Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier: IOn774hVfGMWWPPHbHDajFJF7NH1oR7nKobSOFMLYlw=
Subject key identifier: B7:CF:B8:E7:49:A6:C2:B7:3A:CB:3C:33:B6:83:93:8D:55:E1:4F:EC
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer: /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial: 019F8FB5497D37807460F6CFD5611AED83A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number: 1032
Signing time: Thu 23 Jul 2026 16:00:50 +0000
Manifest this update: Thu 23 Jul 2026 16:00:50 +0000
Manifest next update: Fri 24 Jul 2026 16:00:50 +0000
Files and hashes: 1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: O68GNW/bmJIqtpetsHZJHwwOwv2GnWYr3vraiouYEg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:49:7d:37:80:74:60:f6:cf:d5:61:1a:ed:83:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
Validity
Not Before: Jul 23 16:00:50 2026 GMT
Not After : Jul 24 16:00:50 2026 GMT
Subject: CN=b7cfb8e749a6c2b73acb3c33b683938d55e14fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:03:49:b8:54:7a:97:d9:90:e9:d7:a7:95:ef:
b5:59:64:95:dc:ba:cf:2d:fb:ec:0e:65:96:bc:eb:
00:aa:1f:56:aa:3f:71:ba:89:f8:da:cf:cf:c0:49:
b8:5d:00:c0:ab:c0:1f:6a:7d:1e:3f:bb:2f:00:49:
10:a7:cd:54:5e:b1:73:df:94:dc:58:59:63:fe:6f:
64:cd:e4:14:b4:9b:32:fd:46:25:3d:e1:60:aa:33:
e4:3d:fa:d1:8b:33:f8:eb:1b:2b:de:a9:61:22:b7:
91:96:0e:73:26:cc:d7:d5:e7:9c:fa:f7:0e:91:9b:
c6:26:f0:29:19:45:30:08:22:60:db:5c:22:e3:ee:
92:73:fb:5c:e4:07:8d:9c:70:65:06:aa:00:df:52:
17:09:ac:74:7a:78:d2:b5:d3:3c:6b:8b:fc:c2:2e:
68:59:b8:2e:02:2d:35:e4:b7:ad:4b:6c:85:3b:86:
bd:70:54:8a:f3:c6:7c:14:ae:4d:36:e9:d6:73:27:
04:d3:ed:e8:50:92:55:f5:7d:76:69:bf:96:db:91:
fc:b8:eb:8c:fd:b6:3e:ea:37:81:82:a1:43:e3:9f:
63:af:8a:89:c8:94:a2:79:a9:e6:0a:55:05:98:8f:
8b:b3:44:e5:5c:46:f6:2c:fd:23:e7:74:01:2d:20:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CF:B8:E7:49:A6:C2:B7:3A:CB:3C:33:B6:83:93:8D:55:E1:4F:EC
X509v3 Authority Key Identifier:
keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2e:8c:23:02:41:12:ca:34:39:83:9c:2d:3d:6b:b8:fe:26:
9e:49:62:6d:83:18:7a:16:dc:ac:cf:9f:01:5a:c0:01:77:68:
c5:c0:03:09:9a:ea:94:b5:7e:80:b1:2a:67:55:19:76:10:4a:
92:2c:24:ea:c3:5a:f8:5d:3b:ec:ec:ce:a0:b8:34:39:e8:30:
c1:f3:c9:41:dd:3e:e6:e8:9a:8c:12:56:30:80:aa:e0:b1:da:
83:79:b1:49:a0:ca:88:0a:3d:60:27:7b:d9:e1:62:3f:ab:5b:
2c:c8:e8:d6:85:f7:9e:86:47:9d:23:89:a9:38:f2:3e:f2:99:
10:8d:7f:b5:4f:76:2c:7b:f9:4f:04:13:43:42:11:39:f8:94:
b1:5f:c7:f9:3d:78:94:02:d9:c1:f8:ea:c6:2e:98:b3:64:dd:
9e:54:de:6b:41:c0:a8:67:b8:1c:b4:62:40:aa:40:d4:dd:84:
fb:1e:4b:96:cd:af:31:02:32:97:01:af:ce:37:ff:6a:41:f8:
8b:85:75:b4:71:e2:95:10:f9:66:44:c9:20:57:c2:a8:aa:d7:
47:4b:af:4d:55:f7:9b:7a:99:0e:83:3c:3b:f5:7c:a4:0c:1b:
d1:a1:89:a6:50:73:55:69:5f:44:78:52:00:24:9a:5a:1b:cc:
66:ab:e0:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtUl9N4B0YPbP1WEa7YOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOTc2MGNmMTFlZjJiODYyMTg3YjA1ZTVkNzUxYzczNGM2
MzRiNDUwHhcNMjYwNzIzMTYwMDUwWhcNMjYwNzI0MTYwMDUwWjAzMTEwLwYDVQQD
EyhiN2NmYjhlNzQ5YTZjMmI3M2FjYjNjMzNiNjgzOTM4ZDU1ZTE0ZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoANJuFR6l9mQ6denle+1WWSV3LrP
LfvsDmWWvOsAqh9Wqj9xuon42s/PwEm4XQDAq8Afan0eP7svAEkQp81UXrFz35Tc
WFlj/m9kzeQUtJsy/UYlPeFgqjPkPfrRizP46xsr3qlhIreRlg5zJszX1eec+vcO
kZvGJvApGUUwCCJg21wi4+6Sc/tc5AeNnHBlBqoA31IXCax0enjStdM8a4v8wi5o
WbguAi015LetS2yFO4a9cFSK88Z8FK5NNunWcycE0+3oUJJV9X12ab+W25H8uOuM
/bY+6jeBgqFD459jr4qJyJSieanmClUFmI+Ls0TlXEb2LP0j53QBLSDtDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfPuOdJpsK3Oss8M7aDk41V4U/sMB8GA1UdIwQY
MBaAFPCXYM8R7yuGIYewXl11HHNMY0tFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xMDg0OWItZjFhYS00OTE3LWI4Y2It
MzYwMjI0NDZmMDIzLzEvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xMDg0OWItZjFhYS00OTE3LWI4Y2ItMzYwMjI0NDZmMDIz
LzEvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARi6MIwJB
Eso0OYOcLT1ruP4mnklibYMYehbcrM+fAVrAAXdoxcADCZrqlLV+gLEqZ1UZdhBK
kiwk6sNa+F077OzOoLg0OegwwfPJQd0+5uiajBJWMICq4LHag3mxSaDKiAo9YCd7
2eFiP6tbLMjo1oX3noZHnSOJqTjyPvKZEI1/tU92LHv5TwQTQ0IROfiUsV/H+T14
lALZwfjqxi6Ys2TdnlTea0HAqGe4HLRiQKpA1N2E+x5Lls2vMQIylwGvzjf/akH4
i4V1tHHilRD5ZkTJIFfCqKrXR0uvTVX3m3qZDoM8O/V8pAwb0aGJplBzVWlfRHhS
ACSaWhvMZqvgPA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:35:31 2026 by rpki-client