Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier: NY0HeWleW7xP5RVXrHs9Oy2REZPZzBqZJkMLj3AWCn8=
Subject key identifier: 43:37:39:5D:86:CF:E0:40:2A:B3:9F:E9:A1:C8:AB:CE:C7:9D:D7:37
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial: 019F91DA10E50086530544D638C4DE207277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number: 0962
Signing time: Fri 24 Jul 2026 02:00:15 +0000
Manifest this update: Fri 24 Jul 2026 02:00:15 +0000
Manifest next update: Sat 25 Jul 2026 02:00:15 +0000
Files and hashes: 1: Qg5YVX-ArwviT-5zEMtdK0QZQ3k.roa (hash: N2GUp/A12YuOzgdEUjTB8syXYjaMrKhtAtS9ZwORjp0=)
2: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: Une2mv7EZ0xc1KXORGi4ZSCh9J4JX1Nr/xsCPbzInD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:10:e5:00:86:53:05:44:d6:38:c4:de:20:72:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Validity
Not Before: Jul 24 02:00:15 2026 GMT
Not After : Jul 25 02:00:15 2026 GMT
Subject: CN=4337395d86cfe0402ab39fe9a1c8abcec79dd737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:a0:df:d7:52:e2:cd:9b:67:4b:83:db:8e:
63:9e:40:52:6b:ef:85:f5:f6:ed:b0:ec:d3:d2:1b:
2c:76:76:9a:77:42:29:e5:7d:8e:41:4e:05:4c:d7:
28:92:01:30:6c:22:d4:2e:af:54:c7:4e:40:30:69:
49:ac:93:4d:13:96:dc:f7:6e:12:92:c9:ba:7d:41:
88:a3:8e:ce:07:09:ed:19:12:d5:3a:c7:1d:92:e4:
45:de:55:7a:a9:c0:9e:71:38:8c:ea:58:7c:31:ed:
cd:6a:de:a6:6e:41:c8:87:82:d1:8f:73:65:1a:3e:
3e:cc:7b:39:c2:b4:09:b0:84:c5:9d:85:d8:ec:d0:
59:54:4b:da:64:c1:a7:56:bd:40:49:1c:79:3c:9f:
f0:a0:5a:40:28:3c:e8:bf:df:5e:b2:2f:b9:68:5d:
ad:5f:97:82:0d:b9:e0:75:af:60:61:a1:dc:f5:23:
a7:bf:27:5a:2d:44:9c:6e:3e:e6:4b:3a:33:5d:4a:
dc:c9:92:7e:ab:9e:be:45:19:61:ed:9e:a9:0b:7c:
a7:91:80:5f:a1:c5:1e:2d:b4:db:c6:bc:a0:50:60:
39:60:0a:81:b3:76:fd:c9:1e:98:72:28:8c:48:fa:
e0:25:cc:68:34:41:b2:25:d8:5a:ba:1c:60:9d:e2:
7c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:37:39:5D:86:CF:E0:40:2A:B3:9F:E9:A1:C8:AB:CE:C7:9D:D7:37
X509v3 Authority Key Identifier:
keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:78:e1:c7:91:63:8f:8f:0d:49:8c:f0:3f:6c:2a:a1:63:cb:
de:a0:4f:ea:38:d3:9b:b6:a6:ca:c8:56:6e:ca:5e:45:cd:a0:
81:42:e8:c6:8f:d3:71:ee:25:1a:86:9c:db:a9:d1:c7:78:36:
f3:45:5c:c0:f0:23:db:7b:26:c6:71:57:0e:21:ef:0a:84:c6:
2b:41:65:84:b5:bd:7c:04:4c:07:05:9f:4a:0d:b5:74:5c:63:
a5:ce:e5:89:40:6c:a4:e1:2a:62:6c:d4:25:91:b4:a4:31:a2:
c0:fd:94:4c:81:0e:49:53:19:57:bf:f3:77:cc:9c:67:b1:f3:
5f:8d:91:7e:67:b1:ac:31:b4:55:64:64:8b:ea:5b:52:b6:55:
0b:e1:2e:b8:eb:95:7b:c5:00:13:4c:c3:43:f1:66:3e:a9:70:
e0:0d:a8:ca:1e:8c:8e:c9:f8:df:8a:31:68:a8:b9:a8:2a:6c:
8b:10:f8:5c:fe:7a:33:a7:1f:19:08:47:71:50:f8:8e:5e:82:
25:c8:5c:b0:4c:3d:86:dc:d1:a2:97:21:b1:a9:ed:4c:de:bc:
9f:f3:16:d8:c5:d2:3b:db:eb:e5:98:1f:c7:cd:97:11:77:a9:
8b:f7:6f:33:e3:6b:a6:fa:e6:7f:37:61:b1:56:80:05:7c:fc:
19:b5:8b:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2hDlAIZTBUTWOMTeIHJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZWYzMDYyNDIxMGMwMGQzYTg2ZGZkNmM4MDEwNjEyYmIx
YjEyYTAwHhcNMjYwNzI0MDIwMDE1WhcNMjYwNzI1MDIwMDE1WjAzMTEwLwYDVQQD
Eyg0MzM3Mzk1ZDg2Y2ZlMDQwMmFiMzlmZTlhMWM4YWJjZWM3OWRkNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApceg39dS4s2bZ0uD245jnkBSa++F
9fbtsOzT0hssdnaad0Ip5X2OQU4FTNcokgEwbCLULq9Ux05AMGlJrJNNE5bc924S
ksm6fUGIo47OBwntGRLVOscdkuRF3lV6qcCecTiM6lh8Me3Nat6mbkHIh4LRj3Nl
Gj4+zHs5wrQJsITFnYXY7NBZVEvaZMGnVr1ASRx5PJ/woFpAKDzov99esi+5aF2t
X5eCDbngda9gYaHc9SOnvydaLUScbj7mSzozXUrcyZJ+q56+RRlh7Z6pC3ynkYBf
ocUeLbTbxrygUGA5YAqBs3b9yR6YciiMSPrgJcxoNEGyJdhauhxgneJ8LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEM3OV2Gz+BAKrOf6aHIq87Hndc3MB8GA1UdIwQY
MBaAFEvvMGJCEMANOobf1sgBBhK7GxKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zODNmNDMtODRlYS00NjIzLWI3N2Qt
Nzg5MjdmYzc4ZTdkLzEvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zODNmNDMtODRlYS00NjIzLWI3N2QtNzg5MjdmYzc4ZTdk
LzEvUy04d1lrSVF3QTA2aHRfV3lBRUdFcnNiRXFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenjhx5Fj
j48NSYzwP2wqoWPL3qBP6jjTm7amyshWbspeRc2ggULoxo/Tce4lGoac26nRx3g2
80VcwPAj23smxnFXDiHvCoTGK0FlhLW9fARMBwWfSg21dFxjpc7liUBspOEqYmzU
JZG0pDGiwP2UTIEOSVMZV7/zd8ycZ7HzX42RfmexrDG0VWRki+pbUrZVC+EuuOuV
e8UAE0zDQ/FmPqlw4A2oyh6Mjsn434oxaKi5qCpsixD4XP56M6cfGQhHcVD4jl6C
JchcsEw9htzRopchsantTN68n/MW2MXSO9vr5Zgfx82XEXepi/dvM+Nrpvrmfzdh
sVaABXz8GbWLhg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:29:58 2026 by rpki-client