Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.mft
File: 8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.mft (raw, json)
Hash identifier: bKI/4RLazPQeKKMnEo2xHJbcpqGLEivYE6xVcPPYeMk=
Subject key identifier: 57:5F:21:8D:CB:F2:CA:A4:3F:2A:F0:E6:09:56:7A:89:8E:CC:66:3C
Authority key identifier: F1:7A:F4:4B:81:72:6F:6F:8E:5D:61:F4:FC:54:B5:23:2D:BD:AE:9E
Certificate issuer: /CN=f17af44b81726f6f8e5d61f4fc54b5232dbdae9e
Certificate serial: 01A0CC3661DA6F3D88F725DCF20A88D659BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:01:51 +0000
Manifest this update: Wed 23 Sep 2026 03:01:51 +0000
Manifest next update: Thu 24 Sep 2026 03:01:51 +0000
Files and hashes: 1: 8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.crl (hash: gJhRbuc4p0tVwtjg7eDpZvgV0d102jXJuWQy/jmXm88=)
2: hNgjrmACAQrIMeNtPk4Zt3Xzh2o.roa (hash: 8XG0GIk2FqM1aSYgfPpdFeva3g6wC55t8WVDAjpd1KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:61:da:6f:3d:88:f7:25:dc:f2:0a:88:d6:59:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17af44b81726f6f8e5d61f4fc54b5232dbdae9e
Validity
Not Before: Sep 23 03:01:51 2026 GMT
Not After : Sep 24 03:01:51 2026 GMT
Subject: CN=575f218dcbf2caa43f2af0e609567a898ecc663c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:95:34:c9:30:2b:f1:35:96:67:fe:b9:e8:
13:52:2d:30:c6:a5:1f:6e:17:fc:39:97:f7:90:b7:
2b:21:08:de:20:58:dc:0b:c1:fb:78:37:1b:7c:a6:
a5:32:a3:f4:7e:50:73:2b:89:42:d1:7e:76:5e:6e:
a2:38:f5:c7:98:17:a4:d0:09:45:6d:25:f8:7c:39:
1c:6e:d6:07:89:16:e6:d2:ed:7c:55:b3:5c:b0:38:
6b:a9:ef:9d:14:85:4e:dd:91:1a:d4:99:a2:88:28:
88:c2:57:38:28:fb:9e:92:0b:72:67:c1:b9:01:30:
7a:71:3e:e6:64:23:75:e2:dd:30:37:e6:3e:8e:51:
82:ea:17:37:a1:cc:5c:db:15:fe:56:b4:70:7e:92:
79:80:16:a6:87:87:fa:47:0c:8c:2d:50:7e:f2:70:
58:bc:c7:fa:26:3b:e9:dc:20:5c:bc:f2:2b:49:72:
18:4f:5d:88:cc:85:14:47:c1:8c:aa:01:f9:12:31:
56:d7:f0:fc:3a:91:47:0f:e8:93:9c:d8:59:f2:95:
2f:ee:25:6d:cf:f8:04:92:84:a9:47:22:51:99:41:
93:96:94:e5:3d:39:c2:c2:2c:89:d3:3d:4e:e7:82:
12:84:b4:90:fd:62:43:b4:55:e5:3d:08:d7:eb:8c:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5F:21:8D:CB:F2:CA:A4:3F:2A:F0:E6:09:56:7A:89:8E:CC:66:3C
X509v3 Authority Key Identifier:
keyid:F1:7A:F4:4B:81:72:6F:6F:8E:5D:61:F4:FC:54:B5:23:2D:BD:AE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/8Xr0S4Fyb2-OXWH0_FS1Iy29rp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f0:b7:da:f7:db:2b:76:0f:8c:62:ac:47:2f:1c:d3:aa:52:
