Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
File: 82ct8ORpiLvu2b5UENoSo_Fw1pE.mft (raw, json)
Hash identifier: HAOb5EhJ4ft4zCg4mLtCVzG5vGqJ+3r2nedVPyz0Mm4=
Subject key identifier: 8E:EA:97:E1:7E:CE:7D:59:EB:F1:A5:92:7E:2E:F7:0A:1A:77:72:30
Authority key identifier: F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
Certificate issuer: /CN=f3672df0e46988bbeed9be5410da12a3f170d691
Certificate serial: 019F90C7B1C3FB62070F9E46C18AE5C6F5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 21:00:33 +0000
Manifest this update: Thu 23 Jul 2026 21:00:33 +0000
Manifest next update: Fri 24 Jul 2026 21:00:33 +0000
Files and hashes: 1: 82ct8ORpiLvu2b5UENoSo_Fw1pE.crl (hash: T/e86twlkeAzGXVWU1mIfSumROKW8ZqD/AT6o+dbigc=)
2: YwCwR3LXMu11k-vznf5QFY8Ls70.roa (hash: b+6Jc3/zLUqnM8wMsCWGbM4Jx06SlYE6hCoOYI6G5cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b1:c3:fb:62:07:0f:9e:46:c1:8a:e5:c6:f5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3672df0e46988bbeed9be5410da12a3f170d691
Validity
Not Before: Jul 23 21:00:33 2026 GMT
Not After : Jul 24 21:00:33 2026 GMT
Subject: CN=8eea97e17ece7d59ebf1a5927e2ef70a1a777230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:66:e2:48:9a:f5:ae:97:3b:41:37:3e:ef:
2b:14:bf:91:44:38:c1:04:05:d2:52:99:ea:55:c4:
ea:c8:28:8a:c0:7f:d8:1b:a0:f7:11:11:f8:83:90:
75:a7:5d:3d:b6:c5:59:86:55:a6:95:70:e3:de:8f:
34:ae:1a:a4:f5:3a:38:48:78:72:75:88:21:88:8c:
30:ae:c2:42:39:d6:ef:97:d2:ba:c4:d9:d0:03:1b:
ea:d3:a0:00:15:85:59:07:2a:e4:64:b7:7a:25:cf:
d5:68:d9:67:02:2f:58:84:7e:e6:bd:46:e3:3a:6f:
b7:38:b5:6d:af:b1:e9:3b:7f:75:62:35:6d:32:ab:
c1:2c:68:37:b4:88:ae:bd:a2:34:a2:0c:1a:3e:59:
71:05:46:6a:65:0f:4e:00:2d:43:2f:6d:c9:1d:63:
92:29:66:c0:56:37:8c:e2:2b:50:58:e6:2f:3a:8a:
e0:e0:d4:ab:20:36:5f:d4:c6:0a:03:00:b8:71:a8:
32:93:cf:b9:56:26:89:8e:8e:31:55:a4:b3:3d:81:
11:a0:ad:69:1f:44:8e:ce:cd:d4:5c:87:e0:a2:c2:
56:0b:48:7f:04:fb:ae:43:c6:52:2a:9f:c2:17:8d:
09:b2:b0:c1:35:73:1e:cb:9f:d3:23:10:bc:01:03:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EA:97:E1:7E:CE:7D:59:EB:F1:A5:92:7E:2E:F7:0A:1A:77:72:30
X509v3 Authority Key Identifier:
keyid:F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:44:4a:c9:c3:58:29:eb:3b:82:71:d8:9b:ba:57:f4:82:5d:
