Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
File: 8oS7eVhYemBZneFztOhaDJSRoaQ.mft (raw, json)
Hash identifier: HzuTO1/kqQnZBi6OJ9mhG8ztEQdjt1AMgTxyCz6k1ps=
Subject key identifier: 39:AF:36:67:D4:EB:E9:15:BC:2E:6E:A6:A2:32:B2:A0:0E:3C:E2:04
Authority key identifier: F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
Certificate issuer: /CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Certificate serial: 019FA89990FDF36D4A73BDFA9B297443012E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:04 +0000
Manifest this update: Tue 28 Jul 2026 12:01:04 +0000
Manifest next update: Wed 29 Jul 2026 12:01:04 +0000
Files and hashes: 1: 8oS7eVhYemBZneFztOhaDJSRoaQ.crl (hash: iaDUe/WJreKO2dIzBpALwvdDgkOZjf71YBLT7qbLfns=)
2: IVY6iWcM0h4WNsuJ0C_dYZMPbEY.asa (hash: vJRxB/YA0VSs2+csKGJpplBLmMHFGaBIIWUMdGp+a7U=)
3: t3aKyQAZqp0JpNY9WkTBO5wmV88.roa (hash: 2JKrAMaSBOfAdSssyHnAfVhbKUiXcGPrBZgPHZSrc8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:90:fd:f3:6d:4a:73:bd:fa:9b:29:74:43:01:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Validity
Not Before: Jul 28 12:01:04 2026 GMT
Not After : Jul 29 12:01:04 2026 GMT
Subject: CN=39af3667d4ebe915bc2e6ea6a232b2a00e3ce204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:b0:3c:1d:23:89:fa:3c:98:85:02:ff:bb:
6e:73:ad:e5:d6:20:d1:88:10:e5:3d:57:9e:cf:cc:
10:e0:99:03:19:ce:1b:a4:30:57:d1:fe:a4:bd:28:
9c:96:ee:83:29:da:84:53:ea:bd:8f:3b:5e:6a:32:
87:0d:bf:71:a2:0d:6b:9d:d3:72:fe:2a:45:f8:1a:
71:70:ca:9a:e7:fd:61:98:39:d4:55:a7:fa:3f:42:
68:3f:2c:fb:4e:d6:82:70:cb:8e:7e:f3:4b:fc:65:
c7:3e:87:76:45:8b:03:ad:11:56:38:11:3c:80:5a:
54:f1:60:66:cc:a4:75:41:0d:9d:86:13:6f:3e:d6:
15:b4:2b:5a:59:97:80:a0:f4:0f:9e:78:3d:f4:e5:
49:05:be:6e:5c:c9:dd:70:48:67:b0:e6:8d:df:a1:
7e:c7:99:eb:da:fb:fd:e7:80:a6:c7:74:1e:71:1d:
e2:ab:1e:b1:4f:02:19:09:4e:d1:54:01:66:d6:a8:
a3:5a:92:90:62:d2:3b:d9:49:78:88:c1:99:77:85:
b0:9c:75:66:f6:06:61:b4:08:e9:d5:71:fe:64:b4:
33:47:b3:05:b4:2d:27:ae:82:b5:23:01:ea:42:dd:
9f:a4:4c:72:24:39:32:36:b9:0a:5d:06:e9:fc:ff:
3a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AF:36:67:D4:EB:E9:15:BC:2E:6E:A6:A2:32:B2:A0:0E:3C:E2:04
X509v3 Authority Key Identifier:
keyid:F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8b:92:a1:c0:06:09:8b:be:78:1a:04:c5:47:a9:fd:bf:6e:
50:68:c2:69:8d:e5:e4:d0:0c:3a:58:45:1c:6e:f0:6e:d5:30:
