Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: fwL9o3JCcSZahUC2xg8bCK1436/7KrOOnjEyNJYwhms=
Subject key identifier: AC:A2:3B:27:47:11:BA:31:FA:AA:B4:9A:75:39:9A:13:E3:DD:2E:C8
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 019F9022C444742738BC98918742F8F87222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 13D6
Signing time: Thu 23 Jul 2026 18:00:25 +0000
Manifest this update: Thu 23 Jul 2026 18:00:25 +0000
Manifest next update: Fri 24 Jul 2026 18:00:25 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: eCYVS8SYo4xUYms4c3EeYvhOCo0jMpEO+cxHljBUFjc=)
2: GOJdmQeTfRZxvLli-b1t8ivPIP0.roa (hash: rE4/LNjEHFf2tYypahcaP12dhBhPp76Zx6vdg4QGZdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:c4:44:74:27:38:bc:98:91:87:42:f8:f8:72:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Jul 23 18:00:25 2026 GMT
Not After : Jul 24 18:00:25 2026 GMT
Subject: CN=aca23b274711ba31faaab49a75399a13e3dd2ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:7a:f4:1b:ce:79:46:16:54:0e:d1:db:aa:
d0:cf:3e:70:ad:47:f7:36:ae:e5:ee:69:15:0b:24:
cf:97:70:f4:dd:9d:61:36:ec:be:84:c5:59:b5:6e:
76:22:29:c1:bc:3b:90:5b:ae:45:77:ae:2c:3e:8a:
ef:9e:79:9b:2d:2f:f1:d3:0c:a3:57:27:b0:07:6c:
3a:7f:8f:3e:f8:a8:73:b2:3a:96:ec:7c:da:c5:c7:
e7:fc:9e:b4:c1:98:90:e7:73:4a:ef:0d:0b:84:78:
44:4f:f9:07:75:bd:c8:94:50:50:ac:63:fe:c5:8c:
39:24:1e:6f:46:d5:26:43:ba:57:d3:5f:2c:ea:e0:
7c:72:6b:df:e8:a8:32:12:75:30:d9:2b:36:72:1f:
70:05:1c:2e:1d:d2:c2:c3:78:d0:6c:bc:3a:77:6c:
77:24:6d:04:1e:a0:f1:d9:5b:87:bd:c2:0f:1b:e8:
27:7b:2b:2e:ea:8a:07:90:27:49:f0:9f:80:e2:d5:
09:3e:e8:2b:95:d5:8e:4e:60:49:85:64:38:cc:8c:
74:99:6c:04:3a:15:a7:54:e3:3e:68:d2:c1:78:d3:
49:cd:69:da:71:03:96:e5:8c:ef:a0:ba:4e:39:af:
6e:53:13:99:ef:9d:44:0a:e7:33:87:f4:69:3c:d7:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A2:3B:27:47:11:BA:31:FA:AA:B4:9A:75:39:9A:13:E3:DD:2E:C8
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:50:48:a0:6f:c6:1d:23:f8:d2:f4:aa:6d:7a:b4:64:d4:f5:
d5:df:26:48:86:6a:25:4f:18:32:c9:d2:e2:97:85:b0:a2:c8:
e3:a7:c4:87:25:82:19:95:a6:a0:78:3b:e3:09:89:42:94:bf:
c7:52:88:ac:8a:59:32:3e:df:e7:70:46:0a:60:8d:a6:2b:75:
bd:95:bd:e7:55:7c:b4:72:5f:8f:ab:0f:37:04:e0:90:5e:91:
f9:92:d4:d1:3d:1e:c9:ea:87:a9:e1:d0:97:9a:fd:28:2a:42:
f3:e8:87:8f:23:a0:8d:a7:90:05:8a:d5:4f:bb:2f:da:e9:af:
39:de:d2:c8:0e:0b:4e:03:ef:4b:4a:e1:94:99:92:11:30:0f:
39:00:f1:48:f5:0e:9a:5c:6c:38:81:1f:4a:40:32:e0:d8:4b:
28:71:5e:07:61:d0:b2:0f:7b:6f:34:92:e3:0e:ab:eb:31:c8:
4a:36:df:2b:76:01:ce:8f:8f:f9:55:ab:a1:bf:d6:a5:c1:11:
36:96:12:eb:13:c7:fd:22:9a:79:d1:4a:6a:9c:f1:e3:6d:47:
29:4e:6e:8b:8c:a0:20:49:85:7a:9d:39:4b:88:b5:6e:22:66:
ee:6b:fa:c5:44:e5:43:cb:fe:21:9f:fb:3f:85:c3:5d:5b:2b:
9c:a3:78:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIsREdCc4vJiRh0L4+HIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2EyMzYwN2Y2ZDFlNmU2Y2VkMWRkOTRjOWJkMTBiMzA2
ZjYwOWQwHhcNMjYwNzIzMTgwMDI1WhcNMjYwNzI0MTgwMDI1WjAzMTEwLwYDVQQD
EyhhY2EyM2IyNzQ3MTFiYTMxZmFhYWI0OWE3NTM5OWExM2UzZGQyZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeJ69BvOeUYWVA7R26rQzz5wrUf3
Nq7l7mkVCyTPl3D03Z1hNuy+hMVZtW52IinBvDuQW65Fd64sPorvnnmbLS/x0wyj
VyewB2w6f48++KhzsjqW7Hzaxcfn/J60wZiQ53NK7w0LhHhET/kHdb3IlFBQrGP+
xYw5JB5vRtUmQ7pX018s6uB8cmvf6KgyEnUw2Ss2ch9wBRwuHdLCw3jQbLw6d2x3
JG0EHqDx2VuHvcIPG+gneysu6ooHkCdJ8J+A4tUJPugrldWOTmBJhWQ4zIx0mWwE
OhWnVOM+aNLBeNNJzWnacQOW5YzvoLpOOa9uUxOZ751ECuczh/RpPNerhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyiOydHEbox+qq0mnU5mhPj3S7IMB8GA1UdIwQY
MBaAFPJ6I2B/bR5ubO0d2Uyb0Qswb2CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEt
ODc5MTNjMzU0OTJhLzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEtODc5MTNjMzU0OTJh
LzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlBIoG/G
HSP40vSqbXq0ZNT11d8mSIZqJU8YMsnS4peFsKLI46fEhyWCGZWmoHg74wmJQpS/
x1KIrIpZMj7f53BGCmCNpit1vZW951V8tHJfj6sPNwTgkF6R+ZLU0T0eyeqHqeHQ
l5r9KCpC8+iHjyOgjaeQBYrVT7sv2umvOd7SyA4LTgPvS0rhlJmSETAPOQDxSPUO
mlxsOIEfSkAy4NhLKHFeB2HQsg97bzSS4w6r6zHISjbfK3YBzo+P+VWrob/WpcER
NpYS6xPH/SKaedFKapzx421HKU5ui4ygIEmFep05S4i1biJm7mv6xUTlQ8v+IZ/7
P4XDXVsrnKN4XA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:59 2026 by rpki-client