Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: U/dDjbH6t/qh+gGZ/7Uxq6lAHn40xtNRPVTVe5jNi0Y=
Subject key identifier: 94:E6:5D:D7:A4:E9:67:E7:01:3A:F3:8A:A6:53:00:21:7D:FD:5F:6F
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 019F9022F00000CFB16F313EDB2F2D4E2B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 0945
Signing time: Thu 23 Jul 2026 18:00:36 +0000
Manifest this update: Thu 23 Jul 2026 18:00:36 +0000
Manifest next update: Fri 24 Jul 2026 18:00:36 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: 9JyDNwnn7KBN/Af86AEbuiinTllWEZ5W+rl5pkI6NP8=)
2: wg9L7rd4GBIxdDb6Qm5YK6zsb3U.roa (hash: Mp7viOHmtxKfCc5QYE1IZGldkiFvmgFzmHRq++mrwh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:f0:00:00:cf:b1:6f:31:3e:db:2f:2d:4e:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Jul 23 18:00:36 2026 GMT
Not After : Jul 24 18:00:36 2026 GMT
Subject: CN=94e65dd7a4e967e7013af38aa65300217dfd5f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:8f:31:ce:c8:43:b9:41:14:d8:0e:5c:3f:
69:8c:91:81:c9:0b:f6:51:7f:53:7d:ed:c0:f8:a4:
72:0a:de:34:2a:df:af:75:06:69:c7:41:7a:f0:fe:
35:a9:de:55:35:6a:52:fe:e6:9a:be:68:2e:90:a5:
7a:b0:d5:42:c9:3d:95:16:07:cb:78:92:8d:fd:19:
42:02:0e:f2:cc:ca:57:e6:b9:0e:94:08:b2:6a:99:
ef:67:53:b0:0c:dc:f6:b7:76:32:4c:b9:25:37:2b:
84:60:83:af:be:e6:97:5c:a4:3c:2e:cb:a6:cf:23:
2d:d3:f8:2d:ed:c9:ea:55:0d:5f:2b:e3:fc:5b:28:
a7:5e:d7:c4:e0:ef:3e:fb:96:af:aa:bc:76:e8:6f:
4a:8e:b4:94:ef:56:73:c5:32:45:74:78:4a:84:cb:
56:c9:d7:71:40:7a:c3:a9:73:fe:a0:0b:5a:08:54:
1d:07:ae:eb:81:dc:0b:66:44:bf:d1:27:24:0c:af:
ad:30:39:95:0f:c3:77:ce:db:be:ef:f8:5c:79:09:
89:f0:c6:b8:ac:92:92:bf:9d:f2:44:b8:ac:34:b6:
32:1e:08:07:3c:78:d7:7f:51:29:b7:1d:96:ec:c7:
30:b4:bd:78:46:f9:99:c1:7f:d1:95:7e:0a:85:5a:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E6:5D:D7:A4:E9:67:E7:01:3A:F3:8A:A6:53:00:21:7D:FD:5F:6F
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1f:24:57:66:1d:70:d6:1c:24:65:eb:7b:df:2e:ee:c3:90:
d1:b7:4f:c6:ed:3a:46:d3:79:fa:9c:b4:a4:2c:bc:ed:a6:ad:
b9:4f:d1:f7:58:ea:c6:57:c7:98:98:74:d0:2f:38:7c:f1:e1:
a2:e4:b4:f0:92:03:3b:00:48:e9:98:ea:9c:50:d0:ec:67:c1:
9f:88:34:38:88:df:81:ba:85:51:b2:3a:42:a8:31:28:9b:cf:
d5:a7:89:c3:7d:4e:83:81:c4:03:4b:58:42:0e:0c:aa:30:88:
67:03:0c:64:bd:a4:f1:9b:d2:1a:64:4d:8a:59:de:7f:8c:36:
34:5a:92:17:9d:52:39:97:97:9b:3b:bb:14:5a:79:9f:93:c3:
39:ad:17:62:7c:cf:18:a5:4c:e0:d8:4c:db:4e:21:32:26:d5:
96:c6:43:53:0e:f6:8f:63:6d:a9:f3:5c:eb:d6:08:b5:f7:76:
b6:99:d0:c7:85:0c:e5:b8:ef:6c:89:d5:51:b2:36:89:8e:cc:
b3:9e:70:df:39:b1:f8:2f:bc:97:38:8d:66:2f:47:dd:1a:6f:
d0:15:df:b9:78:02:78:62:95:b9:86:ad:97:ed:8a:72:15:eb:
f9:54:36:90:35:3c:4c:a7:ce:1c:18:4f:21:ce:a1:2a:e3:38:
5f:b0:59:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIvAAAM+xbzE+2y8tTisAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODUyNzBlODMxOTNkMzI2OWY3Y2RlOWRhMDgwOGIxZWZm
NTUyYWUwHhcNMjYwNzIzMTgwMDM2WhcNMjYwNzI0MTgwMDM2WjAzMTEwLwYDVQQD
Eyg5NGU2NWRkN2E0ZTk2N2U3MDEzYWYzOGFhNjUzMDAyMTdkZmQ1ZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAmPMc7IQ7lBFNgOXD9pjJGByQv2
UX9Tfe3A+KRyCt40Kt+vdQZpx0F68P41qd5VNWpS/uaavmgukKV6sNVCyT2VFgfL
eJKN/RlCAg7yzMpX5rkOlAiyapnvZ1OwDNz2t3YyTLklNyuEYIOvvuaXXKQ8Lsum
zyMt0/gt7cnqVQ1fK+P8WyinXtfE4O8++5avqrx26G9KjrSU71ZzxTJFdHhKhMtW
yddxQHrDqXP+oAtaCFQdB67rgdwLZkS/0SckDK+tMDmVD8N3ztu+7/hceQmJ8Ma4
rJKSv53yRLisNLYyHggHPHjXf1Eptx2W7McwtL14RvmZwX/RlX4KhVqggQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTmXdek6WfnATrziqZTACF9/V9vMB8GA1UdIwQY
MBaAFPGFJw6DGT0yaffN6doICLHv9VKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgt
ZmVmOTZlOTVhYmEwLzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgtZmVmOTZlOTVhYmEw
LzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASx8kV2Yd
cNYcJGXre98u7sOQ0bdPxu06RtN5+py0pCy87aatuU/R91jqxlfHmJh00C84fPHh
ouS08JIDOwBI6ZjqnFDQ7GfBn4g0OIjfgbqFUbI6QqgxKJvP1aeJw31Og4HEA0tY
Qg4MqjCIZwMMZL2k8ZvSGmRNilnef4w2NFqSF51SOZeXmzu7FFp5n5PDOa0XYnzP
GKVM4NhM204hMibVlsZDUw72j2NtqfNc69YItfd2tpnQx4UM5bjvbInVUbI2iY7M
s55w3zmx+C+8lziNZi9H3Rpv0BXfuXgCeGKVuYatl+2KchXr+VQ2kDU8TKfOHBhP
Ic6hKuM4X7BZmQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:44 2026 by rpki-client