
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.mft
File: 8vigqhrtc_X7GDLsors1WkMrwDY.mft (raw, json)
Hash identifier: swlSLu6Xq2eUBTyPYS356YItFkpxwP20og4zwTS/Z60=
Subject key identifier: 1C:57:54:F6:FF:23:0B:01:CA:0F:16:A3:F9:EB:39:34:D0:D3:F9:3F
Authority key identifier: F2:F8:A0:AA:1A:ED:73:F5:FB:18:32:EC:A2:BB:35:5A:43:2B:C0:36
Certificate issuer: /CN=f2f8a0aa1aed73f5fb1832eca2bb355a432bc036
Certificate serial: 019F935B7435BBE7A64D059CD1936325D32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vigqhrtc_X7GDLsors1WkMrwDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:11 +0000
Manifest this update: Fri 24 Jul 2026 09:01:11 +0000
Manifest next update: Sat 25 Jul 2026 09:01:11 +0000
Files and hashes: 1: 8vigqhrtc_X7GDLsors1WkMrwDY.crl (hash: mxuC88Gx0d5PBPyYZsHNdjEk5eW869pCS8Wch+2nIas=)
2: h7--AovqPGK6NLh-jG9R8rSxBs0.roa (hash: UmwnctJBFA+ypMazpzLAxiY2TTny72pG2Vuqupg1Exg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vigqhrtc_X7GDLsors1WkMrwDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:74:35:bb:e7:a6:4d:05:9c:d1:93:63:25:d3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f8a0aa1aed73f5fb1832eca2bb355a432bc036
Validity
Not Before: Jul 24 09:01:11 2026 GMT
Not After : Jul 25 09:01:11 2026 GMT
Subject: CN=1c5754f6ff230b01ca0f16a3f9eb3934d0d3f93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:de:03:a1:51:55:9f:20:c0:0f:8d:d2:c8:
85:b3:b6:9e:2f:88:3d:c3:c1:64:73:34:8f:44:29:
7b:70:ba:f6:e7:5d:9d:1a:23:ec:40:75:24:fe:de:
68:3a:b9:33:5a:83:33:56:c5:e2:60:6f:36:fd:a8:
5b:db:23:91:0a:dc:45:11:3c:03:e9:68:c6:bf:fc:
89:dd:88:ab:6d:99:3f:10:98:40:7b:90:4b:c9:ee:
95:2d:b7:ab:03:81:40:a3:e9:8c:87:ac:45:51:4d:
8c:db:fa:39:2a:78:2a:e9:80:8f:52:79:6d:ab:10:
8a:4a:13:05:75:7c:d4:f3:d5:3e:75:2c:13:cb:ac:
2e:22:78:f8:4e:71:3b:1d:6b:a0:34:7c:c7:78:fb:
f8:ae:02:c7:aa:26:42:aa:41:ef:98:46:d6:d2:72:
bf:9f:33:c5:c0:55:be:d2:b5:c2:bd:ba:4b:5b:ff:
7c:1a:40:99:76:c8:f2:df:66:48:8b:bb:07:4d:62:
82:08:9a:75:16:6b:fc:25:f6:7f:a1:38:e1:fb:2c:
c8:b7:6c:f1:16:4d:9e:da:94:20:58:88:bd:6a:60:
c6:56:7a:9e:a9:66:77:6b:15:a4:f5:0a:3b:7f:ae:
c2:df:6b:e6:0d:9e:9b:82:bb:d4:41:c8:46:99:83:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:57:54:F6:FF:23:0B:01:CA:0F:16:A3:F9:EB:39:34:D0:D3:F9:3F
X509v3 Authority Key Identifier:
keyid:F2:F8:A0:AA:1A:ED:73:F5:FB:18:32:EC:A2:BB:35:5A:43:2B:C0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vigqhrtc_X7GDLsors1WkMrwDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/8vigqhrtc_X7GDLsors1WkMrwDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ab:40:8b:75:9d:12:b1:a7:02:dd:64:cc:f7:84:5f:7b:e4:
