q3s1PdTqA3jR5Ull6y1hqc4mwo/T2ReQwlohRE+1XA0iXSlmFUH
KwCuHv1nr4D4LIwSyrKygsSUcP+9IrEaUhiNILpAJL+7YOIlC84XE/wEyZflU+2q
qp+oItU2tSye2w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:57:50 2026 by rpki-client