Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
File: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft (raw, json)
Hash identifier: Uh/W3z+wW1ZLQ9JLvTHuXYhbksUPNLo/UBGO7UPCQTs=
Subject key identifier: D7:F2:ED:C8:2D:57:0B:AC:54:F0:15:83:16:91:51:09:66:00:A8:28
Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
Certificate issuer: /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Certificate serial: 019F90C764B0201D457F2F52A5DACF75AA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
Manifest number: 0DD4
Signing time: Thu 23 Jul 2026 21:00:14 +0000
Manifest this update: Thu 23 Jul 2026 21:00:14 +0000
Manifest next update: Fri 24 Jul 2026 21:00:14 +0000
Files and hashes: 1: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl (hash: UXNRPRyVNRD6HdJv0o9hS8GJoF2MBXVr7N/ZC6/qAis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:64:b0:20:1d:45:7f:2f:52:a5:da:cf:75:aa:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Validity
Not Before: Jul 23 21:00:14 2026 GMT
Not After : Jul 24 21:00:14 2026 GMT
Subject: CN=d7f2edc82d570bac54f01583169151096600a828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d4:d8:d3:37:21:ec:a7:f7:b1:f0:42:15:6c:
6c:aa:1f:6f:7d:f6:88:5a:a0:cb:81:77:f8:4d:73:
6d:05:7b:42:c2:f2:bd:e1:b2:bf:c1:64:b0:a0:22:
ae:c7:af:a7:a9:ba:92:13:3e:26:6d:b6:a4:48:7a:
e6:4e:ac:62:53:df:e1:f9:40:fc:19:6c:e8:21:ac:
8e:10:88:9c:20:37:06:aa:fe:f6:49:ec:03:d0:02:
f3:c1:32:28:d9:71:e8:a4:fc:ff:ff:b9:65:d9:bd:
f6:3f:67:fc:19:01:b3:33:fa:5a:71:17:4b:c3:2a:
6d:9c:b1:68:34:95:f1:2c:93:56:b4:c7:17:df:cc:
80:a3:79:4b:af:26:2a:65:5c:10:23:4a:60:3b:14:
81:31:f0:ab:0f:26:c1:89:b4:4c:2d:98:7b:b6:72:
d5:8a:66:3e:64:ea:5a:6d:a4:73:6e:ef:c9:9c:11:
2c:f6:05:99:b5:a5:12:7c:57:ee:ed:53:c6:24:39:
41:09:db:39:60:6a:0d:26:05:58:ab:75:57:6d:74:
a4:a5:5a:9d:5e:1d:79:bf:2d:6e:a7:8c:2b:e6:a4:
db:6b:e6:0d:5b:dc:fb:f1:a4:a1:6b:d2:ef:25:80:
f6:03:95:ba:ba:57:27:4f:d8:6e:1d:7a:f0:a4:48:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F2:ED:C8:2D:57:0B:AC:54:F0:15:83:16:91:51:09:66:00:A8:28
X509v3 Authority Key Identifier:
keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d5:ac:5d:77:60:57:32:ba:16:67:d6:cf:73:62:81:86:1b:
cc:07:a8:ea:1c:ce:a5:77:80:fd:05:7a:b7:aa:61:b4:99:f7:
6e:e3:dd:24:da:75:63:1d:d9:b0:9e:57:4b:c7:fd:c2:ce:84:
61:76:e8:f9:0e:22:9a:1e:84:3d:82:76:ed:1b:03:d2:b2:a8:
ae:10:23:f8:4e:51:52:05:b7:95:36:84:78:e7:d5:a1:a5:c1:
23:81:e8:c3:4e:ec:7f:9f:1d:97:91:44:d5:81:ad:a0:8e:3e:
9f:a5:50:4b:50:08:da:4c:03:74:f0:13:5e:ea:34:e4:ea:a1:
97:f9:90:db:2f:e3:94:35:fb:1c:d7:3c:d0:82:7f:6f:9e:06:
94:43:81:9a:83:be:11:05:d6:a2:4f:13:e6:10:14:f1:87:dc:
e1:2f:f8:ef:a1:f3:a1:35:ea:ea:02:4f:ad:54:5f:4b:45:4e:
45:d5:29:e8:b4:47:47:2d:60:46:9c:cd:6e:e4:d6:99:b3:5a:
62:0c:5d:de:f0:06:dc:ea:c7:21:17:24:51:c4:45:b8:0e:2f:
11:73:b4:de:41:c2:e3:c6:23:cf:1f:d7:38:b3:ef:04:ef:77:
60:f6:73:3b:49:39:40:83:6a:f7:e5:1b:b1:95:93:d4:12:75:
1c:d6:50:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx2SwIB1Ffy9SpdrPdaovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZDQxMTY5NzVkM2U4N2JkOGEyOGU2NDNjNjlhMzA4MWRl
MDAxOWYwHhcNMjYwNzIzMjEwMDE0WhcNMjYwNzI0MjEwMDE0WjAzMTEwLwYDVQQD
EyhkN2YyZWRjODJkNTcwYmFjNTRmMDE1ODMxNjkxNTEwOTY2MDBhODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NTY0zch7Kf3sfBCFWxsqh9vffaI
WqDLgXf4TXNtBXtCwvK94bK/wWSwoCKux6+nqbqSEz4mbbakSHrmTqxiU9/h+UD8
GWzoIayOEIicIDcGqv72SewD0ALzwTIo2XHopPz//7ll2b32P2f8GQGzM/pacRdL
wyptnLFoNJXxLJNWtMcX38yAo3lLryYqZVwQI0pgOxSBMfCrDybBibRMLZh7tnLV
imY+ZOpabaRzbu/JnBEs9gWZtaUSfFfu7VPGJDlBCds5YGoNJgVYq3VXbXSkpVqd
Xh15vy1up4wr5qTba+YNW9z78aSha9LvJYD2A5W6ulcnT9huHXrwpEi7YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfy7cgtVwusVPAVgxaRUQlmAKgoMB8GA1UdIwQY
MBaAFPLUEWl10+h72KKOZDxpowgd4AGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81OTk2ZTEtMmZmMC00YmI3LWE4ODAt
ZmFhYjljYWUxZTgxLzEvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi81OTk2ZTEtMmZmMC00YmI3LWE4ODAtZmFhYjljYWUxZTgx
LzEvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9WsXXdg
VzK6FmfWz3NigYYbzAeo6hzOpXeA/QV6t6phtJn3buPdJNp1Yx3ZsJ5XS8f9ws6E
YXbo+Q4imh6EPYJ27RsD0rKorhAj+E5RUgW3lTaEeOfVoaXBI4How07sf58dl5FE
1YGtoI4+n6VQS1AI2kwDdPATXuo05Oqhl/mQ2y/jlDX7HNc80IJ/b54GlEOBmoO+
EQXWok8T5hAU8Yfc4S/476HzoTXq6gJPrVRfS0VORdUp6LRHRy1gRpzNbuTWmbNa
Ygxd3vAG3OrHIRckUcRFuA4vEXO03kHC48Yjzx/XOLPvBO93YPZzO0k5QINq9+Ub
sZWT1BJ1HNZQQA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:10 2026 by rpki-client