Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: 7sitnjHMyGI86cCuSfFkMRho1+wxWp0RM0eqNca2eio=
Subject key identifier: 2D:1F:16:CC:9A:D2:47:A2:98:6E:A1:B6:10:64:77:10:7C:20:06:7B
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 019FA8D0594CAA695CF415AB63C2776C135E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 08BC
Signing time: Tue 28 Jul 2026 13:00:54 +0000
Manifest this update: Tue 28 Jul 2026 13:00:54 +0000
Manifest next update: Wed 29 Jul 2026 13:00:54 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: OT3GTgi0PZAotQ5V/etzlX2gjf6UhIWea7w8tZnqkbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:59:4c:aa:69:5c:f4:15:ab:63:c2:77:6c:13:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: Jul 28 13:00:54 2026 GMT
Not After : Jul 29 13:00:54 2026 GMT
Subject: CN=2d1f16cc9ad247a2986ea1b6106477107c20067b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:cb:5d:4d:ed:e0:66:92:f1:08:0e:00:68:
e8:f2:cc:0a:a9:ed:08:3e:01:1c:54:69:e7:df:6e:
5a:37:61:e7:03:3d:74:c1:f4:28:47:ef:ae:f6:fd:
64:62:eb:8c:61:24:e1:06:78:9e:59:81:67:52:86:
73:d4:23:f3:21:a3:3f:b6:d7:8c:2f:05:d3:42:5a:
37:e6:88:b0:db:36:13:7d:5a:82:8a:75:55:36:c6:
04:7b:00:03:cc:7c:77:07:3e:1f:00:c6:4c:40:ac:
aa:79:a8:a5:f4:30:4b:a5:3a:7c:d3:96:31:84:df:
a5:87:06:4e:8a:46:40:b5:d2:3e:9b:b4:f1:20:5d:
7d:35:7b:87:24:58:ff:60:fe:7c:ef:8a:82:3e:c3:
0d:78:46:41:26:1e:8e:ca:85:05:22:93:c8:46:cc:
dc:c2:58:d4:ab:bf:62:ea:29:9c:85:95:05:c9:74:
d9:db:9c:2d:fe:c7:4c:1c:28:a9:57:52:3d:fd:69:
d1:ac:a4:4f:10:f9:8d:f2:06:0a:f7:80:a5:ad:ec:
bf:3e:bb:13:f7:3f:01:1c:0d:74:c0:9f:dd:22:58:
ad:8d:11:df:dc:96:d2:f9:c8:99:8f:5d:24:f5:70:
4f:78:9d:77:82:18:72:c6:20:78:2a:fd:c8:5a:c8:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1F:16:CC:9A:D2:47:A2:98:6E:A1:B6:10:64:77:10:7C:20:06:7B
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bf:91:f3:54:e6:1e:a2:85:a3:30:59:50:94:1b:c0:88:b5:
15:3c:66:a8:a3:66:81:37:af:4e:4b:44:c6:fe:bd:e7:e0:4a:
c6:14:fc:f6:71:2d:ef:7f:f1:7f:8f:90:7e:b5:57:ce:21:cd:
89:e9:f1:b8:17:46:9e:29:a6:b1:eb:f1:96:88:e9:97:b7:e0:
2c:6c:f0:2a:f9:e4:97:56:c2:19:e7:8b:f0:93:5b:b5:7a:ad:
b6:37:60:8f:38:f4:fb:00:74:4d:5e:af:d9:8f:14:72:8f:44:
78:97:ee:fb:79:7d:57:9b:1c:2f:44:0f:1a:7d:8c:8b:5d:61:
40:64:2b:b4:a9:db:a1:33:b1:13:de:4c:22:f9:80:f6:64:1f:
a9:d4:95:82:25:06:f1:6b:81:52:0a:c6:9c:51:e7:d7:fd:fc:
ac:ec:9d:3b:63:4f:29:6a:1d:42:a4:4d:e4:8c:2f:a8:b1:f6:
90:f0:92:21:c4:1d:d7:44:4d:dc:9b:61:66:17:dd:e9:a8:4e:
39:b7:9f:3e:87:8d:ec:da:06:67:7d:27:5b:7e:c5:02:ff:bd:
a9:8e:15:ec:fa:b9:00:b5:27:33:ea:03:ab:d5:73:e2:71:77:
1c:76:5b:a0:de:4c:f1:ae:2b:46:4c:b1:77:34:70:3f:02:e2:
2b:2b:94:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0FlMqmlc9BWrY8J3bBNeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2YxZjMzNWM3ZDA0YjM2MDhmZDE5MTRhOWMwNTNiMDRh
N2ZjYjkwHhcNMjYwNzI4MTMwMDU0WhcNMjYwNzI5MTMwMDU0WjAzMTEwLwYDVQQD
EygyZDFmMTZjYzlhZDI0N2EyOTg2ZWExYjYxMDY0NzcxMDdjMjAwNjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8zLXU3t4GaS8QgOAGjo8swKqe0I
PgEcVGnn325aN2HnAz10wfQoR++u9v1kYuuMYSThBnieWYFnUoZz1CPzIaM/tteM
LwXTQlo35oiw2zYTfVqCinVVNsYEewADzHx3Bz4fAMZMQKyqeail9DBLpTp805Yx
hN+lhwZOikZAtdI+m7TxIF19NXuHJFj/YP5874qCPsMNeEZBJh6OyoUFIpPIRszc
wljUq79i6imchZUFyXTZ25wt/sdMHCipV1I9/WnRrKRPEPmN8gYK94Clrey/PrsT
9z8BHA10wJ/dIlitjRHf3JbS+ciZj10k9XBPeJ13ghhyxiB4Kv3IWsjgJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0fFsya0keimG6hthBkdxB8IAZ7MB8GA1UdIwQY
MBaAFPA/HzNcfQSzYI/RkUqcBTsEp/y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYt
MzM4YTA3ZThlYmQ2LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYtMzM4YTA3ZThlYmQ2
LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAub+R81Tm
HqKFozBZUJQbwIi1FTxmqKNmgTevTktExv695+BKxhT89nEt73/xf4+QfrVXziHN
ienxuBdGnimmsevxlojpl7fgLGzwKvnkl1bCGeeL8JNbtXqttjdgjzj0+wB0TV6v
2Y8Uco9EeJfu+3l9V5scL0QPGn2Mi11hQGQrtKnboTOxE95MIvmA9mQfqdSVgiUG
8WuBUgrGnFHn1/38rOydO2NPKWodQqRN5IwvqLH2kPCSIcQd10RN3JthZhfd6ahO
ObefPoeN7NoGZ30nW37FAv+9qY4V7Pq5ALUnM+oDq9Vz4nF3HHZboN5M8a4rRkyx
dzRwPwLiKyuUiQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:52 2026 by rpki-client