Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier: jQvz1cvR1CLVy0pSqUjChv4GewYN0GgIQCr4QZZ/2Qw=
Subject key identifier: 0F:E9:16:2A:A8:AE:E8:14:53:97:B4:FA:DF:D0:12:61:04:B3:B4:6E
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 019F91DB288F77834F48E2436AA9771C5C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number: 19D6
Signing time: Fri 24 Jul 2026 02:01:26 +0000
Manifest this update: Fri 24 Jul 2026 02:01:26 +0000
Manifest next update: Sat 25 Jul 2026 02:01:26 +0000
Files and hashes: 1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: avfBRYPnZTYaYB6P4E87ipaLbJhd8zpS+9eC8T+i7Zs=)
2: unUyBQz8XFF2OcgZ1f90_tl9Ad4.roa (hash: Q3zQczsKFUa5DCI4QfqsevX6E5xk3SVGs2WbjqkExHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:28:8f:77:83:4f:48:e2:43:6a:a9:77:1c:5c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Jul 24 02:01:26 2026 GMT
Not After : Jul 25 02:01:26 2026 GMT
Subject: CN=0fe9162aa8aee8145397b4fadfd0126104b3b46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:eb:62:a6:ed:0a:4d:0f:f1:f4:0e:1e:77:
bc:04:5d:5a:ce:1c:44:8a:89:71:7e:cd:b6:26:87:
dd:4a:27:ea:e0:ad:cd:4d:6b:14:98:86:ea:ca:aa:
c3:2a:14:e1:59:94:4b:cb:32:31:b9:50:19:b5:e6:
09:4a:17:2c:95:76:76:79:07:63:57:5d:f0:56:df:
bc:ee:13:ae:91:ba:da:51:e4:18:e9:27:ad:39:4e:
82:a6:3d:6e:9c:8e:10:59:6d:27:65:9a:d9:8c:1c:
69:f5:3e:f9:bc:69:f3:2a:47:68:6a:1b:08:3a:de:
6f:1f:df:c9:b8:2c:41:e5:53:80:cc:c4:8b:a1:d8:
9a:b9:35:a4:db:ef:5f:15:2b:28:1a:12:b2:34:2b:
8c:04:f7:99:65:68:a7:4b:ae:55:df:4a:f0:d0:a6:
9b:8c:43:37:7b:fd:a6:1c:95:a9:96:20:c0:62:24:
08:f9:ea:d4:4e:6e:5b:de:ee:66:36:b6:42:46:e9:
3f:96:bd:d6:57:bb:3a:65:54:39:b8:83:df:db:c3:
a8:e2:fe:fb:a0:b8:72:cd:16:23:7d:01:41:77:4c:
9b:01:aa:8a:9b:1f:fc:37:8a:ec:1e:97:de:d6:75:
51:2f:89:ac:e4:e7:c6:0c:87:02:74:3a:de:f7:a4:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E9:16:2A:A8:AE:E8:14:53:97:B4:FA:DF:D0:12:61:04:B3:B4:6E
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:61:c0:28:92:07:9a:ac:35:38:37:94:19:44:16:f0:bd:2c:
bd:2e:31:c6:c8:bc:4d:66:e7:e0:1e:b7:22:a0:d0:0a:ae:dc:
eb:af:02:69:83:50:38:a9:16:a8:ad:f4:dd:a6:8e:85:9d:82:
07:91:8a:8f:0a:d1:e1:91:c0:5f:f9:02:be:a8:35:0f:9e:35:
7b:7b:bd:a2:2a:9c:d8:bc:f0:c0:a0:b7:2e:91:57:7e:f7:51:
d2:c2:cc:cb:26:62:1b:42:48:8e:ea:cf:01:46:0e:7b:ed:8a:
04:84:01:83:bb:af:68:e0:fd:0d:2c:36:a4:a6:19:f6:9a:d2:
af:7f:bb:a8:8a:4f:30:60:32:76:2d:91:97:90:eb:5a:87:a1:
e3:43:8e:46:12:1f:de:e9:e4:40:61:16:d9:fd:a0:c1:82:78:
23:10:76:22:7d:d2:88:78:e7:ca:0a:a8:39:74:c2:8b:15:f7:
e8:14:1c:7a:76:17:3b:89:4f:c1:9d:9f:38:bd:6e:90:01:a3:
ab:9d:8d:b1:a1:70:a7:a2:5a:6a:d2:43:0e:9a:f0:3a:21:1b:
ed:c9:30:fe:ca:7c:58:9b:cf:7f:b6:06:38:1a:df:9c:0e:d6:
16:37:50:6c:63:bb:06:8e:ec:48:da:5c:61:eb:e7:4d:4c:69:
6e:bd:2a:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2yiPd4NPSOJDaql3HFwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjE0ZWQxMjRmOWEyZjNkZWFiMTAwNmYxODRjZjRmYjgw
YTNhZWMwHhcNMjYwNzI0MDIwMTI2WhcNMjYwNzI1MDIwMTI2WjAzMTEwLwYDVQQD
EygwZmU5MTYyYWE4YWVlODE0NTM5N2I0ZmFkZmQwMTI2MTA0YjNiNDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOXrYqbtCk0P8fQOHne8BF1azhxE
iolxfs22JofdSifq4K3NTWsUmIbqyqrDKhThWZRLyzIxuVAZteYJShcslXZ2eQdj
V13wVt+87hOukbraUeQY6SetOU6Cpj1unI4QWW0nZZrZjBxp9T75vGnzKkdoahsI
Ot5vH9/JuCxB5VOAzMSLodiauTWk2+9fFSsoGhKyNCuMBPeZZWinS65V30rw0Kab
jEM3e/2mHJWpliDAYiQI+erUTm5b3u5mNrZCRuk/lr3WV7s6ZVQ5uIPf28Oo4v77
oLhyzRYjfQFBd0ybAaqKmx/8N4rsHpfe1nVRL4ms5OfGDIcCdDre96SZAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/pFiqorugUU5e0+t/QEmEEs7RuMB8GA1UdIwQY
MBaAFPDxTtEk+aLz3qsQBvGEz0+4CjrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQt
NDM2MTJlN2Q5Y2MxLzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQtNDM2MTJlN2Q5Y2Mx
LzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2HAKJIH
mqw1ODeUGUQW8L0svS4xxsi8TWbn4B63IqDQCq7c668CaYNQOKkWqK303aaOhZ2C
B5GKjwrR4ZHAX/kCvqg1D541e3u9oiqc2LzwwKC3LpFXfvdR0sLMyyZiG0JIjurP
AUYOe+2KBIQBg7uvaOD9DSw2pKYZ9prSr3+7qIpPMGAydi2Rl5DrWoeh40OORhIf
3unkQGEW2f2gwYJ4IxB2In3SiHjnygqoOXTCixX36BQcenYXO4lPwZ2fOL1ukAGj
q52NsaFwp6JaatJDDprwOiEb7ckw/sp8WJvPf7YGOBrfnA7WFjdQbGO7Bo7sSNpc
YevnTUxpbr0q4Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:58 2026 by rpki-client