Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: g1RMGoO7MLnH/2RGTuug2Ec121LpuXwpYm7/u1vo550=
Subject key identifier: E8:F9:A1:04:10:11:22:28:B1:07:D8:9C:FB:6E:E4:64:A7:D1:DC:88
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 019F9692C130660C996C1FFD92E6FB0FB98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 0F22
Signing time: Sat 25 Jul 2026 00:00:27 +0000
Manifest this update: Sat 25 Jul 2026 00:00:27 +0000
Manifest next update: Sun 26 Jul 2026 00:00:27 +0000
Files and hashes: 1: QgMG-u89Y-TWbT4Gt6ZsQgsTYNI.roa (hash: sETsQ4q/+Tu+FYDJynqCF64iSLCcXXD4r9m9lwpRbx8=)
2: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: ebb0cyBOORhgWWexa+o0ofxldf2f/oL7sXKk1vSgjTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:92:c1:30:66:0c:99:6c:1f:fd:92:e6:fb:0f:b9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Jul 25 00:00:27 2026 GMT
Not After : Jul 26 00:00:27 2026 GMT
Subject: CN=e8f9a10410112228b107d89cfb6ee464a7d1dc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:c8:e6:b8:1b:ef:da:ee:b8:5f:f4:b8:06:
30:82:2d:1a:0a:c1:99:88:01:9c:a4:f9:01:4d:47:
a8:19:cd:02:e5:cd:5b:17:20:80:22:6c:93:49:68:
61:a9:10:92:06:0f:df:a6:55:fa:13:95:f7:79:aa:
ca:c3:96:49:2a:22:a6:2e:d6:20:f4:90:36:3a:57:
73:e1:83:39:fe:06:2d:2a:84:30:cb:3a:b8:d5:11:
9e:68:6d:03:c4:a5:42:38:fb:50:91:59:ec:32:86:
c8:9c:0d:50:e5:ac:24:26:1a:09:9f:a3:f1:6b:fc:
10:f7:92:a9:81:b1:5e:b6:22:89:e5:ea:0f:b4:11:
5b:56:65:58:21:ed:8b:3f:bf:7f:27:21:91:88:97:
36:17:8a:b8:f0:46:d8:8f:46:2f:8c:71:36:05:ab:
24:d8:fe:ca:18:fc:04:71:14:6a:65:d5:e6:12:f0:
4e:a3:a8:20:9a:75:b0:be:a0:f4:02:3a:1c:a9:f4:
85:5b:b7:c3:69:cb:80:4a:75:e4:8f:bb:40:82:47:
8e:e7:57:4f:55:bd:ac:95:0c:27:cc:58:4a:ea:b9:
7b:4f:ff:d3:2d:74:68:26:0e:a0:6f:d4:0e:17:6e:
b0:6d:23:bc:95:d8:f6:c4:2e:52:c6:48:eb:43:a6:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F9:A1:04:10:11:22:28:B1:07:D8:9C:FB:6E:E4:64:A7:D1:DC:88
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e9:4d:ff:a7:cb:d4:11:ca:39:8c:32:11:f2:a4:6c:a6:08:
9b:0b:c6:6d:a4:31:4b:91:28:f7:5e:5b:be:a0:0d:4e:99:60:
ab:d0:4b:26:e8:6d:7d:69:fd:cb:4f:62:a3:6d:66:ef:b3:5f:
bb:84:ac:3b:d3:71:95:6d:71:12:9b:8d:f0:24:58:d3:a3:6e:
9e:08:55:ea:6a:85:2d:5d:ae:32:a8:45:8e:76:bf:ce:d8:a7:
65:80:e3:97:c5:79:d0:f6:1d:1a:84:5b:8f:a0:fe:10:63:fa:
69:f1:1b:b9:d3:40:57:b1:fd:8a:63:13:71:04:97:46:1e:03:
0c:d0:60:58:fc:41:21:34:9c:cc:5b:57:8d:db:55:be:b8:b4:
d3:80:9b:46:b7:ef:1f:58:2c:c3:12:0f:0d:01:d8:a4:3e:20:
7a:cf:db:2f:ae:bb:7b:10:64:31:75:d3:79:25:e8:a9:e6:dc:
7a:21:0a:90:98:17:82:50:cd:07:f7:ed:51:f1:58:a4:87:4a:
c5:26:80:35:24:68:36:6e:bc:4c:dd:c9:a9:57:70:e8:ee:2e:
7e:d3:3c:47:51:2a:d6:be:b0:02:0e:4b:b9:1e:39:6b:ba:02:
c5:2a:29:08:1a:66:73:fe:b5:ce:2b:bf:a2:14:f8:b5:39:e6:
38:7a:1e:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WksEwZgyZbB/9kub7D7mKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGYxMjRjOTFjYWEwY2M5MWMzYjliYjRmOGFkYjA2MzI2
MjI0YTEwHhcNMjYwNzI1MDAwMDI3WhcNMjYwNzI2MDAwMDI3WjAzMTEwLwYDVQQD
EyhlOGY5YTEwNDEwMTEyMjI4YjEwN2Q4OWNmYjZlZTQ2NGE3ZDFkYzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpjI5rgb79ruuF/0uAYwgi0aCsGZ
iAGcpPkBTUeoGc0C5c1bFyCAImyTSWhhqRCSBg/fplX6E5X3earKw5ZJKiKmLtYg
9JA2Oldz4YM5/gYtKoQwyzq41RGeaG0DxKVCOPtQkVnsMobInA1Q5awkJhoJn6Px
a/wQ95KpgbFetiKJ5eoPtBFbVmVYIe2LP79/JyGRiJc2F4q48EbYj0YvjHE2Bask
2P7KGPwEcRRqZdXmEvBOo6ggmnWwvqD0AjocqfSFW7fDacuASnXkj7tAgkeO51dP
Vb2slQwnzFhK6rl7T//TLXRoJg6gb9QOF26wbSO8ldj2xC5SxkjrQ6bhRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOj5oQQQESIosQfYnPtu5GSn0dyIMB8GA1UdIwQY
MBaAFGtPEkyRyqDMkcO5u0+K2wYyYiShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMt
YjY1MjYyY2YxOTgzLzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMtYjY1MjYyY2YxOTgz
LzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvulN/6fL
1BHKOYwyEfKkbKYImwvGbaQxS5Eo915bvqANTplgq9BLJuhtfWn9y09io21m77Nf
u4SsO9NxlW1xEpuN8CRY06NunghV6mqFLV2uMqhFjna/ztinZYDjl8V50PYdGoRb
j6D+EGP6afEbudNAV7H9imMTcQSXRh4DDNBgWPxBITSczFtXjdtVvri004CbRrfv
H1gswxIPDQHYpD4ges/bL667exBkMXXTeSXoqebceiEKkJgXglDNB/ftUfFYpIdK
xSaANSRoNm68TN3JqVdw6O4uftM8R1Eq1r6wAg5LuR45a7oCxSopCBpmc/61ziu/
ohT4tTnmOHoe0Q==
-----END CERTIFICATE-----
Generated at Sat Jul 25 05:18:32 2026 by rpki-client