Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: FGkZE0bf3j3AlkeL/u0LzkguA3B2Oe3zUEAXcihUqJI=
Subject key identifier: 41:C5:82:EF:88:EE:0E:24:8E:07:1C:1E:FB:9C:44:7E:6E:D0:DA:E3
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019F8F4717ABAC10BD2BA05C482705F30B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 14:00:28 +0000
Manifest this update: Thu 23 Jul 2026 14:00:28 +0000
Manifest next update: Fri 24 Jul 2026 14:00:28 +0000
Files and hashes: 1: 1wC70OGBB84YZ8LzzI7GRE1FXLw.roa (hash: 61O42HPTbjFtxU4oF7cNiKUH0sHQufjgX2XI1LEtyCM=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: v1xiWmA72HQKKcFHObmaVESENGq+P8oODrjL8qePf9U=)
3: YVZ-GH3S7Iq0JxeBAHpFVD2_Lx4.roa (hash: kM6UtuYisVsArbzf8eESDr1kRHymSG53rA/gBdAULqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:17:ab:ac:10:bd:2b:a0:5c:48:27:05:f3:0b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Jul 23 14:00:28 2026 GMT
Not After : Jul 24 14:00:28 2026 GMT
Subject: CN=41c582ef88ee0e248e071c1efb9c447e6ed0dae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:11:00:57:ea:70:11:c6:5f:4f:69:f1:34:b1:
e0:e9:57:79:81:e5:46:57:f2:eb:96:74:a0:49:8b:
27:7c:d5:b3:15:be:94:34:46:0f:3b:23:be:00:53:
ab:91:0f:66:f1:66:b7:86:79:4a:e2:b8:6e:cc:52:
e3:06:b4:9d:92:33:ff:4d:d0:66:7e:80:db:2b:c5:
5d:12:49:00:d3:fb:f3:69:57:da:02:27:88:5d:de:
60:88:a2:55:f5:e2:2c:c2:b3:d0:57:07:5b:f4:8e:
2f:37:09:41:cf:ff:5d:95:ce:10:4f:ee:84:b6:93:
88:3a:3b:ed:47:05:ed:76:5b:f4:8d:a4:e1:4c:ca:
17:67:40:5e:c8:a1:9a:dd:0d:81:ac:c0:85:ac:c2:
5b:d2:95:e8:d3:8d:0b:a8:4b:ea:bd:78:c8:d2:6a:
5b:39:6d:f9:b6:08:a6:c4:b5:7d:9c:2c:47:b9:8e:
3f:fa:52:4c:c4:1c:20:49:2d:6f:09:53:fa:f4:ea:
38:72:21:c2:90:12:d5:0e:23:03:07:68:c7:b5:0f:
3b:a6:8f:89:35:3e:1c:e3:96:35:21:a8:c2:e3:87:
f0:e5:61:84:27:be:40:9b:43:e2:09:52:bd:e9:be:
d3:30:99:e8:8a:6f:b9:c0:66:f0:73:0b:8f:6e:2c:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C5:82:EF:88:EE:0E:24:8E:07:1C:1E:FB:9C:44:7E:6E:D0:DA:E3
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d7:60:2c:a4:c5:2e:27:ca:81:4d:a6:2b:2c:59:2a:7c:f5:
5c:08:7c:96:a3:d2:d9:53:f4:74:2d:c8:b8:2a:65:af:7f:19:
28:90:24:cb:ac:80:a4:17:b3:ab:f6:18:fa:20:4c:b2:c1:6c:
18:be:ea:33:c7:7e:02:24:f8:14:bb:c1:91:ec:50:1c:d8:26:
b1:63:33:8e:85:41:72:f2:23:87:b6:fb:77:c5:b5:43:22:cd:
d3:49:35:13:b0:27:0e:0d:18:5d:5c:d4:fe:7b:bb:9b:2e:59:
39:2d:88:5e:1e:00:bb:a2:ef:08:34:0b:56:9e:6f:15:35:b1:
15:e6:e9:44:03:50:e6:8c:33:42:34:d5:d7:aa:31:f2:8c:ab:
74:a7:ba:7f:e7:c4:bb:2b:5e:82:da:7e:4d:22:82:21:69:f1:
1b:05:70:39:e3:fd:da:ae:35:b0:ab:8d:91:aa:b6:72:00:9e:
8f:24:03:e2:e4:d7:0d:55:a7:9b:40:72:e8:d4:e2:45:e4:ae:
3f:36:dd:2a:e5:85:ce:04:e6:f1:06:fb:e2:e9:75:7e:d3:86:
d8:3e:55:c1:37:71:73:d9:4b:b2:a1:ff:af:c1:fa:11:ff:66:
b3:63:8a:90:44:90:29:24:4e:a5:f2:17:a6:62:6a:71:bb:24:
2f:f2:fb:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PRxerrBC9K6BcSCcF8ws/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYjE1ZTc3YWY0ZWRkZTExMTkyYzZmZWNkNTBiMjFjZDM3
OWQ0MjEwHhcNMjYwNzIzMTQwMDI4WhcNMjYwNzI0MTQwMDI4WjAzMTEwLwYDVQQD
Eyg0MWM1ODJlZjg4ZWUwZTI0OGUwNzFjMWVmYjljNDQ3ZTZlZDBkYWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7REAV+pwEcZfT2nxNLHg6Vd5geVG
V/LrlnSgSYsnfNWzFb6UNEYPOyO+AFOrkQ9m8Wa3hnlK4rhuzFLjBrSdkjP/TdBm
foDbK8VdEkkA0/vzaVfaAieIXd5giKJV9eIswrPQVwdb9I4vNwlBz/9dlc4QT+6E
tpOIOjvtRwXtdlv0jaThTMoXZ0BeyKGa3Q2BrMCFrMJb0pXo040LqEvqvXjI0mpb
OW35tgimxLV9nCxHuY4/+lJMxBwgSS1vCVP69Oo4ciHCkBLVDiMDB2jHtQ87po+J
NT4c45Y1IajC44fw5WGEJ75Am0PiCVK96b7TMJnoim+5wGbwcwuPbiw7mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHFgu+I7g4kjgccHvucRH5u0NrjMB8GA1UdIwQY
MBaAFPGxXnevTt3hEZLG/s1QshzTedQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUt
MTM0MGNjNWIzZDU3LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUtMTM0MGNjNWIzZDU3
LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9dgLKTF
LifKgU2mKyxZKnz1XAh8lqPS2VP0dC3IuCplr38ZKJAky6yApBezq/YY+iBMssFs
GL7qM8d+AiT4FLvBkexQHNgmsWMzjoVBcvIjh7b7d8W1QyLN00k1E7AnDg0YXVzU
/nu7my5ZOS2IXh4Au6LvCDQLVp5vFTWxFebpRANQ5owzQjTV16ox8oyrdKe6f+fE
uytegtp+TSKCIWnxGwVwOeP92q41sKuNkaq2cgCejyQD4uTXDVWnm0By6NTiReSu
PzbdKuWFzgTm8Qb74ul1ftOG2D5VwTdxc9lLsqH/r8H6Ef9ms2OKkESQKSROpfIX
pmJqcbskL/L7ag==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:44 2026 by rpki-client