Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: 76cv9GaZwuhEYk1b+zYz1Y9lUVirIDoDAKEQ1Z6okU0=
Subject key identifier: D3:90:CA:C8:D0:B0:45:7B:79:9C:AB:D0:E5:C1:DC:C0:BE:CA:9F:E8
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 01A0CFA4B5A50CDC1381BABA3D384C35DEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 19:01:13 +0000
Manifest this update: Wed 23 Sep 2026 19:01:13 +0000
Manifest next update: Thu 24 Sep 2026 19:01:13 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: DREPbR82AarsPJjzRsppDxyf1Ff9qokQ5OfVimm816Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:b5:a5:0c:dc:13:81:ba:ba:3d:38:4c:35:de:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Sep 23 19:01:13 2026 GMT
Not After : Sep 24 19:01:13 2026 GMT
Subject: CN=d390cac8d0b0457b799cabd0e5c1dcc0beca9fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:44:6b:f2:84:67:3f:db:aa:0f:fc:52:f4:
39:88:28:75:70:6f:6e:0a:61:ba:94:1a:fd:9f:a2:
f3:ad:d2:e2:35:ef:ce:2b:b6:b8:5d:26:f2:a3:f9:
5d:6b:ef:e0:58:11:8c:02:11:3f:0a:e9:f5:1a:00:
e2:24:db:46:2e:ff:c2:71:f3:a6:53:6a:89:3b:1f:
ea:a4:a2:5e:15:79:2d:aa:32:38:b8:a1:25:33:2a:
ab:0b:96:17:d4:e6:70:6b:56:45:a3:23:40:54:04:
29:80:07:3f:9e:1a:20:35:06:a0:8a:82:8b:49:1f:
32:fb:64:1a:54:11:07:57:4e:7c:89:8c:73:bc:64:
e3:60:30:5d:ee:ca:e5:bd:8e:33:b7:4a:fd:7a:6f:
5e:f2:b1:f9:5a:f8:8a:00:f4:81:69:0d:62:53:ec:
28:69:e3:8b:ab:61:13:a6:3e:a6:c2:de:cb:08:61:
4e:3f:90:e9:2e:5d:1e:fb:0e:f0:f0:7f:14:1d:cf:
87:f5:98:9b:9f:a4:a5:bc:02:0a:97:21:95:df:46:
1e:0c:fd:91:a0:8a:e1:25:a1:92:1b:79:fb:cf:f7:
e0:23:91:e8:3f:ae:78:64:7b:79:b7:84:42:a6:d9:
57:ea:a1:df:90:36:a2:81:63:b5:96:c2:eb:d0:d3:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:90:CA:C8:D0:B0:45:7B:79:9C:AB:D0:E5:C1:DC:C0:BE:CA:9F:E8
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:79:74:04:1d:c7:2d:94:9a:be:8c:60:e4:cf:34:08:1a:44:
44:61:1e:06:86:8c:49:65:4e:2f:b2:43:21:d4:6e:7e:97:3d:
d6:13:89:54:19:75:f0:70:5d:03:9c:4e:59:e3:c3:b2:a2:87:
6b:83:24:f6:f9:3e:a2:c6:ed:0d:90:09:99:66:b3:b3:85:23:
6f:4d:45:60:44:a7:20:89:7b:0e:1a:34:aa:59:a0:7b:9c:44:
79:e4:46:1c:65:a2:d7:ac:e4:d6:ff:0e:00:7e:7b:d3:ca:85:
39:69:6f:e8:07:b4:0b:e3:61:c5:c6:27:9e:ce:81:e0:43:3e:
e1:fd:af:09:1a:a6:49:57:c4:0f:e9:50:28:29:c4:4a:22:47:
fb:66:6e:6d:c6:8b:8f:08:89:8c:36:92:94:ca:a3:3f:61:88:
c2:68:84:00:a2:1f:ec:04:17:ee:47:27:c3:a9:09:54:6c:15:
0b:7b:12:d7:b9:76:89:00:6b:bf:1f:be:c9:94:8d:56:82:7d:
2a:83:d0:77:69:ac:76:39:0b:1c:c4:ab:0c:43:5e:99:64:a9:
71:a0:f4:df:40:33:2d:f1:d1:4d:09:d2:a3:ea:a1:65:b3:eb:
07:1c:fb:ee:e5:52:60:49:4e:0d:36:bd:92:b7:58:42:e2:6c:
2b:6e:07:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpLWlDNwTgbq6PThMNd7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjIyMGI2OTZlMmU3NjY1MTZjMDU3NDNkMTM3ZGJiYzE3
ZmQyNjEwHhcNMjYwOTIzMTkwMTEzWhcNMjYwOTI0MTkwMTEzWjAzMTEwLwYDVQQD
EyhkMzkwY2FjOGQwYjA0NTdiNzk5Y2FiZDBlNWMxZGNjMGJlY2E5ZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwypEa/KEZz/bqg/8UvQ5iCh1cG9u
CmG6lBr9n6LzrdLiNe/OK7a4XSbyo/lda+/gWBGMAhE/Cun1GgDiJNtGLv/CcfOm
U2qJOx/qpKJeFXktqjI4uKElMyqrC5YX1OZwa1ZFoyNAVAQpgAc/nhogNQagioKL
SR8y+2QaVBEHV058iYxzvGTjYDBd7srlvY4zt0r9em9e8rH5WviKAPSBaQ1iU+wo
aeOLq2ETpj6mwt7LCGFOP5DpLl0e+w7w8H8UHc+H9Zibn6SlvAIKlyGV30YeDP2R
oIrhJaGSG3n7z/fgI5HoP654ZHt5t4RCptlX6qHfkDaigWO1lsLr0NPplQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOQysjQsEV7eZyr0OXB3MC+yp/oMB8GA1UdIwQY
MBaAFPMiILaW4udmUWwFdD0TfbvBf9JhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OTNlMjAtN2UxNy00NzU5LWIzNDUt
MGViMGIyNDBiOWI3LzEvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80OTNlMjAtN2UxNy00NzU5LWIzNDUtMGViMGIyNDBiOWI3
LzEvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnl0BB3H
LZSavoxg5M80CBpERGEeBoaMSWVOL7JDIdRufpc91hOJVBl18HBdA5xOWePDsqKH
a4Mk9vk+osbtDZAJmWazs4Ujb01FYESnIIl7Dho0qlmge5xEeeRGHGWi16zk1v8O
AH5708qFOWlv6Ae0C+NhxcYnns6B4EM+4f2vCRqmSVfED+lQKCnESiJH+2ZubcaL
jwiJjDaSlMqjP2GIwmiEAKIf7AQX7kcnw6kJVGwVC3sS17l2iQBrvx++yZSNVoJ9
KoPQd2msdjkLHMSrDENemWSpcaD030AzLfHRTQnSo+qhZbPrBxz77uVSYElODTa9
krdYQuJsK24HcQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:37:15 2026 by rpki-client