Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: lcwVEwFIgj8rLxlbW6RktlXNbCOJzaHOfPgvCSwQUQo=
Subject key identifier: 54:04:9E:DF:D7:E6:1E:73:B2:2C:EE:8A:F1:CC:2A:DB:66:7E:8C:B5
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 019FAABEEF42DF90DE18A7CA4CE8A66D5812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 22:01:07 +0000
Manifest this update: Tue 28 Jul 2026 22:01:07 +0000
Manifest next update: Wed 29 Jul 2026 22:01:07 +0000
Files and hashes: 1: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: H2x2r0uDGGkyX/rl5iW9stk8wdA7pWq5Xaw2PpUWN+k=)
2: GYXVPChjE0NPSEdDhucM44Q05y0.roa (hash: Aj116UIxTV5UX+R+IJJ14L/FveXnD0nSIlVBqSjnPM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:ef:42:df:90:de:18:a7:ca:4c:e8:a6:6d:58:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Jul 28 22:01:07 2026 GMT
Not After : Jul 29 22:01:07 2026 GMT
Subject: CN=54049edfd7e61e73b22cee8af1cc2adb667e8cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:7a:50:f8:8a:91:64:05:f5:c4:2c:69:1b:
a3:13:f4:63:1f:ce:0f:18:06:73:9b:2c:85:7e:14:
24:c4:42:98:a4:2c:cf:5a:74:49:ca:d5:67:da:0b:
73:08:c4:1b:61:79:e5:75:16:d1:a9:8e:c1:9a:fc:
2d:68:5f:ed:0c:23:25:21:0f:84:72:9f:f7:b0:c3:
ba:38:48:a2:70:19:93:f6:ce:d7:88:84:fd:0e:77:
53:bd:cf:8c:af:1e:3d:07:2d:4f:ba:d5:63:36:d8:
cc:aa:09:96:aa:16:4b:4c:ee:64:57:f5:e2:74:50:
ba:c9:38:14:47:fc:c9:b5:e4:23:d8:70:70:2a:85:
6e:42:3f:a7:fe:4c:a0:02:73:ef:a4:b3:19:e0:5e:
ef:92:83:42:a0:4d:e0:5f:ef:d1:b9:65:0f:85:76:
87:a0:0e:9f:b6:32:b1:cf:77:c5:dd:c0:c8:a7:b9:
de:84:e9:46:78:cb:28:d0:0d:cc:c6:d9:13:f2:0f:
5f:34:d1:0f:17:4c:47:a1:3d:57:3d:ac:ba:08:8c:
94:1b:a6:0e:e3:44:cc:1f:bb:fa:79:8b:45:90:2d:
e3:53:ed:e7:fd:ae:62:d7:1a:d3:01:c4:5b:00:ab:
41:6a:70:8b:90:fc:be:86:ca:90:86:c0:ae:64:1f:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:04:9E:DF:D7:E6:1E:73:B2:2C:EE:8A:F1:CC:2A:DB:66:7E:8C:B5
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:aa:42:d8:a9:98:b1:bf:5c:99:18:c8:81:91:13:81:b7:31:
1c:93:2a:67:32:b4:ab:df:01:fc:8f:04:98:58:78:c3:e7:ff:
58:a9:6e:c4:d1:d0:9b:e8:06:9a:1f:e1:ea:2e:ed:68:f1:be:
33:25:b0:8e:e0:97:f7:03:0c:28:4c:26:3f:22:23:81:b3:56:
30:97:b3:87:51:15:a9:30:30:ab:a6:76:1c:6c:6a:3e:6c:5c:
33:48:cd:df:fb:41:d3:95:c0:00:c6:c2:3a:5d:e3:e9:88:1e:
2c:9f:c1:84:48:e6:8b:74:18:d1:75:b4:54:96:82:89:5e:3d:
80:16:44:9a:ba:a7:5d:b9:07:17:1e:87:16:24:00:1a:42:40:
3f:dc:58:cc:23:8e:1e:96:b3:6d:c3:91:4d:56:ca:0f:ec:f6:
85:cc:6a:99:cf:de:43:8b:95:bb:d8:c9:b2:ad:01:bd:63:58:
7f:20:82:f1:f9:18:31:9c:75:37:e0:8e:25:03:12:66:eb:00:
17:21:bb:72:cc:6c:62:2b:25:eb:cd:9a:23:40:b3:f7:95:92:
25:51:06:07:cf:bc:5e:f3:f9:99:2c:56:ce:0e:ba:e0:26:5f:
80:3e:3a:0d:3e:d9:7c:4f:db:97:51:f0:a6:18:6f:7f:26:4f:
66:6b:3b:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvu9C35DeGKfKTOimbVgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZmIwZDBiZTI5NmRjMWI3MTlkMjQ0MGZiNmFkOWM3NWQw
OGUyZTIwHhcNMjYwNzI4MjIwMTA3WhcNMjYwNzI5MjIwMTA3WjAzMTEwLwYDVQQD
Eyg1NDA0OWVkZmQ3ZTYxZTczYjIyY2VlOGFmMWNjMmFkYjY2N2U4Y2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmV6UPiKkWQF9cQsaRujE/RjH84P
GAZzmyyFfhQkxEKYpCzPWnRJytVn2gtzCMQbYXnldRbRqY7BmvwtaF/tDCMlIQ+E
cp/3sMO6OEiicBmT9s7XiIT9DndTvc+Mrx49By1PutVjNtjMqgmWqhZLTO5kV/Xi
dFC6yTgUR/zJteQj2HBwKoVuQj+n/kygAnPvpLMZ4F7vkoNCoE3gX+/RuWUPhXaH
oA6ftjKxz3fF3cDIp7nehOlGeMso0A3MxtkT8g9fNNEPF0xHoT1XPay6CIyUG6YO
40TMH7v6eYtFkC3jU+3n/a5i1xrTAcRbAKtBanCLkPy+hsqQhsCuZB9hIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQEnt/X5h5zsizuivHMKttmfoy1MB8GA1UdIwQY
MBaAFPD7DQviltwbcZ0kQPtq2cddCOLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEt
YzBlMjc4NzM2Yzg4LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEtYzBlMjc4NzM2Yzg4
LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6pC2KmY
sb9cmRjIgZETgbcxHJMqZzK0q98B/I8EmFh4w+f/WKluxNHQm+gGmh/h6i7taPG+
MyWwjuCX9wMMKEwmPyIjgbNWMJezh1EVqTAwq6Z2HGxqPmxcM0jN3/tB05XAAMbC
Ol3j6YgeLJ/BhEjmi3QY0XW0VJaCiV49gBZEmrqnXbkHFx6HFiQAGkJAP9xYzCOO
HpazbcORTVbKD+z2hcxqmc/eQ4uVu9jJsq0BvWNYfyCC8fkYMZx1N+COJQMSZusA
FyG7csxsYisl682aI0Cz95WSJVEGB8+8XvP5mSxWzg664CZfgD46DT7ZfE/bl1Hw
phhvfyZPZms7mw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:57:58 2026 by rpki-client