Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: YBaUbdGLta3m+/VhOBfTGYz25blT6U9RPhZxKf2rS50=
Subject key identifier: DC:06:B4:0D:37:05:BC:CE:15:3D:73:74:86:18:87:B0:A0:74:FE:66
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 019EBE1090B2594688846EE1FC9C1702F12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0FB5
Signing time: Fri 12 Jun 2026 23:00:17 +0000
Manifest this update: Fri 12 Jun 2026 23:00:17 +0000
Manifest next update: Sat 13 Jun 2026 23:00:17 +0000
Files and hashes: 1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: xwKA2OpIdJLy8i4QPXo6dxvaXB9wTDFVVnMdOBQYHxo=)
2: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (hash: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A=)
3: LwxlxO59sLpFilR69YBzUan2hpk.roa (hash: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:90:b2:59:46:88:84:6e:e1:fc:9c:17:02:f1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Jun 12 23:00:17 2026 GMT
Not After : Jun 13 23:00:17 2026 GMT
Subject: CN=dc06b40d3705bcce153d7374861887b0a074fe66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:bc:89:f2:4f:63:cb:47:ec:3b:50:cc:c4:
3f:32:62:d8:1c:56:46:6d:24:62:8d:bc:3b:98:0f:
f0:1a:e6:88:25:1a:ca:03:1c:fb:e2:e0:43:35:07:
a0:2f:4b:89:41:05:9e:52:d6:1f:34:cd:ae:9a:7e:
26:ab:cf:7d:6d:f7:82:c1:02:d8:9c:05:80:98:c3:
a8:38:d6:28:84:08:90:80:c6:89:cb:f3:cc:d8:6a:
fc:b6:3d:9e:16:4d:f8:c8:f9:31:c3:c3:12:65:81:
be:0c:d5:ab:f5:0a:90:74:e8:0c:19:80:3f:8c:c1:
e8:d3:1b:4d:26:d7:36:64:33:2e:a3:f0:ca:71:09:
23:7b:fd:15:2e:0b:fa:32:e5:da:61:4a:fe:ee:b7:
73:f9:a3:53:ee:ec:0c:a0:8a:be:7d:ae:cd:1c:19:
6f:9d:18:56:38:29:04:db:1d:7c:0a:d4:b0:9e:c4:
02:0a:d2:b7:7a:05:72:8b:c0:89:d8:ea:b6:ec:52:
2c:54:0b:b7:9b:3c:45:bb:f0:f5:ba:cf:24:9b:26:
41:2f:d9:1f:f1:ae:df:c1:8f:ba:71:66:45:f7:fb:
fc:98:7d:a0:82:15:72:08:71:78:a5:04:8e:72:10:
51:a5:ce:25:dd:30:c2:4b:06:56:58:43:1e:d3:91:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:06:B4:0D:37:05:BC:CE:15:3D:73:74:86:18:87:B0:A0:74:FE:66
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:87:87:60:cd:e1:d5:cd:1d:f0:5f:8e:ee:97:97:8f:b5:87:
69:af:35:d0:27:11:49:5e:c1:38:bc:2f:32:36:14:f3:79:09:
d3:e6:8b:92:36:e4:67:54:f1:91:ca:a0:58:d4:44:84:3e:b1:
9f:5a:88:3d:d9:5e:99:82:e6:30:ee:1a:e3:fc:e1:31:fa:e1:
ba:e2:c1:63:25:94:0f:d6:8f:5b:55:a8:47:f9:e1:ee:3c:fb:
a3:9c:61:d3:05:cc:d9:82:5b:c0:ca:8e:0c:dd:a8:d7:76:c7:
02:10:10:ef:61:b7:98:30:e3:57:7a:96:8e:49:d8:c0:3d:8f:
b0:6c:60:44:34:c6:0e:df:3b:7e:a5:2d:b8:0a:4e:92:61:1b:
c7:33:a4:22:47:27:8d:1c:38:55:4a:38:8a:ce:1b:fc:4a:07:
69:3f:e5:ce:ae:66:62:0c:72:3e:c1:1e:1d:80:ca:49:fe:3b:
a7:07:87:af:c8:37:9b:a7:ec:ba:ef:f8:3b:d1:bf:e0:a8:01:
b0:f5:48:94:fa:2a:7b:c8:ff:c2:22:26:67:f8:19:68:84:78:
12:ad:5e:c0:48:d7:26:2c:21:ca:bd:16:32:4e:04:69:d6:0b:
13:a1:ab:6b:4a:45:17:b4:87:6e:c4:dc:41:fb:fa:ca:d5:5e:
68:82:b2:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+EJCyWUaIhG7h/JwXAvEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2M5M2RkYjFhMTcxNTFjNTZmMjJkY2FmMzFkZDgyMjk0
NjM3NDIwHhcNMjYwNjEyMjMwMDE3WhcNMjYwNjEzMjMwMDE3WjAzMTEwLwYDVQQD
EyhkYzA2YjQwZDM3MDViY2NlMTUzZDczNzQ4NjE4ODdiMGEwNzRmZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqm8ifJPY8tH7DtQzMQ/MmLYHFZG
bSRijbw7mA/wGuaIJRrKAxz74uBDNQegL0uJQQWeUtYfNM2umn4mq899bfeCwQLY
nAWAmMOoONYohAiQgMaJy/PM2Gr8tj2eFk34yPkxw8MSZYG+DNWr9QqQdOgMGYA/
jMHo0xtNJtc2ZDMuo/DKcQkje/0VLgv6MuXaYUr+7rdz+aNT7uwMoIq+fa7NHBlv
nRhWOCkE2x18CtSwnsQCCtK3egVyi8CJ2Oq27FIsVAu3mzxFu/D1us8kmyZBL9kf
8a7fwY+6cWZF9/v8mH2gghVyCHF4pQSOchBRpc4l3TDCSwZWWEMe05GDtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwGtA03BbzOFT1zdIYYh7CgdP5mMB8GA1UdIwQY
MBaAFPJ8k92xoXFRxW8i3K8x3YIpRjdCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5Mjkt
MzZlMGM4YWZlMjZhLzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5MjktMzZlMGM4YWZlMjZh
LzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4eHYM3h
1c0d8F+O7peXj7WHaa810CcRSV7BOLwvMjYU83kJ0+aLkjbkZ1TxkcqgWNREhD6x
n1qIPdlemYLmMO4a4/zhMfrhuuLBYyWUD9aPW1WoR/nh7jz7o5xh0wXM2YJbwMqO
DN2o13bHAhAQ72G3mDDjV3qWjknYwD2PsGxgRDTGDt87fqUtuApOkmEbxzOkIkcn
jRw4VUo4is4b/EoHaT/lzq5mYgxyPsEeHYDKSf47pweHr8g3m6fsuu/4O9G/4KgB
sPVIlPoqe8j/wiImZ/gZaIR4Eq1ewEjXJiwhyr0WMk4EadYLE6Gra0pFF7SHbsTc
Qfv6ytVeaIKy6g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:31 2026 by rpki-client