Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: cqOpIaWFVHHJc0zCiysY9hpOYeYRrkuym+xF/m1XxX0=
Subject key identifier: 9F:82:4C:DF:35:24:B8:91:46:15:00:32:7F:D3:A5:48:2F:C4:28:2E
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 019F8FEBDBD026DBEF0B9B02DE6E389D16A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0E05
Signing time: Thu 23 Jul 2026 17:00:26 +0000
Manifest this update: Thu 23 Jul 2026 17:00:26 +0000
Manifest next update: Fri 24 Jul 2026 17:00:26 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: wkAmqSlTF8K4C+gmZNJNESJhEXJekFqkju71EVzoHYU=)
2: bbNTfIJmhGsZ2V8DBjEahyC2lWE.roa (hash: /Eg3PukaE2y9AWWE2+6unARGBgb5uWfL7NaM72cQJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:db:d0:26:db:ef:0b:9b:02:de:6e:38:9d:16:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Jul 23 17:00:26 2026 GMT
Not After : Jul 24 17:00:26 2026 GMT
Subject: CN=9f824cdf3524b891461500327fd3a5482fc4282e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:68:29:6f:df:1e:7f:bc:94:3c:f5:07:f3:
59:05:9a:79:4c:95:ea:b5:93:37:09:f9:85:ca:00:
10:f5:16:8c:b2:68:bf:a5:a2:8c:c3:79:4a:5e:47:
eb:e5:44:7b:52:81:51:18:d6:b2:f3:f3:57:31:8e:
59:e5:51:3e:b0:9f:4b:a3:9e:1e:64:e4:bf:73:df:
ee:29:89:79:3d:2c:17:11:53:6b:94:53:9b:32:9f:
21:bb:84:c1:ce:5b:b9:ab:f2:92:da:be:63:4f:31:
68:3f:b7:98:05:4c:af:36:d6:71:c7:cd:b5:38:b8:
0c:79:38:85:10:72:5f:c7:a2:59:0a:d7:b3:d9:23:
cc:d6:b0:79:63:62:03:cb:17:f2:b7:b7:8c:d9:46:
fd:cc:19:43:cb:f7:b8:74:4a:b1:03:65:7c:0b:b5:
9d:43:e8:1a:25:cc:72:76:c2:25:77:04:40:c3:59:
c2:ad:3e:63:f8:29:03:c9:70:0f:ed:72:d6:d6:80:
26:d8:61:7b:b3:9c:07:1b:9c:53:54:5c:8f:56:08:
0d:04:0e:eb:54:cb:cd:e5:05:50:2b:48:01:a6:6f:
6e:e6:4c:d6:59:9c:f4:c9:38:9b:fd:4d:62:5e:c6:
e5:a5:d5:6b:44:4b:8e:27:f7:71:37:55:65:93:35:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:82:4C:DF:35:24:B8:91:46:15:00:32:7F:D3:A5:48:2F:C4:28:2E
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6e:64:d7:54:ea:dc:73:19:6f:b6:57:0d:a1:37:fd:4f:39:
23:03:0e:93:c4:de:a0:37:9e:7b:e4:8d:37:e1:ea:21:37:49:
9e:f9:c2:c9:83:99:e7:30:c9:16:a8:c3:7c:77:b5:c5:88:92:
08:09:56:cb:39:7f:ca:0a:e5:70:3f:d6:c4:e6:12:ec:fa:f2:
96:91:07:90:00:8c:fd:f8:2a:87:e5:ad:ad:07:03:c4:8c:89:
6c:79:25:8d:aa:db:56:14:87:53:0c:26:68:26:d4:d5:2f:9f:
0d:72:2d:45:15:40:7b:84:10:e7:5d:0d:9e:49:57:62:0b:e4:
a4:30:7e:af:a6:24:30:bf:07:85:4a:8f:92:37:b8:16:dd:6f:
1a:76:2b:03:1c:2f:e7:50:7d:e5:1b:f3:c6:ef:ff:4a:31:67:
8a:eb:ed:4a:97:a4:31:38:18:62:10:f0:40:88:07:a5:34:c9:
83:47:91:d9:7d:2c:59:df:05:4d:c8:f7:e5:a5:cd:ee:93:03:
da:f1:26:46:c1:5f:0d:78:97:71:e3:b3:8f:ef:e4:da:a8:77:
6c:00:22:10:3c:ce:3e:67:00:34:9e:c0:26:53:4b:6f:c9:92:
e7:3e:c2:e6:e0:a4:ee:dd:84:81:f9:56:57:ee:2b:e8:a0:f6:
48:2e:76:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P69vQJtvvC5sC3m44nRalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YWYyMGMwMjZkZTEwNGQ5NmYxN2FjYmFmNGU3ODdlZjlk
MzAyMDYwHhcNMjYwNzIzMTcwMDI2WhcNMjYwNzI0MTcwMDI2WjAzMTEwLwYDVQQD
Eyg5ZjgyNGNkZjM1MjRiODkxNDYxNTAwMzI3ZmQzYTU0ODJmYzQyODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyVoKW/fHn+8lDz1B/NZBZp5TJXq
tZM3CfmFygAQ9RaMsmi/paKMw3lKXkfr5UR7UoFRGNay8/NXMY5Z5VE+sJ9Lo54e
ZOS/c9/uKYl5PSwXEVNrlFObMp8hu4TBzlu5q/KS2r5jTzFoP7eYBUyvNtZxx821
OLgMeTiFEHJfx6JZCtez2SPM1rB5Y2IDyxfyt7eM2Ub9zBlDy/e4dEqxA2V8C7Wd
Q+gaJcxydsIldwRAw1nCrT5j+CkDyXAP7XLW1oAm2GF7s5wHG5xTVFyPVggNBA7r
VMvN5QVQK0gBpm9u5kzWWZz0yTib/U1iXsblpdVrREuOJ/dxN1VlkzWU+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+CTN81JLiRRhUAMn/TpUgvxCguMB8GA1UdIwQY
MBaAFNWvIMAm3hBNlvF6y69OeH750wIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMt
ODlmMTgxNWQ0YzE5LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMtODlmMTgxNWQ0YzE5
LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi25k11Tq
3HMZb7ZXDaE3/U85IwMOk8TeoDeee+SNN+HqITdJnvnCyYOZ5zDJFqjDfHe1xYiS
CAlWyzl/ygrlcD/WxOYS7PrylpEHkACM/fgqh+WtrQcDxIyJbHkljarbVhSHUwwm
aCbU1S+fDXItRRVAe4QQ510NnklXYgvkpDB+r6YkML8HhUqPkje4Ft1vGnYrAxwv
51B95Rvzxu//SjFniuvtSpekMTgYYhDwQIgHpTTJg0eR2X0sWd8FTcj35aXN7pMD
2vEmRsFfDXiXceOzj+/k2qh3bAAiEDzOPmcANJ7AJlNLb8mS5z7C5uCk7t2EgflW
V+4r6KD2SC52KA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:53 2026 by rpki-client