d2:d1:e6:ac:34:0f:85:aa:dc:73:4d:c8:42:45:c8:52:bd:b0:
23:8b:d3:22:d5:5c:52:f9:00:57:6f:8e:cb:a6:27:cf:00:b1:
fe:d4:05:e9:3e:4a:ab:7c:a6:ec:cc:54:7e:40:b0:48:91:94:
9a:c7:76:08:d5:27:8e:39:d9:71:70:83:22:0d:4d:fb:98:6d:
4e:b1:2b:df:49:57:36:38:69:51:ab:ed:49:b8:6a:41:6f:0a:
c5:6a:21:30:a1:1f:a3:8a:5a:98:a0:d2:fe:7b:90:6b:98:65:
af:56:d4:df:b5:f5:fb:a3:8b:b3:2c:de:51:7f:10:b6:8b:b1:
66:b3:b6:9d:b7:a8:bb:28:37:f6:74:3f:af:e9:b7:fc:d2:35:
7e:24:27:89:54:37:30:c2:01:40:93:a4:a9:7d:e6:3a:f8:b4:
92:54:24:7f:ed:c4:29:a3:08:c9:8d:d2:e0:9f:20:26:2d:4a:
31:04:ec:f2:81:71:a3:5a:f6:25:69:fe:99:3e:42:96:6d:57:
54:48:f1:54:05:a1:8f:14:59:30:56:5d:70:a6:93:c9:73:1a:
5f:bf:a8:ef:1b:48:01:fb:d6:f1:e8:94:19:53:6c:a6:ff:b4:
ea:97:40:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW3Q1u+emTQWc0ZNjJdMvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZjhhMGFhMWFlZDczZjVmYjE4MzJlY2EyYmIzNTVhNDMy
YmMwMzYwHhcNMjYwNzI0MDkwMTExWhcNMjYwNzI1MDkwMTExWjAzMTEwLwYDVQQD
EygxYzU3NTRmNmZmMjMwYjAxY2EwZjE2YTNmOWViMzkzNGQwZDNmOTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fveA6FRVZ8gwA+N0siFs7aeL4g9
w8FkczSPRCl7cLr2512dGiPsQHUk/t5oOrkzWoMzVsXiYG82/ahb2yORCtxFETwD
6WjGv/yJ3YirbZk/EJhAe5BLye6VLberA4FAo+mMh6xFUU2M2/o5Kngq6YCPUnlt
qxCKShMFdXzU89U+dSwTy6wuInj4TnE7HWugNHzHePv4rgLHqiZCqkHvmEbW0nK/
nzPFwFW+0rXCvbpLW/98GkCZdsjy32ZIi7sHTWKCCJp1Fmv8JfZ/oTjh+yzIt2zx
Fk2e2pQgWIi9amDGVnqeqWZ3axWk9Qo7f67C32vmDZ6bgrvUQchGmYP4wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxXVPb/IwsByg8Wo/nrOTTQ0/k/MB8GA1UdIwQY
MBaAFPL4oKoa7XP1+xgy7KK7NVpDK8A2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZpZ3FocnRjX1g3R0RMc29yczFXa01yd0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYt
ZmM0MzM5MTk4OGY3LzEvOHZpZ3FocnRjX1g3R0RMc29yczFXa01yd0RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYtZmM0MzM5MTk4OGY3
LzEvOHZpZ3FocnRjX1g3R0RMc29yczFXa01yd0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKtAi3Wd
ErGnAt1kzPeEX3vk0tHmrDQPharcc03IQkXIUr2wI4vTItVcUvkAV2+Oy6YnzwCx
/tQF6T5Kq3ym7MxUfkCwSJGUmsd2CNUnjjnZcXCDIg1N+5htTrEr30lXNjhpUavt
SbhqQW8KxWohMKEfo4pamKDS/nuQa5hlr1bU37X1+6OLsyzeUX8QtouxZrO2nbeo
uyg39nQ/r+m3/NI1fiQniVQ3MMIBQJOkqX3mOvi0klQkf+3EKaMIyY3S4J8gJi1K
MQTs8oFxo1r2JWn+mT5Clm1XVEjxVAWhjxRZMFZdcKaTyXMaX7+o7xtIAfvW8eiU
GVNspv+06pdA2A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:20:24 2026 by rpki-client