9e:1c:93:e8:a0:bd:84:a1:eb:31:46:7c:92:0f:73:30:81:c2:
75:06:aa:20:3d:97:d9:24:8a:ea:a8:65:3b:5c:e7:f0:a7:0e:
fa:de:ee:4d:5e:1f:01:84:e1:10:29:02:32:0c:33:07:06:3e:
14:32:f6:ab:d6:67:98:08:44:b5:1a:cf:a9:99:aa:c4:6a:bd:
11:cc:e0:5f:80:99:94:34:7c:6c:40:3a:49:35:91:64:11:b4:
a5:42:6b:82:85:d0:e7:7e:db:be:06:15:1a:32:4f:cb:ca:40:
1c:62:a5:df:43:d0:7f:71:ad:49:4c:7a:6d:7b:00:f2:e9:64:
a7:ee:9b:a6:27:f6:72:f2:9a:0f:f0:cb:4b:f9:61:94:f0:77:
8f:41:f9:60:74:02:36:cd:63:1d:10:70:91:84:fd:06:32:8a:
5e:a6:1c:b3:7e:ad:0b:92:91:43:51:16:22:7f:3e:2c:75:39:
d4:74:8b:49:6e:f6:96:4b:f5:f9:d3:c0:17:0a:fb:ac:df:94:
a2:98:ea:1f:09:5f:25:c2:b7:a6:be:df:1c:d8:40:a7:98:f0:
4d:a0:16:d1:8e:5b:76:6f:d2:61:35:5c:a4:3b:63:ed:a7:70:
9a:b9:dc:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNmHabz2I9yXc8gqI1lm8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxN2FmNDRiODE3MjZmNmY4ZTVkNjFmNGZjNTRiNTIzMmRi
ZGFlOWUwHhcNMjYwOTIzMDMwMTUxWhcNMjYwOTI0MDMwMTUxWjAzMTEwLwYDVQQD
Eyg1NzVmMjE4ZGNiZjJjYWE0M2YyYWYwZTYwOTU2N2E4OThlY2M2NjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9+VNMkwK/E1lmf+uegTUi0wxqUf
bhf8OZf3kLcrIQjeIFjcC8H7eDcbfKalMqP0flBzK4lC0X52Xm6iOPXHmBek0AlF
bSX4fDkcbtYHiRbm0u18VbNcsDhrqe+dFIVO3ZEa1JmiiCiIwlc4KPuekgtyZ8G5
ATB6cT7mZCN14t0wN+Y+jlGC6hc3ocxc2xX+VrRwfpJ5gBamh4f6RwyMLVB+8nBY
vMf6Jjvp3CBcvPIrSXIYT12IzIUUR8GMqgH5EjFW1/D8OpFHD+iTnNhZ8pUv7iVt
z/gEkoSpRyJRmUGTlpTlPTnCwiyJ0z1O54IShLSQ/WJDtFXlPQjX64wFfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdfIY3L8sqkPyrw5glWeomOzGY8MB8GA1UdIwQY
MBaAFPF69EuBcm9vjl1h9PxUtSMtva6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFhyMFM0RnliMi1PWFdIMF9GUzFJeTI5cnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MTg5N2UtNWY2Zi00NDlkLWI4MmMt
YTI1ZWY0NDIwYTJhLzEvOFhyMFM0RnliMi1PWFdIMF9GUzFJeTI5cnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83MTg5N2UtNWY2Zi00NDlkLWI4MmMtYTI1ZWY0NDIwYTJh
LzEvOFhyMFM0RnliMi1PWFdIMF9GUzFJeTI5cnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPC32vfb
K3YPjGKsRy8c06pSnhyT6KC9hKHrMUZ8kg9zMIHCdQaqID2X2SSK6qhlO1zn8KcO
+t7uTV4fAYThECkCMgwzBwY+FDL2q9ZnmAhEtRrPqZmqxGq9EczgX4CZlDR8bEA6
STWRZBG0pUJrgoXQ537bvgYVGjJPy8pAHGKl30PQf3GtSUx6bXsA8ulkp+6bpif2
cvKaD/DLS/lhlPB3j0H5YHQCNs1jHRBwkYT9BjKKXqYcs36tC5KRQ1EWIn8+LHU5
1HSLSW72lkv1+dPAFwr7rN+UopjqHwlfJcK3pr7fHNhAp5jwTaAW0Y5bdm/SYTVc
pDtj7adwmrncmw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:13:20 2026 by rpki-client