Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: dTkia5PM4Ew8at4ZwUuK4Se/GMTh4RG4YCIcvv7vu7I=
Subject key identifier: B1:C2:86:37:9A:FA:77:F4:43:31:DA:0C:2B:B4:6B:76:BF:A2:52:50
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 019F91DA5ADDF074A68C681D09A983A79106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 163B
Signing time: Fri 24 Jul 2026 02:00:34 +0000
Manifest this update: Fri 24 Jul 2026 02:00:34 +0000
Manifest next update: Sat 25 Jul 2026 02:00:34 +0000
Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: NOtvO4LjetQInVPgcvPPbBYTd9AlRcvvUiHDG/LmkW0=)
2: sizGPo8KqP7LWpt91yMVuV_G2qY.roa (hash: LlMndqzEsit0QQGqlcQ6a+BkfwsI2hJIMaOg8c0+sWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:5a:dd:f0:74:a6:8c:68:1d:09:a9:83:a7:91:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Jul 24 02:00:34 2026 GMT
Not After : Jul 25 02:00:34 2026 GMT
Subject: CN=b1c286379afa77f44331da0c2bb46b76bfa25250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:e7:21:7e:61:01:55:5d:5f:98:62:d8:b6:
d0:95:a9:fc:a8:6c:6e:66:5d:fc:c0:e6:d8:2b:6e:
7a:93:c5:7b:f6:79:42:47:99:21:aa:a4:be:17:37:
36:0a:68:d6:da:56:76:b4:6c:0a:09:86:b0:be:6c:
60:6e:1c:56:97:37:9d:da:e4:fe:bc:23:59:cf:ed:
d1:47:2c:04:9b:dc:ad:34:30:2e:e9:bb:9c:2a:d3:
18:8c:49:4f:b6:ea:4c:67:ea:f0:54:7d:47:90:2f:
74:09:85:b7:df:3b:91:5d:f8:83:35:e2:96:8a:fc:
b3:94:28:6e:d9:10:96:13:eb:2e:54:4c:c7:53:9c:
3e:88:57:48:df:04:0c:90:c6:e8:08:37:a8:e5:63:
5a:4c:68:67:ff:61:29:6f:d1:6e:70:31:5a:1f:43:
13:11:1e:40:35:3c:df:ba:e3:ba:de:af:1e:a7:64:
a6:6d:71:c3:be:76:dd:69:3a:fc:9d:47:09:9c:47:
04:bf:0e:57:f3:c2:96:b0:dc:3e:bb:82:b0:a7:9a:
e1:d9:28:46:85:5e:d7:af:f6:e7:32:6c:67:15:67:
cb:3d:9d:85:09:21:f6:c3:14:c2:7c:57:b6:cd:19:
92:90:bb:0a:14:17:b0:1e:0b:1d:b6:e6:ba:10:de:
05:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C2:86:37:9A:FA:77:F4:43:31:DA:0C:2B:B4:6B:76:BF:A2:52:50
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c9:22:cb:cb:77:e1:a6:ce:03:ff:5a:c7:41:97:65:e8:c0:
6c:e6:dc:1e:0b:49:99:10:aa:19:8b:86:d0:bf:59:54:31:77:
4c:e9:75:75:e6:e4:22:04:91:a4:41:14:93:fb:20:41:41:9f:
94:86:69:6b:be:18:90:4e:fa:8e:5c:4a:7a:ff:02:77:90:1b:
f6:4e:e7:9e:95:a8:0f:7a:79:07:53:ce:18:d1:45:91:98:81:
19:36:ff:81:06:47:c0:39:f7:1c:b6:5a:5e:7d:0a:50:8e:ab:
84:a4:27:fe:4c:75:9a:1f:cc:40:77:61:0a:98:0f:72:7e:b2:
58:87:10:73:a5:3f:33:3c:f4:c0:47:01:21:fe:9f:a4:90:f8:
91:74:5b:0b:b9:04:48:01:ef:11:96:2d:51:af:ba:b2:b7:57:
07:e3:7d:8b:2e:5d:ec:20:b4:34:b5:64:5a:3b:97:97:4b:43:
62:4a:08:fd:d0:ec:91:df:4d:92:8a:e6:6d:83:bb:57:a1:c8:
e4:1d:52:af:c3:40:97:ec:8c:ac:0d:94:d5:fb:ff:39:a7:2f:
61:03:3e:e4:02:13:b5:e1:49:48:4c:dd:a4:7c:3a:8c:32:1d:
e4:f9:e7:75:0a:a5:03:e4:ea:87:12:27:ff:49:bd:4d:68:b3:
b1:b6:ed:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2lrd8HSmjGgdCamDp5EGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMTBjNTBkMmNjODdiZGJmYTViYjUxMWExOGEyMjc3YmEw
MGJhNjgwHhcNMjYwNzI0MDIwMDM0WhcNMjYwNzI1MDIwMDM0WjAzMTEwLwYDVQQD
EyhiMWMyODYzNzlhZmE3N2Y0NDMzMWRhMGMyYmI0NmI3NmJmYTI1MjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzznIX5hAVVdX5hi2LbQlan8qGxu
Zl38wObYK256k8V79nlCR5khqqS+Fzc2CmjW2lZ2tGwKCYawvmxgbhxWlzed2uT+
vCNZz+3RRywEm9ytNDAu6bucKtMYjElPtupMZ+rwVH1HkC90CYW33zuRXfiDNeKW
ivyzlChu2RCWE+suVEzHU5w+iFdI3wQMkMboCDeo5WNaTGhn/2Epb9FucDFaH0MT
ER5ANTzfuuO63q8ep2SmbXHDvnbdaTr8nUcJnEcEvw5X88KWsNw+u4Kwp5rh2ShG
hV7Xr/bnMmxnFWfLPZ2FCSH2wxTCfFe2zRmSkLsKFBewHgsdtua6EN4FkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHChjea+nf0QzHaDCu0a3a/olJQMB8GA1UdIwQY
MBaAFPMQxQ0syHvb+lu1EaGKIne6ALpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYt
MWU5ZjBiZGViNTMyLzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wZWE0YTQtMjc3NC00NTQ1LTgwNWYtMWU5ZjBiZGViNTMy
LzEvOHhERkRTekllOXY2VzdVUm9Zb2lkN29BdW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALskiy8t3
4abOA/9ax0GXZejAbObcHgtJmRCqGYuG0L9ZVDF3TOl1debkIgSRpEEUk/sgQUGf
lIZpa74YkE76jlxKev8Cd5Ab9k7nnpWoD3p5B1POGNFFkZiBGTb/gQZHwDn3HLZa
Xn0KUI6rhKQn/kx1mh/MQHdhCpgPcn6yWIcQc6U/Mzz0wEcBIf6fpJD4kXRbC7kE
SAHvEZYtUa+6srdXB+N9iy5d7CC0NLVkWjuXl0tDYkoI/dDskd9NkormbYO7V6HI
5B1Sr8NAl+yMrA2U1fv/OacvYQM+5AITteFJSEzdpHw6jDId5PnndQqlA+TqhxIn
/0m9TWizsbbt1w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:31 2026 by rpki-client