
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.mft
File: 8y9z8kbvlI4fyqLREJmhHw25PLE.mft (raw, json)
Hash identifier: tuGJDxFncauQ4wsnT54JN7oP3Uc/oACPzYVbsWkxt/A=
Subject key identifier: C4:96:77:0B:42:BB:EE:A0:6C:85:86:8C:22:AD:8D:E1:01:07:CB:64
Authority key identifier: F3:2F:73:F2:46:EF:94:8E:1F:CA:A2:D1:10:99:A1:1F:0D:B9:3C:B1
Certificate issuer: /CN=f32f73f246ef948e1fcaa2d11099a11f0db93cb1
Certificate serial: 019F8F7E32C4323A4F04DC1062D0B2EEED28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8y9z8kbvlI4fyqLREJmhHw25PLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:40 +0000
Manifest this update: Thu 23 Jul 2026 15:00:40 +0000
Manifest next update: Fri 24 Jul 2026 15:00:40 +0000
Files and hashes: 1: 8y9z8kbvlI4fyqLREJmhHw25PLE.crl (hash: 0npkhROvDfl60ZrMYu4nYLZeqgbNwHxRPZ0koI0Yfh4=)
2: N0qfhIoD2R78tt-S-0BE02w8qdI.roa (hash: BbytL5rDaSUla5jzbfMP2OrBKQbWEV4Nh133OWiJSgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8y9z8kbvlI4fyqLREJmhHw25PLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:32:c4:32:3a:4f:04:dc:10:62:d0:b2:ee:ed:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32f73f246ef948e1fcaa2d11099a11f0db93cb1
Validity
Not Before: Jul 23 15:00:40 2026 GMT
Not After : Jul 24 15:00:40 2026 GMT
Subject: CN=c496770b42bbeea06c85868c22ad8de10107cb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:30:9c:d5:eb:ce:6c:2b:15:6f:ce:e2:5f:
29:0c:82:37:a4:26:64:bf:dc:35:b6:81:f0:27:44:
b6:04:66:74:6b:9c:d7:48:d5:06:83:f7:c7:6d:d6:
0e:f0:90:cb:7f:8f:44:20:63:c4:47:ee:c5:46:5f:
9e:68:c2:4e:96:e5:52:a6:ae:21:10:c1:95:a9:79:
ef:ec:59:c8:21:0b:42:1a:4f:a8:0f:36:b1:fa:07:
2d:74:51:fb:ab:5b:6e:51:46:9c:ca:59:a5:61:a0:
95:5b:7f:74:f2:34:95:e8:eb:1f:4a:92:d7:e6:b5:
53:37:36:2d:94:74:19:c7:27:69:8a:7a:1a:d4:a4:
75:6c:25:59:df:1b:76:f1:6d:0f:ec:80:84:3a:95:
0d:56:21:61:74:7f:fe:12:ad:89:0f:61:9d:57:1a:
20:66:ff:c2:30:4e:18:2a:97:03:8a:62:8e:75:24:
ff:cb:48:d6:76:58:cb:e9:02:81:77:c8:39:6b:d1:
fc:c8:09:59:4b:e1:1b:69:4a:05:ec:5a:c4:2d:14:
e3:63:86:d8:5e:48:a5:89:f2:5d:8f:6d:e1:fd:46:
56:20:f0:03:6e:eb:a6:87:b0:ea:34:22:10:9a:3a:
95:59:48:f0:52:e5:ec:61:2c:86:6f:1b:55:81:bf:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:96:77:0B:42:BB:EE:A0:6C:85:86:8C:22:AD:8D:E1:01:07:CB:64
X509v3 Authority Key Identifier:
keyid:F3:2F:73:F2:46:EF:94:8E:1F:CA:A2:D1:10:99:A1:1F:0D:B9:3C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8y9z8kbvlI4fyqLREJmhHw25PLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4d:f5:36:e7:61:de:26:e9:3e:85:42:85:21:55:9f:4f:8f:
