Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: diAd8PfdqFy2bc24FBb6XRCY/7/By/Sq/wxfbEUASWs=
Subject key identifier: 3B:8A:34:5E:66:6E:F6:99:E9:E7:D3:ED:40:04:7A:E8:72:1F:90:62
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 019F8FB4F86B64A3549DEAAAE0D90BCC8AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 16D6
Signing time: Thu 23 Jul 2026 16:00:29 +0000
Manifest this update: Thu 23 Jul 2026 16:00:29 +0000
Manifest next update: Fri 24 Jul 2026 16:00:29 +0000
Files and hashes: 1: 1-zgZS_oWFjeb_FUaP5rf7CIay9s.roa (hash: oe0GxzRMGYrpk5fK7HR9K3weYFmW/xstDWDPAgUmAy8=)
2: W79nBKhPAzEIedXVT5rNtMV1yOo.roa (hash: mixrNOg93KKzgb3tWB4Qt/opKcOsyCnIL17ZEqCbhik=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: DY2m2Zqh/OA+SvC4SOxMJr/DhHxHDCRq04/LjA5CxLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:f8:6b:64:a3:54:9d:ea:aa:e0:d9:0b:cc:8a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Jul 23 16:00:29 2026 GMT
Not After : Jul 24 16:00:29 2026 GMT
Subject: CN=3b8a345e666ef699e9e7d3ed40047ae8721f9062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:66:fc:ab:4b:17:13:5b:dd:67:4e:65:b0:
bb:bd:65:19:bd:1d:4c:3e:eb:22:49:3a:59:94:ba:
46:bf:bd:96:f7:0d:f1:ab:09:86:d2:a4:55:ca:7d:
7a:b3:b5:ff:ec:03:39:b5:52:de:40:99:46:37:8f:
25:48:bf:04:6a:2b:3f:36:60:bf:e7:27:fd:93:75:
e4:7f:27:c7:37:87:76:48:ce:4f:61:af:78:c5:45:
a4:6d:0a:e0:27:a6:87:bb:56:77:9f:16:b1:d5:55:
02:78:86:24:50:a7:11:53:a2:27:e3:d1:61:a0:22:
fd:b5:21:1b:af:bf:e7:3d:0b:59:b8:ef:47:26:5e:
84:cb:77:af:a8:c4:6d:6b:82:9a:26:00:62:a2:78:
dc:85:f9:eb:dc:26:79:dc:68:34:a8:79:2a:e2:34:
25:d7:04:7f:05:73:9a:fc:6f:65:37:3b:6e:37:1b:
93:ad:8b:5f:c1:0f:58:80:f1:a0:09:6a:65:b5:03:
50:62:4c:5a:38:84:6b:24:55:92:c2:98:7e:3e:79:
cf:0e:21:9c:f5:8b:72:64:fa:e2:6b:11:26:df:c5:
df:60:f8:a1:22:4b:8b:d4:63:9e:26:48:a7:b3:b1:
13:95:f7:a6:e4:c7:2a:60:31:2c:c7:35:49:22:eb:
be:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8A:34:5E:66:6E:F6:99:E9:E7:D3:ED:40:04:7A:E8:72:1F:90:62
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:46:a1:0f:49:f2:12:54:12:36:6e:91:97:44:62:a1:84:72:
97:5b:4c:ba:13:35:05:73:57:7b:09:ce:de:7b:0c:4b:ed:fc:
5a:eb:17:c1:0d:b6:b5:81:b8:02:8e:14:11:7c:88:ab:da:c1:
4d:da:9b:24:40:59:97:80:df:fc:b1:2b:9c:db:d8:0d:04:2d:
e2:ea:29:bf:30:08:5a:1a:5a:b0:b0:33:e2:34:22:6d:f3:12:
7e:3a:8e:51:93:93:67:58:52:6a:df:f6:3a:3e:e2:5f:c6:fe:
56:fe:1c:97:b7:3a:4d:3e:f5:e7:72:bf:ce:21:4a:ab:6f:c4:
ff:ce:95:d3:ba:e3:7b:1c:ec:07:72:60:0e:6c:9b:9d:80:91:
65:0d:ce:1e:dc:59:50:9b:d7:d2:d0:7e:d0:5d:c8:67:ae:5f:
9c:ed:d5:7a:b7:fe:72:5e:a2:aa:9c:99:72:0a:b6:26:e3:d7:
98:ba:e0:25:25:08:04:46:83:54:a3:c3:ed:82:ce:a0:83:c8:
3e:cc:3e:5b:6f:d4:ff:7c:be:a8:9b:85:42:38:6a:f9:76:f6:
c9:75:fd:6e:7c:d9:9d:02:9c:e3:12:60:27:fe:3f:cb:b7:52:
6e:d1:14:ad:8d:b1:df:81:41:f2:ab:1f:a3:a4:31:76:5b:cd:
33:4b:b2:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtPhrZKNUneqq4NkLzIrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZmYxYjBjZTlmNDg2YTY3ZTYzZDNmMGQwZTY4OGEyNGY3
MDBjN2MwHhcNMjYwNzIzMTYwMDI5WhcNMjYwNzI0MTYwMDI5WjAzMTEwLwYDVQQD
EygzYjhhMzQ1ZTY2NmVmNjk5ZTllN2QzZWQ0MDA0N2FlODcyMWY5MDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNJm/KtLFxNb3WdOZbC7vWUZvR1M
PusiSTpZlLpGv72W9w3xqwmG0qRVyn16s7X/7AM5tVLeQJlGN48lSL8Eais/NmC/
5yf9k3XkfyfHN4d2SM5PYa94xUWkbQrgJ6aHu1Z3nxax1VUCeIYkUKcRU6In49Fh
oCL9tSEbr7/nPQtZuO9HJl6Ey3evqMRta4KaJgBionjchfnr3CZ53Gg0qHkq4jQl
1wR/BXOa/G9lNztuNxuTrYtfwQ9YgPGgCWpltQNQYkxaOIRrJFWSwph+PnnPDiGc
9YtyZPriaxEm38XfYPihIkuL1GOeJkins7ETlfem5McqYDEsxzVJIuu+swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuKNF5mbvaZ6efT7UAEeuhyH5BiMB8GA1UdIwQY
MBaAFI3/Gwzp9IamfmPT8NDmiKJPcAx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEt
ZDg3YjcwMjZhM2ZmLzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEtZDg3YjcwMjZhM2Zm
LzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0ahD0ny
ElQSNm6Rl0RioYRyl1tMuhM1BXNXewnO3nsMS+38WusXwQ22tYG4Ao4UEXyIq9rB
TdqbJEBZl4Df/LErnNvYDQQt4uopvzAIWhpasLAz4jQibfMSfjqOUZOTZ1hSat/2
Oj7iX8b+Vv4cl7c6TT7153K/ziFKq2/E/86V07rjexzsB3JgDmybnYCRZQ3OHtxZ
UJvX0tB+0F3IZ65fnO3Verf+cl6iqpyZcgq2JuPXmLrgJSUIBEaDVKPD7YLOoIPI
Psw+W2/U/3y+qJuFQjhq+Xb2yXX9bnzZnQKc4xJgJ/4/y7dSbtEUrY2x34FB8qsf
o6QxdlvNM0uykQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:28 2026 by rpki-client