Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: +rDDWWU19wXVNG4YNwdTjXEbrz/vgDuo/3zkMertbHw=
Subject key identifier: 9D:F8:A6:A4:73:B8:2C:89:0E:30:FD:BA:53:93:10:B8:75:5C:9A:DC
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 019FA93E36F92667B5804A9BB263467476F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 105F
Signing time: Tue 28 Jul 2026 15:00:54 +0000
Manifest this update: Tue 28 Jul 2026 15:00:54 +0000
Manifest next update: Wed 29 Jul 2026 15:00:54 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: TWsYN8WpSlvyBKQheGgAEjfl4EXKGICNA5Xd3SpfJAY=)
2: ofgcBJL5IkucI_t2Tbw87DuVUlg.roa (hash: 0n3F9loIDoRxXepxc9dufIeLMM9JHYgsIDsHjtK3JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:36:f9:26:67:b5:80:4a:9b:b2:63:46:74:76:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Jul 28 15:00:54 2026 GMT
Not After : Jul 29 15:00:54 2026 GMT
Subject: CN=9df8a6a473b82c890e30fdba539310b8755c9adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:50:2a:08:2a:70:b3:3d:e5:a1:e9:d4:9f:
d4:04:38:a8:71:a7:fb:81:d9:a1:2f:80:e0:55:af:
8d:c6:94:d8:0d:07:c7:b4:26:e0:d4:c8:be:1c:4c:
98:e3:58:0c:e8:2f:12:e1:28:94:bf:2c:8a:52:c1:
b1:14:8c:6d:fa:e6:e8:0a:ed:e9:51:9f:ec:d7:0f:
27:63:56:8c:df:9b:15:08:83:d6:49:e0:2e:16:62:
81:e8:52:43:48:af:58:95:91:af:3a:ff:3f:31:63:
7a:9c:55:e2:46:42:a6:e5:1d:25:66:f2:6e:fd:07:
2a:97:2e:61:40:75:d4:d6:c6:96:db:db:49:9c:98:
ec:c7:05:2b:28:62:68:2b:a3:f4:e5:8c:a4:79:dd:
e9:2e:1d:38:a1:9b:85:7b:02:b4:30:d7:d0:5c:f6:
4d:78:0e:fc:95:6d:6b:a6:0c:57:ee:d3:ce:6c:d0:
1d:be:f8:f9:1b:49:b1:14:8f:63:75:80:b3:c8:db:
ec:04:9e:e1:00:fc:4d:51:b4:2c:16:36:b7:7a:10:
f2:20:95:93:cd:ba:a2:64:37:6d:0a:24:00:4d:54:
41:e5:85:ed:01:e5:cd:a7:de:c3:27:25:83:9b:fa:
4c:e9:de:4e:4b:e0:4f:7a:40:6a:68:15:c6:f9:e7:
72:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F8:A6:A4:73:B8:2C:89:0E:30:FD:BA:53:93:10:B8:75:5C:9A:DC
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e7:6c:53:fe:14:43:da:9e:0e:37:a9:65:01:0e:25:aa:53:
db:db:57:ad:05:b2:ee:75:8d:f3:1d:3b:92:ef:1f:db:a9:cb:
76:ab:e0:e3:ee:49:43:a5:7e:fb:0b:a8:a5:a9:e1:a8:81:58:
55:70:49:22:3a:95:a3:e6:46:3b:87:a9:f3:19:4a:5b:05:9a:
d5:ef:63:92:0a:9b:95:3a:4e:0c:98:57:5b:45:77:54:98:c1:
1f:6e:30:78:5e:85:bc:7a:0c:19:ce:c0:05:64:b6:ee:f3:20:
92:3b:db:ee:18:ea:7d:0d:d3:c5:db:8e:d5:fd:f7:3a:6b:ed:
ea:b2:ee:aa:03:85:42:7c:7a:0d:9e:29:ff:6f:b3:20:60:d3:
65:9f:4d:fb:a7:c3:e9:41:2a:9b:22:8c:b6:c1:33:b9:51:e3:
41:27:0d:4e:ab:7f:f2:36:56:52:3b:ae:79:94:82:75:74:d1:
36:7c:bb:0e:4f:5e:7d:7a:e5:5e:62:f3:ba:b5:44:10:d9:83:
59:65:98:70:a3:a3:c5:c1:3b:bd:85:76:44:ee:5b:e5:66:1f:
12:e3:f8:c4:3f:de:77:b9:e2:ae:d3:38:70:b8:b6:0d:f4:24:
6f:76:8b:67:26:15:b2:aa:36:b2:81:36:3a:7f:7a:5a:73:a0:
1d:c7:69:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPjb5Jme1gEqbsmNGdHb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZWYxMjkwY2YzOGI0ZjZlMDE4M2U3ZTRiZjg3YWM2N2Ex
MmQ3YWIwHhcNMjYwNzI4MTUwMDU0WhcNMjYwNzI5MTUwMDU0WjAzMTEwLwYDVQQD
Eyg5ZGY4YTZhNDczYjgyYzg5MGUzMGZkYmE1MzkzMTBiODc1NWM5YWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZpQKggqcLM95aHp1J/UBDiocaf7
gdmhL4DgVa+NxpTYDQfHtCbg1Mi+HEyY41gM6C8S4SiUvyyKUsGxFIxt+uboCu3p
UZ/s1w8nY1aM35sVCIPWSeAuFmKB6FJDSK9YlZGvOv8/MWN6nFXiRkKm5R0lZvJu
/Qcqly5hQHXU1saW29tJnJjsxwUrKGJoK6P05Yyked3pLh04oZuFewK0MNfQXPZN
eA78lW1rpgxX7tPObNAdvvj5G0mxFI9jdYCzyNvsBJ7hAPxNUbQsFja3ehDyIJWT
zbqiZDdtCiQATVRB5YXtAeXNp97DJyWDm/pM6d5OS+BPekBqaBXG+edyeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ34pqRzuCyJDjD9ulOTELh1XJrcMB8GA1UdIwQY
MBaAFNjvEpDPOLT24Bg+fkv4esZ6EterMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMzA4ZjUtMjdlMy00Yzk0LWE0NmIt
NDhlNmYyNjBmYmE1LzEvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zMzA4ZjUtMjdlMy00Yzk0LWE0NmItNDhlNmYyNjBmYmE1
LzEvMk84U2tNODR0UGJnR0Q1LVNfaDZ4bm9TMTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+dsU/4U
Q9qeDjepZQEOJapT29tXrQWy7nWN8x07ku8f26nLdqvg4+5JQ6V++wuopanhqIFY
VXBJIjqVo+ZGO4ep8xlKWwWa1e9jkgqblTpODJhXW0V3VJjBH24weF6FvHoMGc7A
BWS27vMgkjvb7hjqfQ3TxduO1f33Omvt6rLuqgOFQnx6DZ4p/2+zIGDTZZ9N+6fD
6UEqmyKMtsEzuVHjQScNTqt/8jZWUjuueZSCdXTRNny7Dk9efXrlXmLzurVEENmD
WWWYcKOjxcE7vYV2RO5b5WYfEuP4xD/ed7nirtM4cLi2DfQkb3aLZyYVsqo2soE2
On96WnOgHcdpkQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:45 2026 by rpki-client