Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
File: c8NA1CPOqEv-S_GRbURn2yhPG9E.mft (raw, json)
Hash identifier: flSc/hzriYkxKepMVZV9DwMFAjTQMwC6Gm3Oa3KhfRg=
Subject key identifier: 5B:C8:87:5B:99:69:2D:FE:49:DD:E0:5E:26:24:56:08:BD:07:0D:A8
Authority key identifier: 73:C3:40:D4:23:CE:A8:4B:FE:4B:F1:91:6D:44:67:DB:28:4F:1B:D1
Certificate issuer: /CN=73c340d423cea84bfe4bf1916d4467db284f1bd1
Certificate serial: 019F935A9339ABF3C84CB9D458117AB5E99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:14 +0000
Manifest this update: Fri 24 Jul 2026 09:00:14 +0000
Manifest next update: Sat 25 Jul 2026 09:00:14 +0000
Files and hashes: 1: GE_VQOmsDP-Y1bkx7TZGCnoFE68.roa (hash: 62+kuU98oy4EBWbGRZ1tg6jTebE/AiOSPPyh1dqPc7k=)
2: b29z0SmKuf57xTcfTwg8xTH0h9U.roa (hash: 7FbHeUWOoJSoqd/LHofesB/M+xhe9b4HJWzm53NLUIg=)
3: c8NA1CPOqEv-S_GRbURn2yhPG9E.crl (hash: b8/E8t6eZPEpyuZlPvAyyPtieuNJ2KerYeDau1dEQFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:93:39:ab:f3:c8:4c:b9:d4:58:11:7a:b5:e9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c340d423cea84bfe4bf1916d4467db284f1bd1
Validity
Not Before: Jul 24 09:00:14 2026 GMT
Not After : Jul 25 09:00:14 2026 GMT
Subject: CN=5bc8875b99692dfe49dde05e26245608bd070da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:3f:80:4f:07:99:2a:28:6c:99:97:b9:8c:
4e:86:d9:04:c3:dd:1c:6c:55:c9:6a:5e:20:89:5a:
89:b9:2e:a2:2c:a6:38:d8:37:bb:0d:f1:79:82:aa:
01:64:f4:6b:bd:a8:5e:d1:62:52:16:a4:43:b9:85:
a9:a8:3f:5a:e7:56:87:72:f2:db:cb:ed:18:dc:74:
cb:4e:9c:76:bf:2c:f2:5c:be:e4:d1:a4:1c:e6:38:
63:f4:f4:95:c6:d6:f2:d3:93:cb:4e:6d:cd:a1:9f:
7d:d2:9b:69:02:d9:d4:26:3f:82:e3:67:3d:fd:4f:
22:e0:22:28:e2:ea:09:fc:e2:39:96:7e:85:39:e4:
35:78:e8:02:21:dc:8d:64:ad:c5:31:e4:b2:dc:b0:
f4:ba:47:78:da:5d:0d:eb:c6:58:14:ed:83:13:99:
90:00:4d:51:bc:9b:1d:6d:83:a7:6d:7a:65:63:10:
50:6c:00:9b:a2:aa:63:74:b4:68:b2:68:99:d8:cb:
71:ca:e6:27:8d:f8:2d:7b:9c:04:5a:74:3a:e7:3c:
3f:45:10:ba:e5:98:a9:11:05:41:20:5d:cf:f3:aa:
ba:f6:18:6b:3f:0f:1d:1b:77:5e:11:15:08:1f:2e:
db:3d:1c:44:d0:82:d9:aa:05:a0:b4:67:db:b6:28:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C8:87:5B:99:69:2D:FE:49:DD:E0:5E:26:24:56:08:BD:07:0D:A8
X509v3 Authority Key Identifier:
keyid:73:C3:40:D4:23:CE:A8:4B:FE:4B:F1:91:6D:44:67:DB:28:4F:1B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8NA1CPOqEv-S_GRbURn2yhPG9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/c8NA1CPOqEv-S_GRbURn2yhPG9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0b:18:79:c8:f3:4b:91:13:58:af:e7:1a:69:8d:35:b7:16:
