Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft
File: 8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft (raw, json)
Hash identifier: 7pjWDCR7JvHq0cmE4RjLyPPvd5IzSNjPDjpctxeoGMk=
Subject key identifier: 3F:0A:C0:62:4F:3D:06:26:42:5D:93:B8:3A:30:FB:DD:C1:38:47:A0
Authority key identifier: F1:BB:52:28:E6:74:07:55:A3:22:6E:E3:2C:85:31:A1:75:45:7B:C2
Certificate issuer: /CN=f1bb5228e6740755a3226ee32c8531a175457bc2
Certificate serial: 019F8F7E9D2D33438EF4FF0D3CD8FD64CD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8btSKOZ0B1WjIm7jLIUxoXVFe8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:07 +0000
Manifest this update: Thu 23 Jul 2026 15:01:07 +0000
Manifest next update: Fri 24 Jul 2026 15:01:07 +0000
Files and hashes: 1: 8btSKOZ0B1WjIm7jLIUxoXVFe8I.crl (hash: /lSvMOOzC+HoRJ6sf8rNha+oLlgJdvN96Bysp3pevJs=)
2: jyJWlzyZ1vX6PJ6bDoA7JzTaum8.roa (hash: tR46ai3C4TAvLUk9BEjJ8S6Zo8lFI3KVbuM5/C/MToI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8btSKOZ0B1WjIm7jLIUxoXVFe8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:9d:2d:33:43:8e:f4:ff:0d:3c:d8:fd:64:cd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bb5228e6740755a3226ee32c8531a175457bc2
Validity
Not Before: Jul 23 15:01:07 2026 GMT
Not After : Jul 24 15:01:07 2026 GMT
Subject: CN=3f0ac0624f3d0626425d93b83a30fbddc13847a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:44:14:55:2a:21:bb:25:19:22:7c:11:a5:
c5:7a:4e:0f:bb:de:ac:f7:1e:a6:58:46:81:ea:ec:
02:71:29:af:d3:71:36:b6:6e:48:91:86:e1:d3:84:
e3:2d:67:a5:d3:b8:59:1c:48:b8:47:25:95:bb:7e:
c3:f1:8f:b5:fd:35:14:0d:be:c1:ad:ce:2a:7b:db:
6c:96:e2:75:d5:f6:d4:b1:08:12:79:5a:f2:09:95:
f8:69:06:50:dc:25:92:65:61:b9:32:a7:2d:9b:80:
c7:b2:9b:b9:9c:a7:16:43:aa:fd:c2:16:5c:92:33:
f3:7e:d4:7b:4f:a5:66:b4:0e:89:ea:c0:5b:be:75:
d0:81:71:52:62:18:fa:f3:cb:01:70:df:d1:07:b3:
9f:db:9f:ee:da:c2:28:b0:4d:71:35:8a:fe:e6:d0:
28:d1:25:dd:a1:be:70:69:0d:68:04:c9:27:ae:2c:
3c:ad:fe:90:cd:f7:da:19:7d:13:2d:8f:e4:f6:44:
ef:93:b3:ec:8b:ad:69:4a:89:6b:e5:44:93:1f:d4:
2d:fe:96:ff:0d:26:8c:0a:40:a9:8e:00:67:37:81:
90:96:fd:4e:38:29:71:54:04:8b:52:5f:21:fd:86:
e8:d0:ee:9c:66:ea:9a:26:6e:4a:a4:fb:3c:72:20:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0A:C0:62:4F:3D:06:26:42:5D:93:B8:3A:30:FB:DD:C1:38:47:A0
X509v3 Authority Key Identifier:
keyid:F1:BB:52:28:E6:74:07:55:A3:22:6E:E3:2C:85:31:A1:75:45:7B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8btSKOZ0B1WjIm7jLIUxoXVFe8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:20:82:b3:5a:ab:9c:b0:09:10:8a:d6:f4:2b:25:4c:ae:3d:
