Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File: 8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier: 2JjukppmK53RqchbWmPz6eTy6WYvBP889tDlhr2+bfE=
Subject key identifier: B3:CC:B9:22:47:0B:1C:23:AB:25:A7:D2:A6:F1:D1:D9:D0:45:00:15
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial: 019FA974A42EEEB3B02E54F0589FB0DE8207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number: 0DD3
Signing time: Tue 28 Jul 2026 16:00:21 +0000
Manifest this update: Tue 28 Jul 2026 16:00:21 +0000
Manifest next update: Wed 29 Jul 2026 16:00:21 +0000
Files and hashes: 1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: pHYVElGC2hnqNNr7qm/wO7CCdimzje5f5f21bNxP1B4=)
2: uBozqFCRP6q6-fMqqEdxvia5s2w.roa (hash: 7my1TEAY49gz3OCc/3WBB7kXgHGx+R9z5VTiKjlGzfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:a4:2e:ee:b3:b0:2e:54:f0:58:9f:b0:de:82:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Validity
Not Before: Jul 28 16:00:21 2026 GMT
Not After : Jul 29 16:00:21 2026 GMT
Subject: CN=b3ccb922470b1c23ab25a7d2a6f1d1d9d0450015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:5f:47:b6:0d:14:9b:2b:e1:14:bf:67:8c:
35:05:21:da:09:2a:4b:2f:ea:25:45:7a:e8:23:bc:
1b:a5:d2:ad:55:05:79:4d:40:46:06:83:7d:97:01:
47:4f:4d:0e:22:54:67:98:8e:12:b4:37:53:10:18:
4c:af:94:eb:7d:a8:5b:61:b7:9d:4d:e4:0c:31:05:
83:0a:fc:ce:1f:88:7e:d3:2d:fd:42:3c:b8:c2:c2:
e0:b1:f5:b6:d1:c2:29:ae:48:46:c8:e7:ce:3c:19:
bc:3c:1f:52:02:4b:15:6b:0d:fa:07:49:f2:a0:6f:
e4:8c:00:06:7b:dc:76:5a:06:65:28:73:51:2f:1d:
4c:d5:7a:cb:cc:2f:94:dc:16:fe:68:c9:9b:22:37:
84:1b:03:1d:a5:30:0c:ff:8c:55:8e:8e:07:58:15:
b6:26:23:02:7a:1c:ec:40:c7:16:77:9b:af:be:6d:
9a:7c:a8:45:8f:38:61:20:51:3f:fb:67:77:fd:c9:
08:e9:53:d3:27:ca:a3:95:46:f2:01:9b:63:f3:03:
f5:35:e3:d2:05:e3:69:c9:0c:60:be:d8:5d:33:08:
86:de:7f:c5:dd:ec:8e:c4:f3:97:34:6a:71:c9:7a:
a1:9d:24:aa:30:a4:cb:95:0e:58:35:07:7d:d8:ba:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CC:B9:22:47:0B:1C:23:AB:25:A7:D2:A6:F1:D1:D9:D0:45:00:15
X509v3 Authority Key Identifier:
keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:db:c2:c6:5f:15:c9:83:56:46:b6:a5:76:26:a5:22:7b:64:
61:be:8d:2b:d8:93:3f:7a:56:57:9f:0f:86:0a:85:9e:2f:fb:
ae:d8:07:2b:db:42:cd:81:ae:e3:9b:c0:0b:7e:14:04:a1:fa:
36:63:65:be:e2:f9:db:89:be:d5:a3:a7:df:99:f1:f0:3f:2f:
e0:eb:84:7d:15:e3:16:da:d2:50:3e:84:c8:f4:86:ba:c0:fd:
c9:06:03:5c:1d:77:71:d4:e0:f6:cc:e9:f9:7b:65:26:7e:1e:
25:94:c8:d5:ed:d6:9f:96:c6:db:c2:2b:c9:aa:0b:45:0c:43:
6d:2b:42:e8:0b:42:3e:cf:93:d1:79:d5:ee:d3:47:4c:4b:5c:
d7:b6:67:ee:bb:47:9a:71:89:63:07:3a:be:79:c3:9a:51:34:
43:58:68:ee:be:7b:cf:3a:ea:2b:01:9a:72:89:9e:b3:4a:d4:
3f:a5:32:4e:d0:ff:26:f9:f0:dc:da:4c:14:a7:6e:d2:74:48:
ef:08:58:ed:6b:fc:9c:f4:59:47:92:45:80:b7:fb:51:ca:e9:
dc:b2:17:1a:b6:7c:43:2c:72:0c:9b:27:61:3f:6c:3c:41:b0:
db:c3:79:e7:58:a0:cf:67:c6:a2:88:06:30:ab:35:28:6f:5d:
7b:2d:ed:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdKQu7rOwLlTwWJ+w3oIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNzRhMWE0MmQ0MGE3ZmI4MmE2YzA4Y2U5NzY1MWNiNjZh
YmYzNzAwHhcNMjYwNzI4MTYwMDIxWhcNMjYwNzI5MTYwMDIxWjAzMTEwLwYDVQQD
EyhiM2NjYjkyMjQ3MGIxYzIzYWIyNWE3ZDJhNmYxZDFkOWQwNDUwMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEpfR7YNFJsr4RS/Z4w1BSHaCSpL
L+olRXroI7wbpdKtVQV5TUBGBoN9lwFHT00OIlRnmI4StDdTEBhMr5TrfahbYbed
TeQMMQWDCvzOH4h+0y39Qjy4wsLgsfW20cIprkhGyOfOPBm8PB9SAksVaw36B0ny
oG/kjAAGe9x2WgZlKHNRLx1M1XrLzC+U3Bb+aMmbIjeEGwMdpTAM/4xVjo4HWBW2
JiMCehzsQMcWd5uvvm2afKhFjzhhIFE/+2d3/ckI6VPTJ8qjlUbyAZtj8wP1NePS
BeNpyQxgvthdMwiG3n/F3eyOxPOXNGpxyXqhnSSqMKTLlQ5YNQd92LpRVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPMuSJHCxwjqyWn0qbx0dnQRQAVMB8GA1UdIwQY
MBaAFPF0oaQtQKf7gqbAjOl2Uctmq/NwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZTljODEtNmQ2Ny00ZTMzLWJkMWYt
MTM0OGVjOTdiOTAyLzEvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lZTljODEtNmQ2Ny00ZTMzLWJkMWYtMTM0OGVjOTdiOTAy
LzEvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNvCxl8V
yYNWRraldialIntkYb6NK9iTP3pWV58PhgqFni/7rtgHK9tCzYGu45vAC34UBKH6
NmNlvuL524m+1aOn35nx8D8v4OuEfRXjFtrSUD6EyPSGusD9yQYDXB13cdTg9szp
+XtlJn4eJZTI1e3Wn5bG28IryaoLRQxDbStC6AtCPs+T0XnV7tNHTEtc17Zn7rtH
mnGJYwc6vnnDmlE0Q1ho7r57zzrqKwGacomes0rUP6UyTtD/Jvnw3NpMFKdu0nRI
7whY7Wv8nPRZR5JFgLf7Ucrp3LIXGrZ8QyxyDJsnYT9sPEGw28N551igz2fGoogG
MKs1KG9dey3tnQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:44:56 2026 by rpki-client