Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: TQ1kuOTLYG5TUkYgQE8P/Yzx/xLRmvNFYB1A78KfTGA=
Subject key identifier: 35:A5:48:01:67:26:CA:E1:BB:5F:DE:8F:DA:C5:8C:27:ED:DB:75:68
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 019F91DB3800F45116D213604F32C35A1B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 0972
Signing time: Fri 24 Jul 2026 02:01:30 +0000
Manifest this update: Fri 24 Jul 2026 02:01:30 +0000
Manifest next update: Sat 25 Jul 2026 02:01:30 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: 2272bjdttw0T5u0EYZSkvxfBXUAnpVaz52S1rQAPMpk=)
2: wiI82FzKN8vwB6F4isg7_RvCxHg.roa (hash: riiq1OTIvoc7oa6B3EfI2fFnF1gD9CxZmEkDu3QsQ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:38:00:f4:51:16:d2:13:60:4f:32:c3:5a:1b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Jul 24 02:01:30 2026 GMT
Not After : Jul 25 02:01:30 2026 GMT
Subject: CN=35a548016726cae1bb5fde8fdac58c27eddb7568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:5e:9f:bd:11:25:ad:4b:b4:77:28:ca:99:
74:12:b3:6d:5c:65:d3:4d:96:6f:81:91:0d:7a:af:
cb:76:95:80:96:01:47:e1:0d:20:dc:de:af:c7:a2:
df:a1:5b:0f:54:00:74:7d:0a:27:d4:02:e7:ee:18:
80:6c:74:55:33:98:c7:a1:8c:a7:80:fd:b7:0e:32:
b8:41:1c:1a:ae:15:ed:11:6c:86:0f:a1:29:b0:86:
c2:9a:ff:31:46:41:fd:87:8f:88:e3:70:55:50:f2:
7d:e7:84:5e:df:c9:17:05:45:be:83:e7:e6:2c:6c:
c3:89:f5:13:0c:aa:30:76:b6:84:ba:88:3e:85:48:
86:23:35:27:cd:d6:a3:94:86:54:a5:5b:5d:f3:d0:
b3:7d:44:54:ab:19:5f:ac:80:d8:59:d2:e2:31:34:
ea:51:b8:19:6f:eb:79:55:32:8e:30:6b:64:fb:25:
d4:bc:5c:a3:df:ce:a0:e0:db:ee:93:4d:81:41:30:
cb:73:91:d7:16:3d:3a:83:d7:e0:be:35:42:2d:7c:
7c:34:0b:bf:54:ce:8f:2b:b6:50:5d:33:6a:e4:a0:
25:71:1e:f8:74:67:91:6b:0a:9d:bd:ab:24:da:ac:
66:9b:00:2e:de:3d:42:0d:3c:b1:25:f1:4b:4d:f4:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:48:01:67:26:CA:E1:BB:5F:DE:8F:DA:C5:8C:27:ED:DB:75:68
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:bb:b2:d9:2e:66:96:aa:f6:0a:2e:55:a8:1c:95:f1:46:aa:
7e:59:43:22:03:49:78:41:92:80:96:7c:1b:bf:72:a1:f8:a7:
b8:ec:4a:19:25:8c:77:cb:0e:38:ca:da:12:9e:3d:33:16:2a:
f9:83:9e:00:35:09:dc:78:33:81:36:db:c9:09:43:ba:90:6b:
59:9d:88:a6:ed:d0:0a:9a:34:be:97:c8:e2:21:ee:ea:1d:7d:
10:a7:c1:8f:58:1a:ce:f1:8d:06:63:64:d0:86:e8:e0:79:9b:
96:bd:46:a8:1e:94:51:b7:8a:83:da:2b:b7:d9:b9:f6:85:3c:
b0:56:a8:32:94:43:16:2f:6b:ed:a4:42:d6:dc:c8:15:23:e7:
04:fc:00:9b:c2:cd:4b:6e:7d:94:1c:5e:a3:eb:26:7d:10:02:
20:39:6d:73:2f:60:0e:06:c4:db:d7:e3:1e:14:66:d8:cc:46:
10:20:e1:8e:78:1c:4f:fc:90:53:93:98:6f:f8:b0:5f:8a:d0:
a8:28:f3:f9:f6:61:3a:3b:7f:08:c9:31:88:a6:be:5d:35:17:
6b:61:61:2d:41:02:69:ad:8c:99:b2:33:4c:74:fb:55:65:ac:
a5:c0:95:cb:a9:53:c4:bd:8d:d5:73:3f:e3:fe:55:2a:09:74:
70:29:f7:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2zgA9FEW0hNgTzLDWhsLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMmQ1ZjE3NjM2YTFmMTRlZmE4YTBlNDA5OWIzZDMzNWZm
ODRkZDMwHhcNMjYwNzI0MDIwMTMwWhcNMjYwNzI1MDIwMTMwWjAzMTEwLwYDVQQD
EygzNWE1NDgwMTY3MjZjYWUxYmI1ZmRlOGZkYWM1OGMyN2VkZGI3NTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8Ren70RJa1LtHcoypl0ErNtXGXT
TZZvgZENeq/LdpWAlgFH4Q0g3N6vx6LfoVsPVAB0fQon1ALn7hiAbHRVM5jHoYyn
gP23DjK4QRwarhXtEWyGD6EpsIbCmv8xRkH9h4+I43BVUPJ954Re38kXBUW+g+fm
LGzDifUTDKowdraEuog+hUiGIzUnzdajlIZUpVtd89CzfURUqxlfrIDYWdLiMTTq
UbgZb+t5VTKOMGtk+yXUvFyj386g4Nvuk02BQTDLc5HXFj06g9fgvjVCLXx8NAu/
VM6PK7ZQXTNq5KAlcR74dGeRawqdvask2qxmmwAu3j1CDTyxJfFLTfRlSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWlSAFnJsrhu1/ej9rFjCft23VoMB8GA1UdIwQY
MBaAFPItXxdjah8U76ig5AmbPTNf+E3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAt
NjExYTJhMWI4MjI0LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAtNjExYTJhMWI4MjI0
LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7uy2S5m
lqr2Ci5VqByV8UaqfllDIgNJeEGSgJZ8G79yofinuOxKGSWMd8sOOMraEp49MxYq
+YOeADUJ3HgzgTbbyQlDupBrWZ2Ipu3QCpo0vpfI4iHu6h19EKfBj1gazvGNBmNk
0Ibo4Hmblr1GqB6UUbeKg9ort9m59oU8sFaoMpRDFi9r7aRC1tzIFSPnBPwAm8LN
S259lBxeo+smfRACIDltcy9gDgbE29fjHhRm2MxGECDhjngcT/yQU5OYb/iwX4rQ
qCjz+fZhOjt/CMkxiKa+XTUXa2FhLUECaa2MmbIzTHT7VWWspcCVy6lTxL2N1XM/
4/5VKgl0cCn3ag==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:39 2026 by rpki-client