10:7c:d8:88:7f:ca:0d:0f:79:79:db:e9:9f:55:20:e1:b5:92:
62:c8:be:eb:f2:3c:ec:4f:ba:bd:fc:02:5d:a8:3d:71:7a:0f:
14:6b:ef:e8:22:19:96:1a:a9:a4:48:c2:89:e3:08:d8:42:52:
ed:a4:b2:21:18:50:77:60:cb:b5:4a:73:ba:10:d5:5b:51:55:
f3:61:db:b3:6c:b4:40:87:33:ba:bc:2d:3d:1a:62:f9:36:65:
02:cd:13:5b:a1:e2:92:62:0a:4d:ba:a8:07:ba:4c:cb:a1:24:
71:7a:72:7e:c8:34:17:3c:a3:e0:ad:25:b9:5b:2f:79:db:ed:
ad:4b:3e:9d:5b:42:6a:41:1b:2c:2d:7f:6d:01:c5:3c:41:10:
a4:2a:0b:72:1c:f0:f1:72:36:45:1b:e8:75:aa:f1:c0:f6:9e:
ae:ab:56:fd:29:a0:24:7d:21:5e:68:6c:18:0d:04:c1:9c:0a:
0f:37:5a:ec:e2:5d:10:97:96:a7:c4:e1:36:12:53:ec:a5:88:
ed:2d:26:37:6a:f6:58:e9:2e:2b:bf:d7:1e:02:63:71:89:df:
1a:ec:31:fd:0a:45:4a:9b:d9:f1:dd:be:5b:d3:80:c3:be:ed:
90:ea:39:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx7HD+2IHD55GwYrlxvWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNjcyZGYwZTQ2OTg4YmJlZWQ5YmU1NDEwZGExMmEzZjE3
MGQ2OTEwHhcNMjYwNzIzMjEwMDMzWhcNMjYwNzI0MjEwMDMzWjAzMTEwLwYDVQQD
Eyg4ZWVhOTdlMTdlY2U3ZDU5ZWJmMWE1OTI3ZTJlZjcwYTFhNzc3MjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjZm4kia9a6XO0E3Pu8rFL+RRDjB
BAXSUpnqVcTqyCiKwH/YG6D3ERH4g5B1p109tsVZhlWmlXDj3o80rhqk9To4SHhy
dYghiIwwrsJCOdbvl9K6xNnQAxvq06AAFYVZByrkZLd6Jc/VaNlnAi9YhH7mvUbj
Om+3OLVtr7HpO391YjVtMqvBLGg3tIiuvaI0ogwaPllxBUZqZQ9OAC1DL23JHWOS
KWbAVjeM4itQWOYvOorg4NSrIDZf1MYKAwC4cagyk8+5ViaJjo4xVaSzPYERoK1p
H0SOzs3UXIfgosJWC0h/BPuuQ8ZSKp/CF40JsrDBNXMey5/TIxC8AQN5oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7ql+F+zn1Z6/Glkn4u9woad3IwMB8GA1UdIwQY
MBaAFPNnLfDkaYi77tm+VBDaEqPxcNaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81NjVmODktNjIwOC00NzFhLWI2OWMt
M2UyMjE5OGFlYjUyLzEvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81NjVmODktNjIwOC00NzFhLWI2OWMtM2UyMjE5OGFlYjUy
LzEvODJjdDhPUnBpTHZ1MmI1VUVOb1NvX0Z3MXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALERKycNY
Kes7gnHYm7pX9IJdEHzYiH/KDQ95edvpn1Ug4bWSYsi+6/I87E+6vfwCXag9cXoP
FGvv6CIZlhqppEjCieMI2EJS7aSyIRhQd2DLtUpzuhDVW1FV82Hbs2y0QIczurwt
PRpi+TZlAs0TW6HikmIKTbqoB7pMy6EkcXpyfsg0Fzyj4K0luVsvedvtrUs+nVtC
akEbLC1/bQHFPEEQpCoLchzw8XI2RRvodarxwPaerqtW/SmgJH0hXmhsGA0EwZwK
Dzda7OJdEJeWp8ThNhJT7KWI7S0mN2r2WOkuK7/XHgJjcYnfGuwx/QpFSpvZ8d2+
W9OAw77tkOo5IQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:52:11 2026 by rpki-client