Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: dAT1SSje5nyH4Vqi8exzKMAq209sNoZJFVCLPWhOAmE=
Subject key identifier: EA:39:C8:13:67:39:EA:1C:E3:64:1B:79:DC:D7:9C:5E:64:B5:F8:8A
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 019F90FEDB7691FC0CEAAA98448A9BE49EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 22:00:49 +0000
Manifest this update: Thu 23 Jul 2026 22:00:49 +0000
Manifest next update: Fri 24 Jul 2026 22:00:49 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: CdTbprNNcXRvnPfTed4mMUvDl0f+KkjOkTKdsLPy5kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:db:76:91:fc:0c:ea:aa:98:44:8a:9b:e4:9e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Jul 23 22:00:49 2026 GMT
Not After : Jul 24 22:00:49 2026 GMT
Subject: CN=ea39c8136739ea1ce3641b79dcd79c5e64b5f88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1a:84:a0:7b:21:8b:77:6a:f8:b0:4b:b2:fc:
84:9c:45:f0:f4:06:6f:ae:6b:60:dc:91:c1:22:32:
9e:e9:4a:17:0b:d4:c9:92:f2:e2:b1:00:58:ae:2f:
17:e8:5b:3a:b3:1b:94:ad:88:37:f7:62:bb:62:26:
8c:fe:35:85:36:7a:e7:2c:40:b7:12:5e:33:3b:46:
7a:2f:33:3f:cf:03:c2:e4:19:dc:2d:28:38:7e:ce:
c6:8b:f3:16:c3:a0:8d:5a:3a:0f:93:5f:c1:33:cf:
d3:4a:61:f4:7d:5c:3a:12:f9:50:55:9c:32:4b:2c:
c4:6f:23:a4:96:9e:89:93:13:c1:51:7a:74:17:6a:
18:29:9d:68:63:07:83:53:b1:54:24:13:8a:67:3a:
4c:a3:d1:c7:ad:41:1e:2e:5f:ca:5e:93:5e:5a:71:
0c:3e:b6:43:a8:3f:f9:d3:04:bb:ee:07:05:b8:13:
99:33:0c:a4:5d:11:1c:f4:24:02:6c:c3:c1:72:40:
2f:96:ae:ab:ea:a8:e5:3d:08:6e:b8:56:64:c4:cf:
34:78:6c:e0:26:07:96:cc:58:a6:80:11:15:0a:25:
b8:6b:9a:f1:2b:ca:a6:10:5b:6f:79:27:55:ab:d2:
d1:69:ea:69:ab:52:48:a9:a1:84:89:5b:98:a4:88:
f8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:39:C8:13:67:39:EA:1C:E3:64:1B:79:DC:D7:9C:5E:64:B5:F8:8A
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:85:2f:95:cb:49:6d:69:e5:50:07:a4:76:c3:68:50:eb:ea:
7e:30:9b:a5:42:cc:33:9d:b2:f2:25:ff:d2:ab:78:23:c0:f3:
ad:5f:37:c8:af:1b:3e:75:b5:82:f1:c9:a5:55:36:43:9c:01:
9e:90:7c:a4:be:73:0f:bc:75:9c:a3:56:28:8d:b2:f8:e4:09:
ef:16:74:43:dd:ac:bb:ad:3c:5b:45:8c:2b:2a:c3:e1:f5:19:
b1:56:b2:91:8d:fe:4e:8a:8b:9f:b5:cf:de:a7:93:a7:ca:a2:
96:d7:7c:63:5a:c5:30:9d:bf:90:76:d8:e5:85:a6:0e:a3:1b:
53:bc:a9:b9:9d:29:e3:e0:7f:d4:a1:e5:ae:cc:37:12:c4:3b:
4e:d2:4a:49:c2:4b:67:cc:60:61:a5:ae:a7:9e:39:0a:95:a3:
cc:e1:dd:38:10:41:cf:1e:8b:21:11:70:ee:0c:df:7e:d1:71:
1d:c1:85:48:8d:9a:49:84:b8:63:da:d9:22:19:30:0c:19:34:
f2:c8:29:a4:10:2f:9e:cf:10:c0:61:6c:1c:e4:60:30:40:09:
c6:f5:ef:23:c5:52:a1:ec:a5:3d:da:c7:ca:8f:46:90:63:58:
67:a3:77:d7:01:a9:47:6c:3d:e7:9b:a4:96:04:12:cf:17:34:
cc:6f:97:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/tt2kfwM6qqYRIqb5J7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZWVlNjlmODlmMjQ1MmRjYWU4OTgyOTQ3YjJkMTQ2OTUz
Nzk2N2IwHhcNMjYwNzIzMjIwMDQ5WhcNMjYwNzI0MjIwMDQ5WjAzMTEwLwYDVQQD
EyhlYTM5YzgxMzY3MzllYTFjZTM2NDFiNzlkY2Q3OWM1ZTY0YjVmODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xqEoHshi3dq+LBLsvyEnEXw9AZv
rmtg3JHBIjKe6UoXC9TJkvLisQBYri8X6Fs6sxuUrYg392K7YiaM/jWFNnrnLEC3
El4zO0Z6LzM/zwPC5BncLSg4fs7Gi/MWw6CNWjoPk1/BM8/TSmH0fVw6EvlQVZwy
SyzEbyOklp6JkxPBUXp0F2oYKZ1oYweDU7FUJBOKZzpMo9HHrUEeLl/KXpNeWnEM
PrZDqD/50wS77gcFuBOZMwykXREc9CQCbMPBckAvlq6r6qjlPQhuuFZkxM80eGzg
JgeWzFimgBEVCiW4a5rxK8qmEFtveSdVq9LRaeppq1JIqaGEiVuYpIj41QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOo5yBNnOeoc42QbedzXnF5ktfiKMB8GA1UdIwQY
MBaAFPPu5p+J8kUtyuiYKUey0UaVN5Z7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lODYwNzQtZTZkMC00OWJlLTk1OTIt
N2M0MjcyMzRkNWZmLzEvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lODYwNzQtZTZkMC00OWJlLTk1OTItN2M0MjcyMzRkNWZm
LzEvOC03bW40bnlSUzNLNkpncFI3TFJScFUzbG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4UvlctJ
bWnlUAekdsNoUOvqfjCbpULMM52y8iX/0qt4I8DzrV83yK8bPnW1gvHJpVU2Q5wB
npB8pL5zD7x1nKNWKI2y+OQJ7xZ0Q92su608W0WMKyrD4fUZsVaykY3+ToqLn7XP
3qeTp8qiltd8Y1rFMJ2/kHbY5YWmDqMbU7ypuZ0p4+B/1KHlrsw3EsQ7TtJKScJL
Z8xgYaWup545CpWjzOHdOBBBzx6LIRFw7gzfftFxHcGFSI2aSYS4Y9rZIhkwDBk0
8sgppBAvns8QwGFsHORgMEAJxvXvI8VSoeylPdrHyo9GkGNYZ6N31wGpR2w955uk
lgQSzxc0zG+XMA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:13 2026 by rpki-client