ae:23:56:95:7c:d6:da:78:b5:2c:04:26:01:ea:c0:41:08:44:
3e:9f:33:ac:b8:9f:a6:59:87:f1:2c:0e:56:ce:fc:2f:fd:ea:
b7:0c:55:01:01:9c:18:ab:92:49:42:de:a5:95:45:df:1a:13:
a9:6a:fa:c5:68:c5:ce:cf:83:73:0c:b1:e3:22:5d:d1:04:ee:
25:97:3d:7e:5f:1b:0f:01:c2:e9:f3:50:6a:8c:a7:30:bc:eb:
b0:cb:a6:44:c2:1c:3a:97:ad:a8:e3:a6:44:61:5a:6c:d5:6e:
3b:f7:31:b5:4e:3f:c7:c1:11:61:1a:24:e8:e4:ae:f6:cb:ba:
72:7e:05:b6:b7:05:ca:35:1e:af:ed:b4:cb:b8:ea:ae:34:b7:
af:b8:93:8b:3c:36:91:9a:50:95:06:16:00:3b:76:3c:83:73:
6a:8d:9d:3f:23:21:67:bb:f5:84:dd:b8:ce:71:83:b9:41:90:
fe:79:b7:31:51:33:c2:cf:22:45:97:86:15:8b:c1:d9:96:ad:
17:ee:33:ef:15:37:dc:e3:79:ae:d2:b9:8e:ad:03:3a:bb:af:
e2:67:58:75:83:e1:7c:30:51:5d:da:d9:9b:bf:5d:8d:d3:57:
0c:95:1e:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfjLEMjpPBNwQYtCy7u0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMmY3M2YyNDZlZjk0OGUxZmNhYTJkMTEwOTlhMTFmMGRi
OTNjYjEwHhcNMjYwNzIzMTUwMDQwWhcNMjYwNzI0MTUwMDQwWjAzMTEwLwYDVQQD
EyhjNDk2NzcwYjQyYmJlZWEwNmM4NTg2OGMyMmFkOGRlMTAxMDdjYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu4wnNXrzmwrFW/O4l8pDII3pCZk
v9w1toHwJ0S2BGZ0a5zXSNUGg/fHbdYO8JDLf49EIGPER+7FRl+eaMJOluVSpq4h
EMGVqXnv7FnIIQtCGk+oDzax+gctdFH7q1tuUUacylmlYaCVW3908jSV6OsfSpLX
5rVTNzYtlHQZxydpinoa1KR1bCVZ3xt28W0P7ICEOpUNViFhdH/+Eq2JD2GdVxog
Zv/CME4YKpcDimKOdST/y0jWdljL6QKBd8g5a9H8yAlZS+EbaUoF7FrELRTjY4bY
XkilifJdj23h/UZWIPADbuumh7DqNCIQmjqVWUjwUuXsYSyGbxtVgb++mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSWdwtCu+6gbIWGjCKtjeEBB8tkMB8GA1UdIwQY
MBaAFPMvc/JG75SOH8qi0RCZoR8NuTyxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHk5ejhrYnZsSTRmeXFMUkVKbWhIdzI1UExFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYt
MzdhNDQyZTY1ZjE4LzEvOHk5ejhrYnZsSTRmeXFMUkVKbWhIdzI1UExFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYtMzdhNDQyZTY1ZjE4
LzEvOHk5ejhrYnZsSTRmeXFMUkVKbWhIdzI1UExFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZk31Nudh
3ibpPoVChSFVn0+PriNWlXzW2ni1LAQmAerAQQhEPp8zrLifplmH8SwOVs78L/3q
twxVAQGcGKuSSULepZVF3xoTqWr6xWjFzs+Dcwyx4yJd0QTuJZc9fl8bDwHC6fNQ
aoynMLzrsMumRMIcOpetqOOmRGFabNVuO/cxtU4/x8ERYRok6OSu9su6cn4FtrcF
yjUer+20y7jqrjS3r7iTizw2kZpQlQYWADt2PINzao2dPyMhZ7v1hN24znGDuUGQ
/nm3MVEzws8iRZeGFYvB2ZatF+4z7xU33ON5rtK5jq0DOruv4mdYdYPhfDBRXdrZ
m79djdNXDJUeoQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:22 2026 by rpki-client