Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: TdGsDPc/xgaAd/+wbajIqlHbB8Qhl2EOGTi77X+VMPM=
Subject key identifier: CB:AB:67:FB:E5:8F:9A:AA:2B:0E:75:3B:E0:1A:42:05:32:27:E0:23
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 01A0CBC719AA49008CFBC9323E1AB2B26283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 1119
Signing time: Wed 23 Sep 2026 01:00:18 +0000
Manifest this update: Wed 23 Sep 2026 01:00:18 +0000
Manifest next update: Thu 24 Sep 2026 01:00:18 +0000
Files and hashes: 1: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: DLqXZ1wk4CY75LdoZ03A3+5mJSrNKIezGHa44+sXdUA=)
2: RAC2EIsVMHG6hRns7HbMn17gGls.roa (hash: FF3H1038Rgf//9+NtLOprCe/ZirTllG7HflUAk9dINQ=)
3: nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa (hash: iN63qFqYR+Oirh/aAc/OhTjdpHDfVt7KEG3Iws+eD0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:19:aa:49:00:8c:fb:c9:32:3e:1a:b2:b2:62:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Sep 23 01:00:18 2026 GMT
Not After : Sep 24 01:00:18 2026 GMT
Subject: CN=cbab67fbe58f9aaa2b0e753be01a42053227e023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:f6:ce:40:7a:5a:1f:af:a0:a0:82:d4:5d:
bd:95:67:86:db:50:fe:6f:8f:93:78:63:42:5a:4d:
de:13:c7:9a:34:8d:92:2f:e2:02:a4:2f:be:03:39:
99:3d:90:de:18:75:dd:c5:b7:c0:6e:eb:0f:8b:7d:
82:e0:2a:e9:33:e8:fe:73:bb:25:85:3e:f7:cd:18:
8f:71:6a:d4:63:b4:18:c9:00:f1:89:94:1e:aa:48:
f3:de:24:3f:57:fc:ac:e8:9f:56:e3:f0:d5:c5:5b:
ba:51:f3:fa:fe:ab:a8:2a:7f:21:f5:6e:94:15:18:
1b:d9:eb:e5:0f:28:33:f8:c7:47:7b:00:10:2f:41:
dd:43:51:36:18:40:85:98:f4:d6:45:50:db:3c:d3:
e4:f2:15:c6:18:18:3f:2c:3c:0d:26:98:cb:46:ae:
08:53:72:9c:81:51:9f:81:fd:93:1b:cf:a9:c4:a0:
05:4a:3c:27:97:9e:d2:be:a3:43:99:4c:64:6e:fd:
d2:d6:a1:34:fd:df:18:79:59:d1:43:f7:6a:db:c6:
87:87:1a:51:4d:81:ab:6f:87:14:84:22:27:b5:db:
7f:52:a6:29:57:bc:a7:0f:01:54:79:a3:1a:3b:d2:
d5:10:40:e1:c9:f7:aa:84:c5:c6:a0:8a:f2:a9:04:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AB:67:FB:E5:8F:9A:AA:2B:0E:75:3B:E0:1A:42:05:32:27:E0:23
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:48:8a:41:94:b8:c4:04:27:fb:90:0a:d8:d6:57:8d:16:75:
33:f5:f1:80:fd:8b:2d:ad:f1:d1:00:d5:f8:34:0f:23:96:0b:
2f:f5:0f:7a:ac:e9:96:ec:45:88:7e:02:b3:c1:11:7b:31:cc:
ae:ef:27:c6:31:5f:ce:8a:77:61:d9:4e:47:f3:81:e9:8c:5d:
7a:25:d1:94:c5:02:f6:69:4f:5b:3c:10:ac:d7:78:4f:e3:76:
8d:c3:aa:91:03:69:66:97:06:07:76:c8:8c:30:29:44:60:ee:
2f:79:89:3a:12:01:c9:1c:b9:0e:68:14:11:4e:3a:64:5f:f2:
bc:7d:e4:ae:c3:a4:f0:2f:e5:ac:69:09:61:18:4d:47:9f:3f:
db:70:91:d4:a6:1e:94:46:34:b0:c8:7b:7a:ff:b2:db:2e:2d:
04:8f:5c:a6:74:a8:d1:6a:d7:fa:d5:22:6c:7e:37:73:56:37:
75:11:52:f8:af:d8:00:b8:4b:47:bd:40:80:12:48:0e:6e:f5:
f5:0d:49:9f:b3:70:15:a5:3f:72:0a:6c:ad:ba:d4:1d:37:ba:
fe:e0:1a:5c:89:5d:ff:52:be:0f:cb:5f:ac:a4:0d:6e:58:d3:
ff:fe:77:72:51:67:01:83:65:54:e6:fc:11:4e:d7:14:cf:1d:
a2:d8:38:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLxxmqSQCM+8kyPhqysmKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjJmYmU4NWFlNDA4ZDM3N2IyMTdkNGViYTdiMzhiMjRi
YWY1ZGQwHhcNMjYwOTIzMDEwMDE4WhcNMjYwOTI0MDEwMDE4WjAzMTEwLwYDVQQD
EyhjYmFiNjdmYmU1OGY5YWFhMmIwZTc1M2JlMDFhNDIwNTMyMjdlMDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRX2zkB6Wh+voKCC1F29lWeG21D+
b4+TeGNCWk3eE8eaNI2SL+ICpC++AzmZPZDeGHXdxbfAbusPi32C4CrpM+j+c7sl
hT73zRiPcWrUY7QYyQDxiZQeqkjz3iQ/V/ys6J9W4/DVxVu6UfP6/quoKn8h9W6U
FRgb2evlDygz+MdHewAQL0HdQ1E2GECFmPTWRVDbPNPk8hXGGBg/LDwNJpjLRq4I
U3KcgVGfgf2TG8+pxKAFSjwnl57SvqNDmUxkbv3S1qE0/d8YeVnRQ/dq28aHhxpR
TYGrb4cUhCIntdt/UqYpV7ynDwFUeaMaO9LVEEDhyfeqhMXGoIryqQSc7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMurZ/vlj5qqKw51O+AaQgUyJ+AjMB8GA1UdIwQY
MBaAFPIi++ha5AjTd7IX1Ouns4skuvXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzkt
YjBjMWUzMzA0ZTc0LzEvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzktYjBjMWUzMzA0ZTc0
LzEvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUiKQZS4
xAQn+5AK2NZXjRZ1M/XxgP2LLa3x0QDV+DQPI5YLL/UPeqzpluxFiH4Cs8ERezHM
ru8nxjFfzop3YdlOR/OB6YxdeiXRlMUC9mlPWzwQrNd4T+N2jcOqkQNpZpcGB3bI
jDApRGDuL3mJOhIByRy5DmgUEU46ZF/yvH3krsOk8C/lrGkJYRhNR58/23CR1KYe
lEY0sMh7ev+y2y4tBI9cpnSo0WrX+tUibH43c1Y3dRFS+K/YALhLR71AgBJIDm71
9Q1Jn7NwFaU/cgpsrbrUHTe6/uAaXIld/1K+D8tfrKQNbljT//53clFnAYNlVOb8
EU7XFM8dotg4nw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:17:49 2026 by rpki-client