Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: 15rM00YAqsP0q6AEm9UeXSTSpqVlG5N/FVdwn+zP7Ys=
Subject key identifier: BE:53:1C:D6:79:D2:C6:6C:42:68:D8:FF:98:D0:BA:FD:6D:3C:98:27
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 019FA9ABB75D9E8B0A6B317B2DF945333F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 17:00:30 +0000
Manifest this update: Tue 28 Jul 2026 17:00:30 +0000
Manifest next update: Wed 29 Jul 2026 17:00:30 +0000
Files and hashes: 1: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: 7Fzf9Tmevy85cCiS86QYb6AM0wdyFE/+Fq6wakRsrrU=)
2: jCsyE7PeO8MwI0WSmbdCicVhzBc.roa (hash: tv7EyDQ+IoB8bLb4GNx3/nwZP+BAJaSjfG7GlSBQTM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:b7:5d:9e:8b:0a:6b:31:7b:2d:f9:45:33:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Jul 28 17:00:30 2026 GMT
Not After : Jul 29 17:00:30 2026 GMT
Subject: CN=be531cd679d2c66c4268d8ff98d0bafd6d3c9827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:f4:3f:11:78:40:f3:a1:8a:9a:ed:11:ea:
ac:1b:36:ec:3f:72:cf:28:61:2e:b5:fb:4f:0d:32:
df:8b:67:5b:98:59:2d:5c:1d:79:df:2e:fe:49:cd:
fb:17:07:22:f2:4a:66:38:18:26:0a:43:71:12:7b:
4f:a6:5f:da:3a:7e:69:a8:e7:d7:62:0d:ef:ff:96:
cf:ac:9b:2b:77:19:fb:bd:54:b5:14:19:b6:09:f2:
c8:f1:64:41:93:e9:15:cb:ac:c0:ba:fb:44:dc:9c:
68:92:cc:64:c4:57:fa:56:f1:6b:65:99:6c:fa:d0:
06:6b:52:23:da:26:a6:1d:05:b3:8b:ec:9f:03:f1:
4f:ad:66:37:6d:27:da:4d:b7:c4:c9:44:b6:8d:93:
7f:09:c6:ed:90:a3:2e:30:a0:27:20:74:7d:a8:4f:
77:99:b0:6c:09:f1:63:74:8d:0c:9a:95:0e:14:3f:
19:5c:af:aa:e3:85:f0:37:17:85:e5:07:59:8d:07:
18:56:9e:5b:43:2b:5b:45:f8:34:a1:ff:99:5b:3e:
bc:11:b6:94:ab:64:94:3b:ea:9e:bc:2a:66:0d:b3:
eb:46:aa:72:5a:c7:87:8a:8b:6a:e5:34:1d:d4:76:
ef:f3:2b:48:d8:75:5c:b1:d6:ad:3e:f8:b9:db:d5:
b6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:53:1C:D6:79:D2:C6:6C:42:68:D8:FF:98:D0:BA:FD:6D:3C:98:27
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ca:3e:05:5a:ca:34:45:e0:31:62:eb:a2:0e:49:8d:df:9f:
09:46:3e:5d:55:84:f2:f1:98:e9:32:d3:8c:cd:97:1b:ac:94:
8c:9a:72:34:cc:99:51:78:9e:4a:f3:0a:95:f2:61:a5:6c:40:
07:90:32:d0:ec:fa:ff:eb:c6:ce:61:32:0f:6c:8f:3f:ed:21:
01:ff:43:84:cf:da:db:fc:50:c4:83:b8:2f:e9:4e:14:f8:e8:
c6:2a:09:7e:6f:d0:85:c9:f5:a7:06:67:ce:36:ca:dc:f1:5d:
a8:7a:2b:4b:72:1e:61:8f:e2:1d:9c:ea:89:03:3a:ad:cb:40:
68:57:07:ed:bc:51:12:30:21:15:78:8b:ca:f2:e8:87:b4:bb:
c8:57:ec:da:c7:97:b0:80:e2:cd:aa:2e:d9:29:b7:07:4d:21:
26:46:45:b5:93:b4:41:09:0b:24:bb:d1:60:8c:bd:ed:d6:77:
33:08:77:4f:e2:46:db:ba:78:71:a1:ba:46:39:61:4d:2a:ba:
53:40:f3:09:9d:41:05:91:7c:96:05:00:12:26:9e:0e:4e:fa:
35:ab:7a:c5:23:c5:7f:c8:7a:e1:bd:8c:98:7d:34:83:56:7f:
eb:17:77:48:57:18:65:a6:fa:00:64:c7:94:ae:14:01:8e:7e:
78:b3:3b:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq7ddnosKazF7LflFMz8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYzIwYmU2MTY3ODkwMjQ3MzAzMjE0MTk3NjU4Y2E3Yzk2
NzYxNTAwHhcNMjYwNzI4MTcwMDMwWhcNMjYwNzI5MTcwMDMwWjAzMTEwLwYDVQQD
EyhiZTUzMWNkNjc5ZDJjNjZjNDI2OGQ4ZmY5OGQwYmFmZDZkM2M5ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMj0PxF4QPOhiprtEeqsGzbsP3LP
KGEutftPDTLfi2dbmFktXB153y7+Sc37Fwci8kpmOBgmCkNxEntPpl/aOn5pqOfX
Yg3v/5bPrJsrdxn7vVS1FBm2CfLI8WRBk+kVy6zAuvtE3JxoksxkxFf6VvFrZZls
+tAGa1Ij2iamHQWzi+yfA/FPrWY3bSfaTbfEyUS2jZN/CcbtkKMuMKAnIHR9qE93
mbBsCfFjdI0MmpUOFD8ZXK+q44XwNxeF5QdZjQcYVp5bQytbRfg0of+ZWz68EbaU
q2SUO+qevCpmDbPrRqpyWseHiotq5TQd1Hbv8ytI2HVcsdatPvi529W2JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5THNZ50sZsQmjY/5jQuv1tPJgnMB8GA1UdIwQY
MBaAFC/CC+YWeJAkcwMhQZdljKfJZ2FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYt
MjQ0OWEzZWM5MjNlLzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYtMjQ0OWEzZWM5MjNl
LzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgso+BVrK
NEXgMWLrog5Jjd+fCUY+XVWE8vGY6TLTjM2XG6yUjJpyNMyZUXieSvMKlfJhpWxA
B5Ay0Oz6/+vGzmEyD2yPP+0hAf9DhM/a2/xQxIO4L+lOFPjoxioJfm/Qhcn1pwZn
zjbK3PFdqHorS3IeYY/iHZzqiQM6rctAaFcH7bxREjAhFXiLyvLoh7S7yFfs2seX
sIDizaou2Sm3B00hJkZFtZO0QQkLJLvRYIy97dZ3Mwh3T+JG27p4caG6RjlhTSq6
U0DzCZ1BBZF8lgUAEiaeDk76Nat6xSPFf8h64b2MmH00g1Z/6xd3SFcYZab6AGTH
lK4UAY5+eLM74g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:24 2026 by rpki-client