aa:e3:d8:b5:aa:79:df:fd:bd:4a:44:09:25:f3:a8:c5:20:b4:
e0:7b:68:c0:13:d7:96:31:46:d4:b5:ed:24:19:46:0d:6b:a3:
de:76:b5:6b:b2:17:14:72:b3:44:e6:fb:49:c3:d2:e1:55:68:
7f:c7:8d:3a:0f:81:b9:3b:2a:b2:5d:aa:0f:67:d7:73:ff:00:
e0:d9:55:a3:a6:8f:df:8c:33:66:f7:1d:fc:3b:71:9e:2d:9a:
af:e8:be:c9:9e:ae:b4:47:21:05:fb:46:cc:7a:c1:9a:16:93:
fc:0a:ac:4d:6d:d9:d5:0c:0d:6d:52:d6:72:a7:ce:bd:b6:3b:
0e:e8:04:ac:03:e8:79:7e:4e:a4:fa:07:73:93:94:3a:f3:af:
87:9f:cd:15:e5:da:53:3a:a5:c0:61:39:d8:66:ab:79:2a:1d:
a4:0d:53:2b:63:7b:14:df:76:a6:fc:94:09:f4:04:13:77:22:
17:85:00:68:5e:d6:bf:93:ac:1f:d5:53:85:8b:6b:a1:49:8b:
82:29:68:05:36:cd:7d:af:22:7c:5a:c5:d4:6c:ec:52:7e:e1:
1c:00:db:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omZD9821Kc736myl0QwEuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyODRiYjc5NTg1ODdhNjA1OTlkZTE3M2I0ZTg1YTBjOTQ5
MWExYTQwHhcNMjYwNzI4MTIwMTA0WhcNMjYwNzI5MTIwMTA0WjAzMTEwLwYDVQQD
EygzOWFmMzY2N2Q0ZWJlOTE1YmMyZTZlYTZhMjMyYjJhMDBlM2NlMjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NiwPB0jifo8mIUC/7tuc63l1iDR
iBDlPVeez8wQ4JkDGc4bpDBX0f6kvSiclu6DKdqEU+q9jzteajKHDb9xog1rndNy
/ipF+BpxcMqa5/1hmDnUVaf6P0JoPyz7TtaCcMuOfvNL/GXHPod2RYsDrRFWOBE8
gFpU8WBmzKR1QQ2dhhNvPtYVtCtaWZeAoPQPnng99OVJBb5uXMndcEhnsOaN36F+
x5nr2vv954Cmx3QecR3iqx6xTwIZCU7RVAFm1qijWpKQYtI72Ul4iMGZd4WwnHVm
9gZhtAjp1XH+ZLQzR7MFtC0nroK1IwHqQt2fpExyJDkyNrkKXQbp/P86DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmvNmfU6+kVvC5upqIysqAOPOIEMB8GA1UdIwQY
MBaAFPKEu3lYWHpgWZ3hc7ToWgyUkaGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG9TN2VWaFllbUJabmVGenRPaGFESlNSb2FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yMjhlMTYtZjgwOC00NDcxLWE5ODQt
MzY0ZWUyODU5ZjJjLzEvOG9TN2VWaFllbUJabmVGenRPaGFESlNSb2FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yMjhlMTYtZjgwOC00NDcxLWE5ODQtMzY0ZWUyODU5ZjJj
LzEvOG9TN2VWaFllbUJabmVGenRPaGFESlNSb2FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYuSocAG
CYu+eBoExUep/b9uUGjCaY3l5NAMOlhFHG7wbtUwquPYtap53/29SkQJJfOoxSC0
4HtowBPXljFG1LXtJBlGDWuj3na1a7IXFHKzROb7ScPS4VVof8eNOg+BuTsqsl2q
D2fXc/8A4NlVo6aP34wzZvcd/Dtxni2ar+i+yZ6utEchBftGzHrBmhaT/AqsTW3Z
1QwNbVLWcqfOvbY7DugErAPoeX5OpPoHc5OUOvOvh5/NFeXaUzqlwGE52GareSod
pA1TK2N7FN92pvyUCfQEE3ciF4UAaF7Wv5OsH9VThYtroUmLgiloBTbNfa8ifFrF
1GzsUn7hHADbAg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:43:22 2026 by rpki-client