Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File: 8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier: Dab+gOAK5iqA3q8u92PZqsV35VWTZU5OWyVrN+QLgys=
Subject key identifier: 28:2E:71:E1:45:C7:C0:DB:2A:8A:32:C1:49:99:D8:2D:6A:41:04:74
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer: /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial: 019F90C8694DFBCF6E07A446692906D69AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number: 0E17
Signing time: Thu 23 Jul 2026 21:01:20 +0000
Manifest this update: Thu 23 Jul 2026 21:01:20 +0000
Manifest next update: Fri 24 Jul 2026 21:01:20 +0000
Files and hashes: 1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: zpKhcUlSK2YTkRLGpaou5gNWT38KRJ3ISi5efiZf/vM=)
2: a_bPKr_BRW7-uV28J0kW18UUGgI.roa (hash: ujNW2fJdpnTVC1FhgJD/6p6WEXThSSTIszSadQyIDQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:69:4d:fb:cf:6e:07:a4:46:69:29:06:d6:9a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Validity
Not Before: Jul 23 21:01:20 2026 GMT
Not After : Jul 24 21:01:20 2026 GMT
Subject: CN=282e71e145c7c0db2a8a32c14999d82d6a410474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:41:5b:ac:0a:83:0c:a0:09:d3:eb:fa:d6:
1c:dd:fe:7c:c7:54:13:8f:26:1c:7c:89:ce:7e:c9:
a8:6a:b4:40:49:1d:95:c1:5b:73:19:f2:13:a1:90:
9e:dd:2a:cb:3f:84:e8:8b:36:61:c7:43:0f:24:28:
a8:29:4d:4f:0c:ae:55:59:24:0d:1f:f4:39:ba:23:
8b:cf:e1:5e:71:4b:56:46:5a:f2:47:be:99:11:98:
28:f6:79:79:30:0a:eb:00:f2:1c:6f:f0:94:a4:7e:
c0:dc:87:e2:9f:6e:ce:77:6f:22:1f:d3:e2:8e:c7:
84:8e:1d:32:80:72:cb:35:65:d3:a9:c6:cb:37:08:
f5:70:24:eb:9d:b8:e4:98:b4:e8:e0:d4:a5:5e:12:
a3:67:e0:dc:7e:69:70:21:f0:49:08:84:80:ff:e4:
fb:49:ef:55:e2:18:9a:5e:0a:a0:a3:c6:1d:b9:b7:
3d:c5:24:1d:a2:33:76:a9:f7:bc:76:70:9a:f4:0c:
65:1b:7e:1c:ab:80:92:c9:33:8f:98:bc:f3:5b:90:
b9:f6:53:bb:f1:f0:9e:30:b7:50:2f:7f:72:25:27:
04:4e:49:fc:7d:8d:73:9e:66:67:28:e0:c6:90:ee:
6f:58:9a:c5:eb:b8:f9:79:fc:52:f8:72:53:ac:20:
ab:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:71:E1:45:C7:C0:DB:2A:8A:32:C1:49:99:D8:2D:6A:41:04:74
X509v3 Authority Key Identifier:
keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:67:52:da:5b:96:68:78:a2:31:46:ad:52:2d:57:29:90:b4:
90:ac:42:9f:ef:d0:90:81:0a:d1:50:2b:1d:ee:33:01:4a:5a:
d4:d1:25:da:11:17:39:a9:85:70:e3:74:4b:c1:e1:bd:0e:64:
4e:b5:c0:21:7a:a8:a4:4a:ab:77:4d:93:75:39:d5:6e:1e:e5:
29:fe:9a:87:18:16:38:ad:47:ee:56:93:50:52:d7:81:79:f9:
39:4c:b0:08:1c:1e:d3:cc:42:d3:46:ae:16:47:e1:5c:61:9e:
07:d0:3c:05:74:e9:50:c2:88:fd:04:29:a3:93:63:ac:47:8a:
54:95:1a:16:b0:0e:cd:53:c6:0f:09:e8:81:2e:8f:09:4e:3d:
6c:04:05:5b:2d:9e:e9:24:91:58:a1:7f:2a:5a:ca:42:04:fa:
68:09:16:43:28:70:9a:3b:00:d1:ad:46:ec:41:41:08:e9:3f:
c6:6f:e7:3d:2c:ef:86:8c:15:f3:d8:50:cc:71:71:ba:63:fd:
7b:93:97:88:3b:4c:6f:76:73:69:2a:b8:e1:24:5c:de:ca:e3:
47:d2:cb:1c:a1:7d:d5:45:44:f1:7f:33:e7:f9:c9:cb:e0:9f:
70:d2:07:97:53:4a:91:32:0d:76:38:ac:a2:46:d1:34:15:86:
6b:ce:40:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyGlN+89uB6RGaSkG1prRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOGZhMWEyZTQ0OTE4OTFjMTliMGYxMGIwODZmNjU1OTg0
ZjU4NzkwHhcNMjYwNzIzMjEwMTIwWhcNMjYwNzI0MjEwMTIwWjAzMTEwLwYDVQQD
EygyODJlNzFlMTQ1YzdjMGRiMmE4YTMyYzE0OTk5ZDgyZDZhNDEwNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz85BW6wKgwygCdPr+tYc3f58x1QT
jyYcfInOfsmoarRASR2VwVtzGfIToZCe3SrLP4ToizZhx0MPJCioKU1PDK5VWSQN
H/Q5uiOLz+FecUtWRlryR76ZEZgo9nl5MArrAPIcb/CUpH7A3Ifin27Od28iH9Pi
jseEjh0ygHLLNWXTqcbLNwj1cCTrnbjkmLTo4NSlXhKjZ+DcfmlwIfBJCISA/+T7
Se9V4hiaXgqgo8Ydubc9xSQdojN2qfe8dnCa9AxlG34cq4CSyTOPmLzzW5C59lO7
8fCeMLdQL39yJScETkn8fY1znmZnKODGkO5vWJrF67j5efxS+HJTrCCrXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCguceFFx8DbKooywUmZ2C1qQQR0MB8GA1UdIwQY
MBaAFPKPoaLkSRiRwZsPELCG9lWYT1h5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmJmYWMtMDc4MC00YmJkLWJjYTIt
MzRhMTRhMmJiNDAxLzEvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84YmJmYWMtMDc4MC00YmJkLWJjYTItMzRhMTRhMmJiNDAx
LzEvOG8taG91UkpHSkhCbXc4UXNJYjJWWmhQV0hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWdS2luW
aHiiMUatUi1XKZC0kKxCn+/QkIEK0VArHe4zAUpa1NEl2hEXOamFcON0S8HhvQ5k
TrXAIXqopEqrd02TdTnVbh7lKf6ahxgWOK1H7laTUFLXgXn5OUywCBwe08xC00au
FkfhXGGeB9A8BXTpUMKI/QQpo5NjrEeKVJUaFrAOzVPGDwnogS6PCU49bAQFWy2e
6SSRWKF/KlrKQgT6aAkWQyhwmjsA0a1G7EFBCOk/xm/nPSzvhowV89hQzHFxumP9
e5OXiDtMb3ZzaSq44SRc3srjR9LLHKF91UVE8X8z5/nJy+CfcNIHl1NKkTINdjis
okbRNBWGa85A9Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:10 2026 by rpki-client