Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier: tKDFiodhODGTDy+WODFD1v8fnJ9UBdEm+8pbp5WoI+s=
Subject key identifier: 88:6C:06:CC:F8:2C:91:EC:84:CE:8D:38:D7:B5:5E:16:C4:7C:60:07
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 019F905A6415DC4BE8BBF114CD1E033A046B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number: 10A8
Signing time: Thu 23 Jul 2026 19:01:10 +0000
Manifest this update: Thu 23 Jul 2026 19:01:10 +0000
Manifest next update: Fri 24 Jul 2026 19:01:10 +0000
Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: 7fFhqfPozRoXL48gzY17NPLOq8ddDwAP+XDpjvGJi3c=)
2: FpQImozb1WQPa7ynxxGnFSr06JI.roa (hash: ifQklYq1Q4YF5Y36wrzWjlvtYcLa+HxFkFPijteQsCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:64:15:dc:4b:e8:bb:f1:14:cd:1e:03:3a:04:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: Jul 23 19:01:10 2026 GMT
Not After : Jul 24 19:01:10 2026 GMT
Subject: CN=886c06ccf82c91ec84ce8d38d7b55e16c47c6007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:fa:e6:a9:a9:a8:75:d4:3b:97:56:53:4c:
e2:0e:dc:d0:85:29:e9:38:83:79:e0:2b:5f:18:f8:
9e:d1:44:8f:f7:3a:49:dc:4d:4e:98:89:f5:fa:c0:
9c:11:e4:09:d8:c9:40:da:2a:6b:4f:5f:5d:37:b7:
0b:bd:55:28:9b:73:ca:a0:4c:be:85:c4:a8:71:93:
4f:92:cc:9f:48:11:8c:27:f2:04:6b:02:18:18:3d:
08:83:bc:4c:b3:dc:7d:15:58:d3:26:e6:54:ab:d9:
b5:1e:7b:02:b2:6d:da:3b:8d:7d:30:49:1a:ad:38:
6c:48:cb:82:ac:25:3a:e7:72:eb:3c:18:17:4b:f5:
6d:be:e4:5f:af:97:d3:34:7d:91:55:73:eb:57:17:
71:7c:4c:72:c3:85:06:1b:cc:ec:7f:c0:9a:47:74:
e2:49:03:15:62:c3:a5:b8:15:ec:00:d9:bb:35:4d:
2c:28:7d:8f:bf:c8:d7:67:39:75:23:df:90:31:14:
e7:22:5e:99:57:b7:7c:7e:ee:35:5f:3e:b2:38:53:
0f:fc:6f:df:e6:56:fd:8c:5c:2c:f8:b7:7b:55:0e:
d4:ae:8f:c2:3f:37:8b:1b:ef:77:b2:7d:00:86:ba:
b0:7a:18:e1:27:b5:a7:d9:16:9d:1e:b6:4a:94:f5:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6C:06:CC:F8:2C:91:EC:84:CE:8D:38:D7:B5:5E:16:C4:7C:60:07
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ee:c5:36:fa:7c:bd:2f:6e:2b:8b:21:21:26:b3:b9:a5:89:
7e:14:4f:5c:cf:27:bb:6b:1f:56:2e:62:66:7e:69:bc:36:94:
cd:dd:61:6a:b0:ee:bb:f1:bc:f3:2a:be:4a:66:a2:79:88:32:
c3:60:2e:e3:f8:c9:bf:93:24:5d:3d:ca:c9:ec:b7:23:ff:67:
24:04:ed:47:37:92:5e:f9:06:71:3f:32:27:a4:3a:0d:eb:23:
47:5d:86:02:35:49:ea:88:a3:a2:61:18:7e:21:bc:7e:54:4b:
66:35:1c:b5:cf:3f:03:a5:bb:ae:6d:a8:9d:02:ee:08:aa:1a:
0e:27:e7:4c:69:cd:f2:bf:53:d3:eb:76:16:88:fb:6a:37:ec:
6b:1e:05:aa:a4:56:94:76:8d:9e:53:ed:6b:ef:03:3d:1c:c4:
b0:bf:5b:db:90:b9:e5:a4:d7:86:bd:83:69:4c:76:a8:cf:ae:
d9:00:77:09:ed:87:14:d8:02:2f:93:12:1f:7c:ee:2b:89:c0:
b7:0e:f8:9a:41:51:3c:af:8c:14:c4:a8:11:d1:76:78:d2:93:
b6:99:84:ce:0e:29:f8:9f:f9:3e:20:28:eb:0a:1e:7d:cd:50:
e4:b0:ad:f9:77:98:91:2b:47:80:3b:18:2c:f4:b8:04:08:77:
be:a3:90:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWmQV3Evou/EUzR4DOgRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMjEwOTQ4N2FmNDAwYTYzZTNjYjAxMWEzZDU0OWU3NTFm
ZDJjMTgwHhcNMjYwNzIzMTkwMTEwWhcNMjYwNzI0MTkwMTEwWjAzMTEwLwYDVQQD
Eyg4ODZjMDZjY2Y4MmM5MWVjODRjZThkMzhkN2I1NWUxNmM0N2M2MDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTT65qmpqHXUO5dWU0ziDtzQhSnp
OIN54CtfGPie0USP9zpJ3E1OmIn1+sCcEeQJ2MlA2iprT19dN7cLvVUom3PKoEy+
hcSocZNPksyfSBGMJ/IEawIYGD0Ig7xMs9x9FVjTJuZUq9m1HnsCsm3aO419MEka
rThsSMuCrCU653LrPBgXS/VtvuRfr5fTNH2RVXPrVxdxfExyw4UGG8zsf8CaR3Ti
SQMVYsOluBXsANm7NU0sKH2Pv8jXZzl1I9+QMRTnIl6ZV7d8fu41Xz6yOFMP/G/f
5lb9jFws+Ld7VQ7Uro/CPzeLG+93sn0AhrqwehjhJ7Wn2RadHrZKlPUw1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhsBsz4LJHshM6NONe1XhbEfGAHMB8GA1UdIwQY
MBaAFPEhCUh69ACmPjywEaPVSedR/SwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NWNkMTctMDQ0MS00YTRhLWI3ZWUt
ZjA1ZWZhYjc0ZjczLzEvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83NWNkMTctMDQ0MS00YTRhLWI3ZWUtZjA1ZWZhYjc0Zjcz
LzEvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+7FNvp8
vS9uK4shISazuaWJfhRPXM8nu2sfVi5iZn5pvDaUzd1harDuu/G88yq+SmaieYgy
w2Au4/jJv5MkXT3Kyey3I/9nJATtRzeSXvkGcT8yJ6Q6DesjR12GAjVJ6oijomEY
fiG8flRLZjUctc8/A6W7rm2onQLuCKoaDifnTGnN8r9T0+t2Foj7ajfsax4FqqRW
lHaNnlPta+8DPRzEsL9b25C55aTXhr2DaUx2qM+u2QB3Ce2HFNgCL5MSH3zuK4nA
tw74mkFRPK+MFMSoEdF2eNKTtpmEzg4p+J/5PiAo6woefc1Q5LCt+XeYkStHgDsY
LPS4BAh3vqOQeQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:31 2026 by rpki-client