Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: n9gWnIxW49rVXI89NuN0VaXvTHucv1RI0e7aWC1ZFig=
Subject key identifier: 12:79:BC:98:02:D9:55:47:C7:E7:21:69:58:C2:81:EA:70:10:3D:88
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 019F8F10E135A29184B9A876BD941A1BC155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 13:01:15 +0000
Manifest this update: Thu 23 Jul 2026 13:01:15 +0000
Manifest next update: Fri 24 Jul 2026 13:01:15 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: qr2U0q8eB0rf+eImE00DYojaJeJuuFk6NSYWiOAXtp8=)
2: l6d-s6pGrwjzo2MVrYFXt_vj8FQ.roa (hash: GWCGfDBQXbx8zU/9pE2/fyqt5ipxe1FQBrMDGvjciQY=)
3: wNW1OJ6nNt-LJ_qt91rusWZGqUk.roa (hash: Uf/zMrnHEJKdoypvZyEP0WBvkTlQGSBhuCZb5Fsvgco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:e1:35:a2:91:84:b9:a8:76:bd:94:1a:1b:c1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Jul 23 13:01:15 2026 GMT
Not After : Jul 24 13:01:15 2026 GMT
Subject: CN=1279bc9802d95547c7e7216958c281ea70103d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:24:a5:9b:56:77:c5:44:6f:80:a7:78:aa:
75:53:5f:ae:63:70:68:7f:26:77:e2:09:96:2f:94:
66:34:4e:b7:6c:71:df:c2:09:b3:46:7a:fd:67:bb:
e5:e9:f2:96:74:21:c3:5a:94:fe:a2:c6:12:9b:96:
46:34:01:de:af:39:58:76:93:0f:f0:96:5e:1d:14:
bc:6d:4c:a0:ae:12:18:a3:87:40:df:9f:a1:c4:95:
51:d2:46:04:15:c5:b5:20:ca:a4:4e:9d:64:e2:1e:
37:7c:2e:03:9d:8f:7f:cc:7b:8d:15:c0:c1:dd:f4:
10:03:1a:c0:1a:53:9e:e1:f3:89:99:6d:dc:97:b9:
74:1a:68:cb:eb:25:0e:77:1e:de:d6:38:b7:da:54:
6d:96:7f:5b:9c:d7:9c:3f:f8:c8:da:da:c8:29:f8:
c4:2a:b4:60:ca:c8:d8:24:56:4d:e6:b6:42:fa:2e:
2d:7c:10:d2:31:60:cb:95:34:db:5b:bb:9c:1d:ac:
03:89:4e:3a:78:71:c6:24:a2:a8:9f:06:3b:df:42:
3d:a5:02:8d:b0:09:5e:29:09:70:9a:8b:83:69:74:
5b:d9:f2:0c:3d:6d:7b:84:17:b1:09:dd:ff:5a:b5:
4e:8b:48:99:ac:18:63:38:96:34:b1:20:4a:e7:13:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:79:BC:98:02:D9:55:47:C7:E7:21:69:58:C2:81:EA:70:10:3D:88
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:83:20:fb:ef:ac:fe:98:6b:ad:69:23:17:09:c5:3f:c3:cc:
3d:ad:ba:e7:22:28:3c:30:07:a4:9c:68:cb:08:8b:0c:b9:03:
d5:64:21:b7:b5:86:2c:68:c7:96:55:c3:08:95:09:85:9b:14:
e3:4d:a2:b4:76:24:de:8c:e0:2c:0c:4a:af:3f:4c:9d:76:d7:
ae:e2:41:49:c5:80:79:a1:17:7f:2f:58:1e:e6:a6:da:aa:47:
7b:c6:40:bb:e3:05:86:ac:35:7a:b5:c5:be:ce:33:14:5f:ef:
e7:bb:6d:fc:bb:13:ff:fb:2d:4a:d7:cb:61:ba:21:cc:ee:b9:
c1:50:74:71:c1:68:e2:a8:51:00:16:39:3a:4e:54:91:b4:bb:
a0:4f:88:22:3f:b3:72:3a:44:9f:a8:73:87:21:7a:27:b6:01:
3b:2d:c6:f6:9b:82:71:b9:95:78:e9:a7:59:f6:e8:c1:d4:bd:
e0:da:fb:f2:e0:94:74:26:5b:1a:8a:33:77:0a:6c:98:a6:73:
b4:09:69:f9:1f:62:81:42:ff:72:0f:3e:b7:57:0b:a5:17:ed:
d1:29:a8:05:95:53:00:c4:7c:ed:db:16:0c:91:fb:da:fb:5a:
bf:a3:d7:c2:be:fe:c5:40:93:f9:ad:ef:c6:6d:bb:df:ed:85:
67:0d:75:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEOE1opGEuah2vZQaG8FVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMmJlOTgyMDYwYTQzNzM0ZDBhZDEyNmFkNDZkYTJmMzk1
YzlkZWYwHhcNMjYwNzIzMTMwMTE1WhcNMjYwNzI0MTMwMTE1WjAzMTEwLwYDVQQD
EygxMjc5YmM5ODAyZDk1NTQ3YzdlNzIxNjk1OGMyODFlYTcwMTAzZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rkkpZtWd8VEb4CneKp1U1+uY3Bo
fyZ34gmWL5RmNE63bHHfwgmzRnr9Z7vl6fKWdCHDWpT+osYSm5ZGNAHerzlYdpMP
8JZeHRS8bUygrhIYo4dA35+hxJVR0kYEFcW1IMqkTp1k4h43fC4DnY9/zHuNFcDB
3fQQAxrAGlOe4fOJmW3cl7l0GmjL6yUOdx7e1ji32lRtln9bnNecP/jI2trIKfjE
KrRgysjYJFZN5rZC+i4tfBDSMWDLlTTbW7ucHawDiU46eHHGJKKonwY730I9pQKN
sAleKQlwmouDaXRb2fIMPW17hBexCd3/WrVOi0iZrBhjOJY0sSBK5xOXuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJ5vJgC2VVHx+chaVjCgepwED2IMB8GA1UdIwQY
MBaAFPMr6YIGCkNzTQrRJq1G2i85XJ3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGIt
OTliY2JlNmQ3ZjYzLzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGItOTliY2JlNmQ3ZjYz
LzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYMg+++s
/phrrWkjFwnFP8PMPa265yIoPDAHpJxoywiLDLkD1WQht7WGLGjHllXDCJUJhZsU
402itHYk3ozgLAxKrz9MnXbXruJBScWAeaEXfy9YHuam2qpHe8ZAu+MFhqw1erXF
vs4zFF/v57tt/LsT//stStfLYbohzO65wVB0ccFo4qhRABY5Ok5UkbS7oE+IIj+z
cjpEn6hzhyF6J7YBOy3G9puCcbmVeOmnWfbowdS94Nr78uCUdCZbGoozdwpsmKZz
tAlp+R9igUL/cg8+t1cLpRft0SmoBZVTAMR87dsWDJH72vtav6PXwr7+xUCT+a3v
xm273+2FZw11XQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:42 2026 by rpki-client