Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: BWh6AIVFKACGgqc4mh5OzeZLyeZmaAWQM/hLA4u921o=
Subject key identifier: 01:90:87:46:3A:63:C1:40:DB:3E:76:33:81:1D:EF:68:75:95:C0:60
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 019F932431262BD04086E3CE7A33052CF5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 08:00:50 +0000
Manifest this update: Fri 24 Jul 2026 08:00:50 +0000
Manifest next update: Sat 25 Jul 2026 08:00:50 +0000
Files and hashes: 1: 6weVCTckmKcufpwMMNkVwHRwP9Q.roa (hash: 0JjU9hmu5yoiP9Qn2/r0jmSFJ9tAqxdSeETfVPuLDfo=)
2: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: 7HP8QpZ9EvLrnnqXzQY2fGoEuDP+ERXCKdPpx9UuIlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:31:26:2b:d0:40:86:e3:ce:7a:33:05:2c:f5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Jul 24 08:00:50 2026 GMT
Not After : Jul 25 08:00:50 2026 GMT
Subject: CN=019087463a63c140db3e7633811def687595c060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:5e:3c:4d:bc:4e:4b:c8:04:e8:e6:6d:f7:
67:2a:f3:a8:86:9b:29:03:ed:e6:00:80:bd:12:b3:
9a:4b:46:25:34:9b:86:29:d5:93:1b:ce:e9:c3:c0:
80:f5:f2:c9:91:32:54:95:ba:9d:5a:30:bf:40:73:
3a:64:b3:69:ad:81:32:b6:f3:f0:e5:4e:03:91:e2:
51:1a:b5:1a:3c:52:e7:8c:e3:d9:ab:c4:73:30:31:
1f:59:d1:be:f6:e8:9d:8a:b4:41:9f:3d:f7:06:5b:
c4:e8:6f:1d:47:25:33:8f:20:c2:bc:d4:24:82:08:
f0:4f:a6:db:18:c9:66:1c:5a:46:77:6c:97:b5:5c:
76:67:6a:60:16:c6:d4:e5:6b:80:bc:1b:75:ea:d5:
99:b6:14:2f:90:0f:41:fb:d6:3b:0f:0e:3b:68:3d:
f2:36:f2:ad:e0:fd:ca:f2:2b:1b:45:0d:e2:9b:15:
7c:db:8b:08:c4:6a:2e:a9:21:42:43:45:34:9c:b8:
be:f6:b4:bf:3d:b3:f6:20:32:9d:62:c5:e8:bf:dd:
b2:16:75:dd:39:4c:a4:9b:11:2d:21:74:c4:a9:ab:
a2:06:29:8a:f6:20:a7:28:c1:01:e7:3b:7d:02:1b:
c7:33:82:bd:b6:85:60:5c:05:fb:a4:d3:81:18:3b:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:90:87:46:3A:63:C1:40:DB:3E:76:33:81:1D:EF:68:75:95:C0:60
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:09:9a:d4:a2:52:48:47:f0:d3:31:d1:43:a5:ad:88:55:11:
4e:0f:8e:54:49:1e:da:18:d2:18:31:29:c8:52:64:84:15:aa:
9c:c1:c8:f7:35:ea:40:6a:f8:60:8c:e4:2f:b0:64:45:ae:df:
73:4b:c2:98:8f:8b:f4:a6:4c:de:3b:28:d1:f2:85:45:62:dc:
5d:a9:a3:48:85:86:91:6e:7f:75:05:d2:cc:59:f0:cf:ec:04:
82:2d:42:c8:64:e1:43:c0:a9:42:6f:ca:7a:c5:c0:b3:5a:26:
8e:6a:a6:fa:9a:61:1b:ba:e6:f6:11:b2:9c:2e:57:9d:0f:87:
93:a3:ef:a6:0a:e3:51:25:56:65:b1:f0:e8:c9:c7:7c:6f:d7:
c5:57:aa:93:e6:f0:18:fb:b6:4b:d4:5e:68:e7:c0:73:3f:38:
75:ec:cb:d6:95:ce:0e:93:87:1b:03:39:8f:b3:5e:9d:3b:9e:
62:0e:8b:e7:3c:5f:5b:bc:b0:ea:d5:68:22:9f:e1:84:1a:24:
e1:70:5c:c7:a7:5d:12:c8:ac:5e:16:fa:88:c8:da:98:b2:07:
19:f8:7f:f9:45:54:97:92:bb:6f:84:73:df:f3:c6:06:1a:1b:
ed:07:3b:0a:e9:0b:7e:d5:f2:e9:71:c8:83:72:17:5b:93:1b:
34:44:41:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJDEmK9BAhuPOejMFLPXJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmUyOGU4YWM3YWIxOGM3MzA3OWRlODRjODA5N2Q3ODJh
YWI2OWEwHhcNMjYwNzI0MDgwMDUwWhcNMjYwNzI1MDgwMDUwWjAzMTEwLwYDVQQD
EygwMTkwODc0NjNhNjNjMTQwZGIzZTc2MzM4MTFkZWY2ODc1OTVjMDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVBePE28TkvIBOjmbfdnKvOohpsp
A+3mAIC9ErOaS0YlNJuGKdWTG87pw8CA9fLJkTJUlbqdWjC/QHM6ZLNprYEytvPw
5U4DkeJRGrUaPFLnjOPZq8RzMDEfWdG+9uidirRBnz33BlvE6G8dRyUzjyDCvNQk
ggjwT6bbGMlmHFpGd2yXtVx2Z2pgFsbU5WuAvBt16tWZthQvkA9B+9Y7Dw47aD3y
NvKt4P3K8isbRQ3imxV824sIxGouqSFCQ0U0nLi+9rS/PbP2IDKdYsXov92yFnXd
OUykmxEtIXTEqauiBimK9iCnKMEB5zt9AhvHM4K9toVgXAX7pNOBGDsvAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGQh0Y6Y8FA2z52M4Ed72h1lcBgMB8GA1UdIwQY
MBaAFPAuKOiserGMcwed6EyAl9eCqraaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODkt
OWZmYjBlNDFjNGVmLzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODktOWZmYjBlNDFjNGVm
LzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgma1KJS
SEfw0zHRQ6WtiFURTg+OVEke2hjSGDEpyFJkhBWqnMHI9zXqQGr4YIzkL7BkRa7f
c0vCmI+L9KZM3jso0fKFRWLcXamjSIWGkW5/dQXSzFnwz+wEgi1CyGThQ8CpQm/K
esXAs1omjmqm+pphG7rm9hGynC5XnQ+Hk6PvpgrjUSVWZbHw6MnHfG/XxVeqk+bw
GPu2S9ReaOfAcz84dezL1pXODpOHGwM5j7NenTueYg6L5zxfW7yw6tVoIp/hhBok
4XBcx6ddEsisXhb6iMjamLIHGfh/+UVUl5K7b4Rz3/PGBhob7Qc7CukLftXy6XHI
g3IXW5MbNERBaQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:07:38 2026 by rpki-client