Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
File: 8yRYHkNogl1eE_TyoNb_jkhMleY.mft (raw, json)
Hash identifier: KOHLrcbXrPcJ8+DKXczcXEqd5tXob7g/7LBTx8vFazY=
Subject key identifier: 1D:4D:72:62:29:80:99:14:8A:02:C5:9D:D0:CE:34:8E:0A:A9:74:94
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019F8FEBD9A54E43125B3731CF9CA0232416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
Manifest number: 048B
Signing time: Thu 23 Jul 2026 17:00:26 +0000
Manifest this update: Thu 23 Jul 2026 17:00:26 +0000
Manifest next update: Fri 24 Jul 2026 17:00:26 +0000
Files and hashes: 1: 8yRYHkNogl1eE_TyoNb_jkhMleY.crl (hash: 3vs14dTb0agQQMsT7QQgxF0pGneALv+chm1QiK9BFnc=)
2: _w-VZ8tJf-IJZUAFtjZixIGeh5w.roa (hash: gcMpibnYTXN6TauNcnE1KrGZDPQoj6jVbMfXyvOP7XQ=)
3: wA-2Mk811HDwWzMAHXezWgU-H08.asa (hash: wodJw0HR+VfAMXEdZgwrxh8y4xa/uBa7tq0A0AfsUPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:d9:a5:4e:43:12:5b:37:31:cf:9c:a0:23:24:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Jul 23 17:00:26 2026 GMT
Not After : Jul 24 17:00:26 2026 GMT
Subject: CN=1d4d7262298099148a02c59dd0ce348e0aa97494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:66:ab:47:2c:dc:88:5f:cb:6c:3e:bc:7e:
fb:8f:1a:74:0b:c4:ce:0a:6b:c4:a5:96:68:b5:14:
55:ce:ff:be:db:67:2d:83:2a:b6:d2:72:70:5c:ab:
a5:66:56:a6:82:0f:6c:ae:25:30:0c:51:a0:72:a6:
d9:ca:86:38:97:06:f9:a2:4e:85:90:77:e0:2b:70:
6a:42:3a:06:dc:c3:2d:30:c6:01:c3:b3:4f:f2:a0:
0e:6e:08:c0:23:bc:41:72:da:cc:78:5e:b8:2d:99:
73:99:29:95:7d:94:36:44:13:6c:af:e8:33:86:94:
b2:aa:db:61:a6:7d:02:23:1e:38:43:0a:d0:43:b9:
02:0d:28:e8:d2:13:e3:60:9a:c6:79:5a:13:c6:52:
66:e0:c2:a4:bf:ad:6b:83:78:6a:84:bd:b9:ef:c9:
23:6a:96:56:f4:47:68:ab:cd:f7:8b:3a:b2:14:f2:
fe:90:2e:88:fb:29:2b:0f:d6:d4:7e:09:28:fb:3e:
38:b3:0a:c5:13:f4:a4:1c:65:a4:e5:61:9d:ad:66:
0d:6c:5b:ca:b4:7c:d8:cd:ee:fe:05:6d:7e:ec:b6:
e7:bb:15:e3:51:9a:a8:6f:85:28:d1:6b:80:da:7a:
6a:cf:34:8d:e2:27:8c:81:90:3a:dd:5d:76:9b:36:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4D:72:62:29:80:99:14:8A:02:C5:9D:D0:CE:34:8E:0A:A9:74:94
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f8:78:f0:61:61:83:79:9d:d8:e8:be:c5:73:21:73:86:0a:
d3:1b:35:88:00:cc:f4:43:2f:18:a3:95:5e:29:4b:74:dd:12:
fe:ca:a1:72:1a:71:a9:50:35:1e:6b:59:a4:28:44:06:c8:2a:
71:cf:98:6a:f5:8e:09:22:dc:9e:0b:5f:a4:ba:9d:58:85:ee:
84:01:4f:00:38:3e:c2:5f:8d:cf:e1:8b:51:d2:12:53:cf:dd:
eb:5c:03:a6:93:62:83:33:96:de:6c:a5:62:80:15:ae:ee:52:
f1:a7:58:54:7b:16:34:f7:80:69:5c:d3:26:f0:cd:73:f9:ed:
fb:c3:dd:32:81:87:90:69:f2:10:d2:56:d5:61:d2:bb:06:a7:
56:28:42:59:40:2f:9b:fc:40:f0:39:a5:aa:96:d7:e1:0b:64:
77:d4:31:3a:dc:cf:58:f7:53:c4:09:fb:80:a9:20:36:28:13:
0f:8a:12:ea:6c:6a:63:19:a5:b4:99:0a:8d:cd:c2:c1:c8:b9:
9e:ef:c5:28:ec:a3:fe:f2:b0:6c:bb:75:42:11:9b:a1:e6:4b:
21:93:7b:d1:f3:c7:8a:23:7d:db:a7:1c:85:7a:41:f7:ca:5d:
7b:50:d7:c7:5e:8a:4d:1e:fa:d2:96:56:a9:9c:4d:25:ad:6e:
1e:23:29:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P69mlTkMSWzcxz5ygIyQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0
Yzk1ZTYwHhcNMjYwNzIzMTcwMDI2WhcNMjYwNzI0MTcwMDI2WjAzMTEwLwYDVQQD
EygxZDRkNzI2MjI5ODA5OTE0OGEwMmM1OWRkMGNlMzQ4ZTBhYTk3NDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmVmq0cs3Ihfy2w+vH77jxp0C8TO
CmvEpZZotRRVzv++22ctgyq20nJwXKulZlamgg9sriUwDFGgcqbZyoY4lwb5ok6F
kHfgK3BqQjoG3MMtMMYBw7NP8qAObgjAI7xBctrMeF64LZlzmSmVfZQ2RBNsr+gz
hpSyqtthpn0CIx44QwrQQ7kCDSjo0hPjYJrGeVoTxlJm4MKkv61rg3hqhL2578kj
apZW9Edoq833izqyFPL+kC6I+ykrD9bUfgko+z44swrFE/SkHGWk5WGdrWYNbFvK
tHzYze7+BW1+7LbnuxXjUZqob4Uo0WuA2npqzzSN4ieMgZA63V12mzYCKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1NcmIpgJkUigLFndDONI4KqXSUMB8GA1UdIwQY
MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt
NmUyZDk3Y2ExNWZmLzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm
LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPh48GFh
g3md2Oi+xXMhc4YK0xs1iADM9EMvGKOVXilLdN0S/sqhchpxqVA1HmtZpChEBsgq
cc+YavWOCSLcngtfpLqdWIXuhAFPADg+wl+Nz+GLUdISU8/d61wDppNigzOW3myl
YoAVru5S8adYVHsWNPeAaVzTJvDNc/nt+8PdMoGHkGnyENJW1WHSuwanVihCWUAv
m/xA8DmlqpbX4Qtkd9QxOtzPWPdTxAn7gKkgNigTD4oS6mxqYxmltJkKjc3Cwci5
nu/FKOyj/vKwbLt1QhGboeZLIZN70fPHiiN926cchXpB98pde1DXx16KTR760pZW
qZxNJa1uHiMpog==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:45 2026 by rpki-client