
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: OCwOQMwGwEmZWPbQCO2QiqYwHEE9fI2DTe9G95TxopM=
Subject key identifier: 4C:48:1B:86:FD:B4:E9:E3:9E:F8:27:3D:65:AC:37:8B:2C:09:95:FB
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 019FAC08DEE2F107A86EA66592A1FA4EF784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 05CA
Signing time: Wed 29 Jul 2026 04:01:30 +0000
Manifest this update: Wed 29 Jul 2026 04:01:30 +0000
Manifest next update: Thu 30 Jul 2026 04:01:30 +0000
Files and hashes: 1: 26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa (hash: i3y/4e612Y8TxwRcGfb+jB6bsawJZiJXB+VOVsYv97E=)
2: 6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa (hash: wloeetK1rz73W5ni+d8ZKgGnFA6OBAZGbgtH0vyx3gM=)
3: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: wRjq+tnwPOx0sDSw7yYfWOKVb9MriW4Xa9xJE4O8lG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:de:e2:f1:07:a8:6e:a6:65:92:a1:fa:4e:f7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Jul 29 04:01:30 2026 GMT
Not After : Jul 30 04:01:30 2026 GMT
Subject: CN=4c481b86fdb4e9e39ef8273d65ac378b2c0995fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:ba:af:3f:e7:9d:3e:b9:1d:d7:52:ce:31:
d9:f6:de:70:08:5e:f8:cb:fb:fb:10:06:da:d9:b6:
66:0d:c6:a3:5e:b3:92:1c:69:5e:fe:0c:2c:97:08:
38:c7:f1:f1:b3:3c:d0:03:cf:9f:2f:44:5e:11:ed:
e5:5e:38:1a:5a:d7:d5:9d:33:40:aa:04:9c:d1:aa:
9d:18:54:8c:cb:a7:dd:7a:53:57:d2:05:9a:0d:22:
74:bd:ee:4e:da:cd:e7:3e:e4:d1:ee:f2:19:10:5d:
aa:c5:43:6c:e6:7f:e7:54:db:e7:86:68:c6:9c:46:
d2:d5:c2:25:23:74:44:35:84:4c:ed:28:50:e1:87:
e3:15:85:43:b4:36:5f:aa:97:45:f2:77:1f:ec:57:
1e:b4:71:7b:0c:89:c1:90:5e:f7:82:d9:a8:64:36:
78:a4:eb:6f:66:fd:60:22:56:b5:63:64:d7:45:4f:
2c:66:47:6c:68:56:d5:67:97:e3:a3:5c:b7:37:ac:
75:ee:67:0e:f3:d4:e4:39:0d:ab:f9:46:35:da:09:
3c:f6:1e:a7:17:c2:c5:ce:51:04:4f:22:86:2b:32:
78:a0:f5:8f:a3:16:b7:64:3d:72:79:d8:c8:63:b2:
05:5b:20:0b:16:4c:00:d9:ac:86:d4:1e:f7:35:22:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:48:1B:86:FD:B4:E9:E3:9E:F8:27:3D:65:AC:37:8B:2C:09:95:FB
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a9:91:d1:80:31:9a:e1:97:9c:2f:3a:d1:30:5e:29:04:6c:
1c:69:06:dc:b1:e6:0c:23:31:1f:b5:fe:5e:33:61:6d:3b:a9:
a3:6f:79:b9:08:7d:30:5a:41:f8:0d:cb:59:7b:2f:00:27:2f:
e3:6f:77:a8:b2:88:7a:e2:5f:1e:72:ea:fc:e6:b3:ec:68:19:
f7:5f:51:09:89:d3:b4:46:9e:4e:79:73:a5:2b:b9:31:ee:f2:
8e:4b:4c:b6:d5:29:cf:c9:87:a9:3f:ca:ac:00:73:05:4b:94:
9d:b5:0b:11:64:e9:81:cc:71:0d:26:ce:75:35:7e:35:42:ff:
24:a2:6e:7c:27:79:8b:df:f4:ad:6f:26:f9:ba:6f:08:41:5f:
29:13:1a:bf:cb:69:6e:16:69:31:fe:4e:9a:9e:c7:77:51:f5:
ac:fe:75:74:c5:07:30:07:cc:60:b5:7e:6a:91:8b:f9:35:44:
2b:5f:59:ab:4f:52:13:b5:de:55:30:70:da:46:d3:df:5b:b6:
d4:a5:2e:ca:4e:58:29:b7:e1:de:f8:46:f6:79:63:dd:18:8f:
94:c0:44:d0:5b:0b:72:9f:0e:e2:7e:10:5c:e5:cc:33:9b:d8:
0b:89:46:88:9c:6c:f7:f9:7a:ce:b3:a6:0d:f7:48:6d:88:4c:
52:b8:f1:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCN7i8QeobqZlkqH6TveEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjExZDJlY2Q2MDkyNGVmMjI3NmY4NjkzOWIwNzBjMDA4
MTU3NGIwHhcNMjYwNzI5MDQwMTMwWhcNMjYwNzMwMDQwMTMwWjAzMTEwLwYDVQQD
Eyg0YzQ4MWI4NmZkYjRlOWUzOWVmODI3M2Q2NWFjMzc4YjJjMDk5NWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mu6rz/nnT65HddSzjHZ9t5wCF74
y/v7EAba2bZmDcajXrOSHGle/gwslwg4x/HxszzQA8+fL0ReEe3lXjgaWtfVnTNA
qgSc0aqdGFSMy6fdelNX0gWaDSJ0ve5O2s3nPuTR7vIZEF2qxUNs5n/nVNvnhmjG
nEbS1cIlI3RENYRM7ShQ4YfjFYVDtDZfqpdF8ncf7FcetHF7DInBkF73gtmoZDZ4
pOtvZv1gIla1Y2TXRU8sZkdsaFbVZ5fjo1y3N6x17mcO89TkOQ2r+UY12gk89h6n
F8LFzlEETyKGKzJ4oPWPoxa3ZD1yedjIY7IFWyALFkwA2ayG1B73NSK8iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExIG4b9tOnjnvgnPWWsN4ssCZX7MB8GA1UdIwQY
MBaAFPMhHS7NYJJO8idvhpObBwwAgVdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlFZExzMWdrazd5SjItR2s1c0hEQUNCVjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wMzQ5NjAtOWZlMy00Zjc0LWI5Y2Qt
YzVjZjA4ZWVkYjljLzEvOHlFZExzMWdrazd5SjItR2s1c0hEQUNCVjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8wMzQ5NjAtOWZlMy00Zjc0LWI5Y2QtYzVjZjA4ZWVkYjlj
LzEvOHlFZExzMWdrazd5SjItR2s1c0hEQUNCVjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKmR0YAx
muGXnC860TBeKQRsHGkG3LHmDCMxH7X+XjNhbTupo295uQh9MFpB+A3LWXsvACcv
4293qLKIeuJfHnLq/Oaz7GgZ919RCYnTtEaeTnlzpSu5Me7yjktMttUpz8mHqT/K
rABzBUuUnbULEWTpgcxxDSbOdTV+NUL/JKJufCd5i9/0rW8m+bpvCEFfKRMav8tp
bhZpMf5Omp7Hd1H1rP51dMUHMAfMYLV+apGL+TVEK19Zq09SE7XeVTBw2kbT31u2
1KUuyk5YKbfh3vhG9nlj3RiPlMBE0FsLcp8O4n4QXOXMM5vYC4lGiJxs9/l6zrOm
DfdIbYhMUrjxkw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:51:40 2026 by rpki-client