Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: uKIjJED9LvFsNKSgPxK/Lu7fjle0evKwUrdUCUKGXsU=
Subject key identifier: F9:D2:68:77:5C:0C:DB:3A:10:30:B9:20:38:9E:24:DB:1C:7D:85:93
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 019F8EA22395404710137B803FE0C84DEF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 11:00:18 +0000
Manifest this update: Thu 23 Jul 2026 11:00:18 +0000
Manifest next update: Fri 24 Jul 2026 11:00:18 +0000
Files and hashes: 1: 5FzvwUIf_jEUll3PKrQMP5_suiU.asa (hash: MNHOEt9JisPhIb3wm1XE5W+hLf6wZBICFb3kH8XoROg=)
2: 8bD-7QTegEg52E0iZppyCdDUnzk.roa (hash: SIwdtnsAl+O53na0hHcKGea3jeX1u8/+0tuoQrFoHIc=)
3: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: OmFovJ1TbUnvfCHGtpKcaJKdhrdbmgnUNN3xcVamZ3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:23:95:40:47:10:13:7b:80:3f:e0:c8:4d:ef:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Jul 23 11:00:18 2026 GMT
Not After : Jul 24 11:00:18 2026 GMT
Subject: CN=f9d268775c0cdb3a1030b920389e24db1c7d8593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:ff:15:67:f3:46:52:04:a5:aa:4d:19:87:
9c:0d:9d:51:26:03:d3:2d:19:e2:5c:63:6a:f9:bc:
89:8d:9f:0c:c8:c7:84:67:1f:19:48:b9:50:85:3f:
dc:a7:0e:e9:e9:f5:21:7a:40:3f:16:bf:5e:98:1b:
7f:1b:9f:b3:05:80:f9:6a:6d:dd:eb:40:d8:f8:d4:
25:cf:86:c6:61:51:52:15:2c:fb:04:7d:b3:5a:ba:
e7:60:58:5b:d7:4d:1b:b3:73:de:d9:e7:75:57:cf:
c3:fa:d3:99:3f:df:a0:34:87:48:32:ec:08:b6:db:
6f:0b:27:8f:2f:fc:76:57:4d:77:0a:72:3f:87:56:
39:7b:5d:b6:c5:1b:00:38:66:4e:eb:38:b8:18:55:
b9:4f:c1:3b:b0:7e:e2:11:ad:38:6c:fd:d8:b3:9e:
1b:01:b0:93:e3:cf:c8:33:a7:e1:6e:6d:43:bc:f2:
49:7a:a5:18:82:6b:41:d8:91:06:e9:16:37:60:97:
63:fe:83:98:3c:21:ef:27:5d:28:d8:d3:16:73:da:
b8:c2:9d:a8:03:80:d8:bf:0f:ea:90:9c:95:b9:98:
43:59:79:a9:6d:ea:70:cf:bb:e5:83:a4:1d:ae:23:
56:6a:4e:22:78:a3:8a:b5:ce:1f:b8:2d:4f:f4:66:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D2:68:77:5C:0C:DB:3A:10:30:B9:20:38:9E:24:DB:1C:7D:85:93
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f8:23:53:37:a8:99:0b:67:df:bc:51:d1:4e:54:81:c2:4a:
b4:79:af:ee:21:4d:4f:07:d3:a6:f7:f9:d2:ba:35:60:62:e8:
62:d9:84:94:64:d3:01:e6:c5:8e:cc:8e:ba:ba:75:fb:a2:a8:
bf:89:28:8f:c9:5a:3d:20:fd:f7:93:6e:b8:2e:a7:1c:8b:56:
66:81:85:1a:4f:7a:ce:98:7f:7e:63:41:e4:a6:18:b1:08:73:
c3:86:7c:2a:88:9c:8f:8a:94:5a:de:13:66:63:89:75:2e:dc:
2c:bb:e4:1f:90:e4:a8:d5:73:69:88:6c:7a:f7:dd:d2:02:93:
2e:2c:08:43:da:b0:5e:27:41:ce:91:50:24:bb:b4:8d:61:dc:
d1:c6:a9:01:c9:2e:f6:0f:da:05:b9:2f:7a:0e:19:ac:fb:5c:
80:2f:7b:bd:e4:bf:f1:7b:85:60:af:5c:d6:7a:63:86:10:b7:
23:f2:4c:4f:b9:14:24:e5:3c:c5:40:f4:0f:69:7c:f7:c7:8b:
ea:c8:10:de:0d:0e:af:2e:25:d3:64:ae:e5:ab:b8:cf:95:0a:
98:b8:3f:4f:99:fb:a5:a3:61:fc:73:ab:83:ff:52:40:33:99:
fb:c3:84:37:5f:ab:11:26:99:da:c7:f1:48:b1:a4:86:4f:33:
84:55:9f:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OoiOVQEcQE3uAP+DITe8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2YyNTFhYzExOTBjOWRlZGM4ZTViZTA4NWQ1NDM4N2Y0
MDFhMzcwHhcNMjYwNzIzMTEwMDE4WhcNMjYwNzI0MTEwMDE4WjAzMTEwLwYDVQQD
EyhmOWQyNjg3NzVjMGNkYjNhMTAzMGI5MjAzODllMjRkYjFjN2Q4NTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+7/FWfzRlIEpapNGYecDZ1RJgPT
LRniXGNq+byJjZ8MyMeEZx8ZSLlQhT/cpw7p6fUhekA/Fr9emBt/G5+zBYD5am3d
60DY+NQlz4bGYVFSFSz7BH2zWrrnYFhb100bs3Pe2ed1V8/D+tOZP9+gNIdIMuwI
tttvCyePL/x2V013CnI/h1Y5e122xRsAOGZO6zi4GFW5T8E7sH7iEa04bP3Ys54b
AbCT48/IM6fhbm1DvPJJeqUYgmtB2JEG6RY3YJdj/oOYPCHvJ10o2NMWc9q4wp2o
A4DYvw/qkJyVuZhDWXmpbepwz7vlg6QdriNWak4ieKOKtc4fuC1P9GZPlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnSaHdcDNs6EDC5IDieJNscfYWTMB8GA1UdIwQY
MBaAFIx/JRrBGQyd7cjlvghdVDh/QBo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYt
NTAwYzdjNDVmNDE5LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYtNTAwYzdjNDVmNDE5
LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/gjUzeo
mQtn37xR0U5UgcJKtHmv7iFNTwfTpvf50ro1YGLoYtmElGTTAebFjsyOurp1+6Ko
v4koj8laPSD995NuuC6nHItWZoGFGk96zph/fmNB5KYYsQhzw4Z8Koicj4qUWt4T
ZmOJdS7cLLvkH5DkqNVzaYhsevfd0gKTLiwIQ9qwXidBzpFQJLu0jWHc0capAcku
9g/aBbkveg4ZrPtcgC97veS/8XuFYK9c1npjhhC3I/JMT7kUJOU8xUD0D2l898eL
6sgQ3g0Ory4l02Su5au4z5UKmLg/T5n7paNh/HOrg/9SQDOZ+8OEN1+rESaZ2sfx
SLGkhk8zhFWfvQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:30 2026 by rpki-client