0e:e9:11:a2:25:8d:09:97:18:0c:9c:06:b2:d1:14:b2:81:5a:
9f:7d:6c:ea:8f:54:e4:36:fd:5b:1d:3c:fd:f2:35:dd:a9:35:
7d:d2:94:be:7c:ef:02:0f:85:c1:a8:88:6d:4f:f0:0f:22:4c:
81:61:d4:d7:1b:53:6c:f5:1d:a2:10:f5:97:80:ac:03:b6:ba:
7e:fb:31:50:77:48:72:45:29:80:1d:a8:3d:2f:b1:60:f7:f7:
37:e0:02:2a:81:65:6e:e0:7c:21:00:bd:75:ae:11:c6:a1:85:
ac:1f:04:ea:c9:49:d8:1e:b5:09:78:67:94:2f:d3:25:50:41:
3e:61:3a:72:da:61:43:67:ad:8c:d3:f2:ff:e8:54:6c:6c:33:
07:8d:5a:6c:9a:8e:57:50:ed:1f:c4:96:2c:52:ac:fb:31:92:
98:d3:58:3f:4d:93:09:2c:d4:ff:8e:1e:43:2b:e9:1f:28:ff:
17:f5:8c:48:95:a0:2c:95:f5:d4:2f:93:ad:ad:73:8b:4e:ae:
7b:f2:7e:5b:1d:c1:e8:83:8b:ac:19:37:0e:b5:61:c1:9e:90:
6f:38:b6:d9:32:ab:f4:c4:4a:76:00:92:0c:a1:08:4e:bd:ef:
67:c9:66:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfp0tM0OO9P8NPNj9ZM1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYmI1MjI4ZTY3NDA3NTVhMzIyNmVlMzJjODUzMWExNzU0
NTdiYzIwHhcNMjYwNzIzMTUwMTA3WhcNMjYwNzI0MTUwMTA3WjAzMTEwLwYDVQQD
EygzZjBhYzA2MjRmM2QwNjI2NDI1ZDkzYjgzYTMwZmJkZGMxMzg0N2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp65EFFUqIbslGSJ8EaXFek4Pu96s
9x6mWEaB6uwCcSmv03E2tm5IkYbh04TjLWel07hZHEi4RyWVu37D8Y+1/TUUDb7B
rc4qe9tsluJ11fbUsQgSeVryCZX4aQZQ3CWSZWG5Mqctm4DHspu5nKcWQ6r9whZc
kjPzftR7T6VmtA6J6sBbvnXQgXFSYhj688sBcN/RB7Of25/u2sIosE1xNYr+5tAo
0SXdob5waQ1oBMknriw8rf6QzffaGX0TLY/k9kTvk7Psi61pSolr5USTH9Qt/pb/
DSaMCkCpjgBnN4GQlv1OOClxVASLUl8h/Ybo0O6cZuqaJm5KpPs8ciA88wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8KwGJPPQYmQl2TuDow+93BOEegMB8GA1UdIwQY
MBaAFPG7UijmdAdVoyJu4yyFMaF1RXvCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJ0U0tPWjBCMVdqSW03akxJVXhvWFZGZThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYt
OTViOWUzNjJmMDc3LzEvOGJ0U0tPWjBCMVdqSW03akxJVXhvWFZGZThJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYtOTViOWUzNjJmMDc3
LzEvOGJ0U0tPWjBCMVdqSW03akxJVXhvWFZGZThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSCCs1qr
nLAJEIrW9CslTK49DukRoiWNCZcYDJwGstEUsoFan31s6o9U5Db9Wx08/fI13ak1
fdKUvnzvAg+FwaiIbU/wDyJMgWHU1xtTbPUdohD1l4CsA7a6fvsxUHdIckUpgB2o
PS+xYPf3N+ACKoFlbuB8IQC9da4RxqGFrB8E6slJ2B61CXhnlC/TJVBBPmE6ctph
Q2etjNPy/+hUbGwzB41abJqOV1DtH8SWLFKs+zGSmNNYP02TCSzU/44eQyvpHyj/
F/WMSJWgLJX11C+Tra1zi06ue/J+Wx3B6IOLrBk3DrVhwZ6Qbzi22TKr9MRKdgCS
DKEITr3vZ8lmXQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:21 2026 by rpki-client