Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: mzxOa9Dt5FWfBcOXKiH5//XEUCHWSkRDA9uIuIXmD3Y=
Subject key identifier: 6A:B1:CA:91:D6:FA:23:69:EF:2C:E7:43:B7:AE:56:A3:68:8E:8F:4A
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 01A0D5A68B5AA34E0E0C5EDAD29017BAD5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 23:00:56 +0000
Manifest this update: Thu 24 Sep 2026 23:00:56 +0000
Manifest next update: Fri 25 Sep 2026 23:00:56 +0000
Files and hashes: 1: 1wC70OGBB84YZ8LzzI7GRE1FXLw.roa (hash: 61O42HPTbjFtxU4oF7cNiKUH0sHQufjgX2XI1LEtyCM=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: 1FqeohyY16ZYbPiibGksCQ+VdhceJ/z3H0fps2pJErQ=)
3: YVZ-GH3S7Iq0JxeBAHpFVD2_Lx4.roa (hash: kM6UtuYisVsArbzf8eESDr1kRHymSG53rA/gBdAULqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:8b:5a:a3:4e:0e:0c:5e:da:d2:90:17:ba:d5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Sep 24 23:00:56 2026 GMT
Not After : Sep 25 23:00:56 2026 GMT
Subject: CN=6ab1ca91d6fa2369ef2ce743b7ae56a3688e8f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:ed:5e:93:6f:70:11:3b:3f:46:2c:21:e9:
d2:fd:92:18:ad:3e:9b:8d:5c:5d:24:0c:06:5e:7b:
15:0a:59:17:28:29:74:c5:12:01:75:34:5b:74:2d:
f4:84:53:3f:d3:a9:d8:0a:14:a6:7f:26:7a:a1:0f:
18:d4:6a:47:d3:76:bb:61:50:f1:96:2d:4a:97:04:
e9:54:f6:6b:9f:a4:24:80:28:56:99:d8:e4:d9:09:
bd:da:16:c8:af:ea:46:68:9f:f5:b9:19:63:ed:05:
60:94:ad:6f:73:ca:d6:32:c6:b9:60:7a:9a:2b:e7:
07:da:32:8e:15:fd:28:0c:f7:3c:da:fa:93:e7:b1:
dc:bd:43:e4:40:7b:aa:a9:3a:35:b8:4f:69:47:40:
ac:13:22:df:f5:1a:c9:8d:36:48:5c:2d:b8:c7:61:
54:d9:b8:be:f6:a6:bd:fa:d3:1a:68:4f:f4:c3:b4:
d9:e3:db:0a:f0:e8:cc:b7:8a:b4:d9:7a:4d:5f:ec:
6c:22:54:8e:9f:f4:0b:23:b7:64:20:15:21:46:37:
76:b6:11:28:f5:47:de:92:9c:78:13:05:e0:b3:5d:
0e:a9:fd:80:b3:85:b9:c7:93:25:65:83:b5:7c:7f:
95:4b:e7:1d:a8:d7:46:75:77:84:52:dd:8c:dc:c2:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B1:CA:91:D6:FA:23:69:EF:2C:E7:43:B7:AE:56:A3:68:8E:8F:4A
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:33:e4:c0:40:6d:b5:ac:d0:45:42:0b:a9:da:d3:bb:92:ae:
be:0c:e6:d9:f1:f1:27:3f:69:96:6a:e8:48:e6:d9:e4:ce:6e:
87:52:6a:c4:8b:22:fe:59:f6:e2:09:2f:03:04:74:b4:50:d7:
3b:5d:0b:44:02:b4:df:41:09:1f:57:87:93:60:dc:a7:87:15:
37:35:bd:f3:d6:16:24:ed:aa:a1:90:fe:f6:a0:f4:e2:c5:5f:
49:78:1e:39:b6:2d:5f:a1:8f:f3:2a:59:e8:0d:4b:0e:0b:d9:
76:2b:82:92:5a:7f:38:d5:20:5d:72:53:16:26:83:e1:5e:09:
64:1f:f0:63:81:09:f2:bd:45:4f:aa:a0:64:53:11:0c:0c:f1:
7d:90:08:76:5e:0c:56:f0:1e:5b:37:27:d0:79:62:c6:d1:47:
16:e6:a1:71:ee:7b:9c:95:5c:f7:f3:6f:f8:4d:b2:49:c8:36:
83:67:ae:c8:ed:32:bf:e5:c4:a3:a9:2b:76:7c:9d:97:6d:c1:
0a:bb:15:05:68:20:12:22:a6:c2:9c:b2:4b:ac:d1:f8:83:b5:
c3:05:56:84:ce:d3:36:33:9d:4f:5e:68:b4:aa:3d:e8:25:c7:
d1:fd:05:17:6c:71:42:1f:d2:a2:9c:8a:35:ee:51:4c:c7:e5:
b0:06:3f:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVpotao04ODF7a0pAXutWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYjE1ZTc3YWY0ZWRkZTExMTkyYzZmZWNkNTBiMjFjZDM3
OWQ0MjEwHhcNMjYwOTI0MjMwMDU2WhcNMjYwOTI1MjMwMDU2WjAzMTEwLwYDVQQD
Eyg2YWIxY2E5MWQ2ZmEyMzY5ZWYyY2U3NDNiN2FlNTZhMzY4OGU4ZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnDtXpNvcBE7P0YsIenS/ZIYrT6b
jVxdJAwGXnsVClkXKCl0xRIBdTRbdC30hFM/06nYChSmfyZ6oQ8Y1GpH03a7YVDx
li1KlwTpVPZrn6QkgChWmdjk2Qm92hbIr+pGaJ/1uRlj7QVglK1vc8rWMsa5YHqa
K+cH2jKOFf0oDPc82vqT57HcvUPkQHuqqTo1uE9pR0CsEyLf9RrJjTZIXC24x2FU
2bi+9qa9+tMaaE/0w7TZ49sK8OjMt4q02XpNX+xsIlSOn/QLI7dkIBUhRjd2thEo
9Ufekpx4EwXgs10Oqf2As4W5x5MlZYO1fH+VS+cdqNdGdXeEUt2M3MK52QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqxypHW+iNp7yznQ7euVqNojo9KMB8GA1UdIwQY
MBaAFPGxXnevTt3hEZLG/s1QshzTedQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUt
MTM0MGNjNWIzZDU3LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUtMTM0MGNjNWIzZDU3
LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTPkwEBt
tazQRUILqdrTu5Kuvgzm2fHxJz9plmroSObZ5M5uh1JqxIsi/ln24gkvAwR0tFDX
O10LRAK030EJH1eHk2Dcp4cVNzW989YWJO2qoZD+9qD04sVfSXgeObYtX6GP8ypZ
6A1LDgvZdiuCklp/ONUgXXJTFiaD4V4JZB/wY4EJ8r1FT6qgZFMRDAzxfZAIdl4M
VvAeWzcn0HlixtFHFuahce57nJVc9/Nv+E2yScg2g2euyO0yv+XEo6krdnydl23B
CrsVBWggEiKmwpyyS6zR+IO1wwVWhM7TNjOdT15otKo96CXH0f0FF2xxQh/SopyK
Ne5RTMflsAY/Bg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:36:41 2026 by rpki-client