Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
File: 8kufSnwM67H5f6JAO2Me5tFuxjM.mft (raw, json)
Hash identifier: Pit7M+ynR4GXE5OZtzd0WZXOxbuRFo8hVtPYifU/Hs4=
Subject key identifier: B3:3C:97:75:66:93:7F:75:74:C9:B2:12:18:EF:BA:4B:49:7A:45:5A
Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Certificate serial: 019F92485740EA9761402FF203DE98C6F6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
Manifest number: 031D
Signing time: Fri 24 Jul 2026 04:00:42 +0000
Manifest this update: Fri 24 Jul 2026 04:00:42 +0000
Manifest next update: Sat 25 Jul 2026 04:00:42 +0000
Files and hashes: 1: 8kufSnwM67H5f6JAO2Me5tFuxjM.crl (hash: kyAVYg3TwRERY+dUXo7Ibnr7pQLoozgOGk/4et9f9jo=)
2: l226mFgK6T2Z60Q9UPJ4UVEXvGI.roa (hash: sMVz2G2/suJpzTvieIkpkHigX+RGGXDj8VHYY+8cT9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:57:40:ea:97:61:40:2f:f2:03:de:98:c6:f6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Validity
Not Before: Jul 24 04:00:42 2026 GMT
Not After : Jul 25 04:00:42 2026 GMT
Subject: CN=b33c977566937f7574c9b21218efba4b497a455a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:2c:b5:19:22:39:c7:4c:55:c9:4e:74:2c:
75:d3:1f:21:1d:23:3f:b1:6c:c7:55:08:77:8d:ce:
e6:84:5f:32:a7:2f:4b:1e:c9:ad:c6:5f:3d:26:64:
90:26:b4:cb:80:be:38:c9:b7:12:9d:33:a1:39:38:
8b:cb:65:e0:83:e2:5f:a5:ac:fd:53:d9:4b:14:86:
b3:53:c0:c8:e1:f0:d8:c5:88:1e:ce:3d:8c:77:19:
34:ec:f4:32:c0:e5:67:36:48:eb:79:8d:75:b3:9d:
bf:83:16:6e:59:0f:6f:fc:87:09:d4:62:77:e9:83:
0a:73:31:e7:d3:0d:ba:04:8c:12:fa:f7:c8:d0:0f:
e4:c5:40:55:ba:cd:a9:65:4d:91:94:b4:c1:ec:3c:
c1:3b:c9:eb:08:76:62:21:5e:9d:b5:8e:4f:45:fa:
93:81:72:72:fa:ab:9b:f5:8f:d8:f5:09:e4:68:87:
b7:93:d8:8a:5d:c7:4b:f6:95:a3:64:f4:bf:47:bf:
1c:1d:a8:5e:41:5b:04:a5:70:1a:54:43:ce:da:29:
30:78:24:71:92:c1:81:0c:39:70:52:ad:a1:ff:d6:
72:2d:74:f1:2b:32:11:fb:6c:39:4d:93:6b:56:79:
38:df:71:f7:bd:c8:ee:67:fa:e0:d1:76:09:a3:d2:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3C:97:75:66:93:7F:75:74:C9:B2:12:18:EF:BA:4B:49:7A:45:5A
X509v3 Authority Key Identifier:
keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:ca:b8:ce:c6:26:e5:b2:fd:ab:83:64:3d:f3:4a:fe:d7:06:
0b:22:60:02:fa:fc:49:76:c5:25:7d:52:ae:11:0b:b5:06:2d:
83:0e:11:ff:ca:03:a9:db:e8:df:9a:c5:54:89:7d:6f:71:d0:
75:5d:a1:1b:7d:fc:d1:6c:82:40:13:06:68:86:ff:10:21:cf:
0c:dc:44:a6:1b:40:85:f1:39:44:c1:e9:78:c9:b0:44:b4:39:
97:d0:f0:95:0f:e7:6d:e0:92:8d:d7:31:e5:79:c2:e6:30:5e:
91:dd:4e:72:4f:40:29:f1:6e:ad:18:78:9c:c9:d8:66:d9:12:
82:ed:1a:cc:68:76:e1:be:1e:4c:60:e2:50:ac:73:54:eb:d7:
f5:e9:80:1a:43:fd:a4:2d:aa:9a:54:1b:2f:14:b5:d2:d4:9f:
ed:79:c0:b7:5c:e0:da:57:29:30:71:3d:d1:b5:91:8d:07:8a:
c1:5d:9d:c5:33:16:ce:6b:bb:3a:d7:a5:c7:32:51:fe:3d:f1:
7e:ee:77:74:b2:7d:9c:35:4c:2a:06:85:0a:fd:5b:ed:03:99:
a5:d4:8b:1d:45:e0:8c:d1:33:94:44:ab:65:1a:66:3c:47:6b:
25:10:14:a1:41:26:b1:a2:c9:c0:0f:ce:2a:ba:c5:05:35:f5:
9c:87:aa:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSFdA6pdhQC/yA96YxvbrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNGI5ZjRhN2MwY2ViYjFmOTdmYTI0MDNiNjMxZWU2ZDE2
ZWM2MzMwHhcNMjYwNzI0MDQwMDQyWhcNMjYwNzI1MDQwMDQyWjAzMTEwLwYDVQQD
EyhiMzNjOTc3NTY2OTM3Zjc1NzRjOWIyMTIxOGVmYmE0YjQ5N2E0NTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2YstRkiOcdMVclOdCx10x8hHSM/
sWzHVQh3jc7mhF8ypy9LHsmtxl89JmSQJrTLgL44ybcSnTOhOTiLy2Xgg+Jfpaz9
U9lLFIazU8DI4fDYxYgezj2Mdxk07PQywOVnNkjreY11s52/gxZuWQ9v/IcJ1GJ3
6YMKczHn0w26BIwS+vfI0A/kxUBVus2pZU2RlLTB7DzBO8nrCHZiIV6dtY5PRfqT
gXJy+qub9Y/Y9QnkaIe3k9iKXcdL9pWjZPS/R78cHaheQVsEpXAaVEPO2ikweCRx
ksGBDDlwUq2h/9ZyLXTxKzIR+2w5TZNrVnk433H3vcjuZ/rg0XYJo9LaowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLM8l3Vmk391dMmyEhjvuktJekVaMB8GA1UdIwQY
MBaAFPJLn0p8DOux+X+iQDtjHubRbsYzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzkt
OWM4ZWFiNzZkYTk4LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzktOWM4ZWFiNzZkYTk4
LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA58q4zsYm
5bL9q4NkPfNK/tcGCyJgAvr8SXbFJX1SrhELtQYtgw4R/8oDqdvo35rFVIl9b3HQ
dV2hG3380WyCQBMGaIb/ECHPDNxEphtAhfE5RMHpeMmwRLQ5l9DwlQ/nbeCSjdcx
5XnC5jBekd1Ock9AKfFurRh4nMnYZtkSgu0azGh24b4eTGDiUKxzVOvX9emAGkP9
pC2qmlQbLxS10tSf7XnAt1zg2lcpMHE90bWRjQeKwV2dxTMWzmu7OtelxzJR/j3x
fu53dLJ9nDVMKgaFCv1b7QOZpdSLHUXgjNEzlESrZRpmPEdrJRAUoUEmsaLJwA/O
KrrFBTX1nIeqpA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:01:14 2026 by rpki-client