57:19:81:90:00:b2:66:66:79:17:1b:f1:ee:58:cb:c8:91:f6:
0e:38:b3:41:67:5d:9f:b2:d3:9f:69:10:3e:58:45:54:88:65:
f5:07:e6:5b:89:8e:da:26:7a:27:9c:e5:12:62:41:04:55:e5:
bf:bc:79:81:11:d9:87:af:1a:fb:77:71:26:10:76:32:1f:b4:
f2:ff:12:33:d6:70:02:e1:a1:74:4d:fd:f8:ae:69:81:f3:6d:
33:01:4d:4d:02:3e:31:c9:93:32:73:9c:f5:12:59:3a:57:33:
de:83:cc:41:f6:0d:50:f6:25:64:49:4c:a7:4c:ac:ae:8d:17:
d1:5e:23:d0:04:80:77:ae:ec:99:27:56:ba:03:d2:4c:89:d9:
52:a9:50:e9:35:b6:79:4a:27:bf:80:4b:c6:fd:63:3a:84:79:
cd:49:fc:b1:2f:cd:b4:72:f1:50:70:f5:a0:b0:e5:e1:4e:37:
fd:09:63:22:63:5b:bc:0a:0a:60:1b:e6:de:0e:87:ec:2e:4d:
2a:a2:23:42:60:24:e7:1a:08:fa:ea:1f:92:b0:47:6c:60:2e:
54:81:93:5e:48:41:d5:1e:99:ae:e4:c5:94:bf:4d:a7:16:bc:
03:75:46:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWpM5q/PITLnUWBF6temeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzM0MGQ0MjNjZWE4NGJmZTRiZjE5MTZkNDQ2N2RiMjg0
ZjFiZDEwHhcNMjYwNzI0MDkwMDE0WhcNMjYwNzI1MDkwMDE0WjAzMTEwLwYDVQQD
Eyg1YmM4ODc1Yjk5NjkyZGZlNDlkZGUwNWUyNjI0NTYwOGJkMDcwZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk4/gE8HmSoobJmXuYxOhtkEw90c
bFXJal4giVqJuS6iLKY42De7DfF5gqoBZPRrvahe0WJSFqRDuYWpqD9a51aHcvLb
y+0Y3HTLTpx2vyzyXL7k0aQc5jhj9PSVxtby05PLTm3NoZ990ptpAtnUJj+C42c9
/U8i4CIo4uoJ/OI5ln6FOeQ1eOgCIdyNZK3FMeSy3LD0ukd42l0N68ZYFO2DE5mQ
AE1RvJsdbYOnbXplYxBQbACboqpjdLRosmiZ2MtxyuYnjfgte5wEWnQ65zw/RRC6
5ZipEQVBIF3P86q69hhrPw8dG3deERUIHy7bPRxE0ILZqgWgtGfbtihQrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvIh1uZaS3+Sd3gXiYkVgi9Bw2oMB8GA1UdIwQY
MBaAFHPDQNQjzqhL/kvxkW1EZ9soTxvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhOQTFDUE9xRXYtU19HUmJVUm4yeWhQRzlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hYzFmYTktNGVjOC00MDE2LTlhZGQt
NGMzYmU5YTI4ZDkzLzEvYzhOQTFDUE9xRXYtU19HUmJVUm4yeWhQRzlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9hYzFmYTktNGVjOC00MDE2LTlhZGQtNGMzYmU5YTI4ZDkz
LzEvYzhOQTFDUE9xRXYtU19HUmJVUm4yeWhQRzlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgsYecjz
S5ETWK/nGmmNNbcWVxmBkACyZmZ5Fxvx7ljLyJH2DjizQWddn7LTn2kQPlhFVIhl
9QfmW4mO2iZ6J5zlEmJBBFXlv7x5gRHZh68a+3dxJhB2Mh+08v8SM9ZwAuGhdE39
+K5pgfNtMwFNTQI+McmTMnOc9RJZOlcz3oPMQfYNUPYlZElMp0ysro0X0V4j0ASA
d67smSdWugPSTInZUqlQ6TW2eUonv4BLxv1jOoR5zUn8sS/NtHLxUHD1oLDl4U43
/QljImNbvAoKYBvm3g6H7C5NKqIjQmAk5xoI+uofkrBHbGAuVIGTXkhB1R6ZruTF
lL9Npxa8A3VGEg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:13 2026 by rpki-client