Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
File: RPCGM8H1_XFU2I3h1syc17gEMK0.mft (raw, json)
Hash identifier: JHRlXFT0J9BQk6A2ZUEAhIjlzRggn6ckP/EjGTt/FCM=
Subject key identifier: E5:C8:8E:BF:CD:59:FD:72:22:75:5F:EF:05:21:13:BF:E4:E3:CB:A7
Authority key identifier: 44:F0:86:33:C1:F5:FD:71:54:D8:8D:E1:D6:CC:9C:D7:B8:04:30:AD
Certificate issuer: /CN=44f08633c1f5fd7154d88de1d6cc9cd7b80430ad
Certificate serial: 019F9391B895476EA3C5AF4215A9C73422E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
Manifest number: 8D
Signing time: Fri 24 Jul 2026 10:00:28 +0000
Manifest this update: Fri 24 Jul 2026 10:00:28 +0000
Manifest next update: Sat 25 Jul 2026 10:00:28 +0000
Files and hashes: 1: 5KctcxsYT_6CBJ2cdoYPOhQAGc4.roa (hash: +1bCb5V2QswAKGR65R9SngG1RC/2PS62IO4DT3u7w0w=)
2: MT7FDc3brVHPS51pC1TSYkG931E.roa (hash: OXmE7HUkMdWGmBsN2LVDSTT5wVdQkht8zETc4dCdqB4=)
3: RPCGM8H1_XFU2I3h1syc17gEMK0.crl (hash: NS9tBpAJkmhF4pltvSqowPUWplJUVuru0o2ZvkuPp60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:b8:95:47:6e:a3:c5:af:42:15:a9:c7:34:22:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f08633c1f5fd7154d88de1d6cc9cd7b80430ad
Validity
Not Before: Jul 24 10:00:28 2026 GMT
Not After : Jul 25 10:00:28 2026 GMT
Subject: CN=e5c88ebfcd59fd7222755fef052113bfe4e3cba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:2d:65:d3:21:1d:69:33:d6:30:1d:b7:6d:
aa:ce:68:e4:b8:b0:82:e2:e2:02:40:3f:77:21:26:
c1:ac:a3:ce:d8:b3:04:83:b2:8e:41:35:ec:18:14:
35:2c:5b:5b:e6:f5:26:75:2a:ed:b7:e0:9e:32:09:
8a:6c:c3:e4:53:86:c7:4c:46:59:5d:0a:10:24:64:
93:53:9f:c6:6a:4b:8d:44:b4:ed:55:c8:84:6d:58:
d5:f9:4f:fc:9e:7b:94:9c:0a:29:8e:99:f6:6c:95:
47:d5:6f:36:f4:44:17:05:d8:64:5b:62:d0:ec:cd:
9d:bb:33:85:ec:00:5c:40:65:c2:e8:1c:78:b9:6c:
57:59:d3:af:fe:f0:a0:78:53:b1:d5:83:dc:26:6d:
f1:1a:fd:da:e5:0e:d7:4f:40:7f:2d:00:99:41:b2:
53:9e:08:09:3d:2f:22:3c:d1:73:c3:e6:12:c4:d7:
96:e3:3d:e5:74:48:d3:c6:0a:a6:ba:8f:5b:00:7d:
da:65:e2:20:f5:61:a9:83:71:e8:41:b8:4f:93:f8:
81:54:c1:0d:4e:11:e3:d5:b2:26:90:fd:31:47:66:
3c:cd:7f:0c:51:9a:05:9f:dd:73:11:92:54:8d:f5:
e6:ca:24:f7:33:07:91:18:8d:3c:5b:9a:4f:40:83:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C8:8E:BF:CD:59:FD:72:22:75:5F:EF:05:21:13:BF:E4:E3:CB:A7
X509v3 Authority Key Identifier:
keyid:44:F0:86:33:C1:F5:FD:71:54:D8:8D:E1:D6:CC:9C:D7:B8:04:30:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:54:80:40:6a:76:2a:fe:62:40:e4:46:fb:80:32:f4:c1:7e:
e9:48:a5:1e:16:e2:65:84:5c:d0:d1:f0:3c:21:b8:60:73:bc:
df:6f:3a:cc:dd:02:4a:ec:97:7a:8f:ff:21:53:14:ad:d7:08:
53:c8:4a:35:69:ed:1a:c1:52:18:61:f0:cb:3e:fa:62:f9:20:
ab:ee:7d:03:93:3e:9a:f8:a1:40:6c:b4:0d:f7:ad:9e:4c:73:
6d:eb:39:b2:68:f8:64:eb:34:c5:77:87:f5:b8:0c:19:ef:c3:
d1:75:4f:da:a8:8b:a4:d1:d4:28:13:02:51:32:46:ad:d0:37:
7a:5b:13:eb:50:88:3a:57:5b:30:4d:ad:10:a7:58:3b:f2:f8:
d1:f2:cc:3a:5a:67:bd:2b:42:ab:80:27:fc:fc:a8:ed:15:02:
42:18:f0:3c:c0:ec:1d:b1:d5:e1:34:a2:91:3d:87:87:b2:0c:
02:49:ee:77:92:10:2c:4d:fa:9f:b9:cc:fa:3c:b1:80:15:9b:
8b:b6:f5:67:ee:27:69:bb:2f:64:21:a5:5b:6b:ad:fa:e7:ad:
a6:3b:62:d8:7d:71:6a:c4:7b:ca:b5:8c:46:1b:01:18:da:c0:
a6:9c:08:bf:b1:91:b3:5a:1a:10:b3:35:bb:64:91:36:d4:bb:
f0:0f:a1:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkbiVR26jxa9CFanHNCLoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZjA4NjMzYzFmNWZkNzE1NGQ4OGRlMWQ2Y2M5Y2Q3Yjgw
NDMwYWQwHhcNMjYwNzI0MTAwMDI4WhcNMjYwNzI1MTAwMDI4WjAzMTEwLwYDVQQD
EyhlNWM4OGViZmNkNTlmZDcyMjI3NTVmZWYwNTIxMTNiZmU0ZTNjYmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytUtZdMhHWkz1jAdt22qzmjkuLCC
4uICQD93ISbBrKPO2LMEg7KOQTXsGBQ1LFtb5vUmdSrtt+CeMgmKbMPkU4bHTEZZ
XQoQJGSTU5/GakuNRLTtVciEbVjV+U/8nnuUnAopjpn2bJVH1W829EQXBdhkW2LQ
7M2duzOF7ABcQGXC6Bx4uWxXWdOv/vCgeFOx1YPcJm3xGv3a5Q7XT0B/LQCZQbJT
nggJPS8iPNFzw+YSxNeW4z3ldEjTxgqmuo9bAH3aZeIg9WGpg3HoQbhPk/iBVMEN
ThHj1bImkP0xR2Y8zX8MUZoFn91zEZJUjfXmyiT3MweRGI08W5pPQINhzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXIjr/NWf1yInVf7wUhE7/k48unMB8GA1UdIwQY
MBaAFETwhjPB9f1xVNiN4dbMnNe4BDCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlBDR004SDFfWEZVMkkzaDFzeWMxN2dFTUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xNmFhZjYtM2YyYi00Y2M1LTliZDQt
ZjYyZDhjMGI5ZjU1LzEvUlBDR004SDFfWEZVMkkzaDFzeWMxN2dFTUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xNmFhZjYtM2YyYi00Y2M1LTliZDQtZjYyZDhjMGI5ZjU1
LzEvUlBDR004SDFfWEZVMkkzaDFzeWMxN2dFTUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFSAQGp2
Kv5iQORG+4Ay9MF+6UilHhbiZYRc0NHwPCG4YHO83286zN0CSuyXeo//IVMUrdcI
U8hKNWntGsFSGGHwyz76Yvkgq+59A5M+mvihQGy0Dfetnkxzbes5smj4ZOs0xXeH
9bgMGe/D0XVP2qiLpNHUKBMCUTJGrdA3elsT61CIOldbME2tEKdYO/L40fLMOlpn
vStCq4An/Pyo7RUCQhjwPMDsHbHV4TSikT2Hh7IMAknud5IQLE36n7nM+jyxgBWb
i7b1Z+4nabsvZCGlW2ut+uetpjti2H1xasR7yrWMRhsBGNrAppwIv7GRs1oaELM1
u2SRNtS78A+hOg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:31 2026 by rpki-client