Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: 02Z45W8DOFg0AgqhV8b6XPpTlNz3lt2ZMRCN8ENnL6Y=
Subject key identifier: 35:16:5F:91:10:9E:10:92:0E:13:A4:BE:69:E9:3E:19:52:6C:FB:6D
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 019FA89A0FD9F8B35FF84A077A6C3955FE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 0AC0
Signing time: Tue 28 Jul 2026 12:01:36 +0000
Manifest this update: Tue 28 Jul 2026 12:01:36 +0000
Manifest next update: Wed 29 Jul 2026 12:01:36 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: mGeWyLoyTt/kR7BUR32xXhC9YsA/XUyBPuPiRIRiUV0=)
2: L2SGUtmn8iVoAZusJiJO0lWPz-c.roa (hash: tzCEkWtWLJDnUs8JcskBJsxe43rrrZgahQVNHwJxPJs=)
3: _p7le5gIIWbAoXoedbYiYmj5NdE.roa (hash: CNMW3XBWI+i2aIdqqxnzyTpertxlov4CAJZZ/pSHhYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:0f:d9:f8:b3:5f:f8:4a:07:7a:6c:39:55:fe:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Jul 28 12:01:36 2026 GMT
Not After : Jul 29 12:01:36 2026 GMT
Subject: CN=35165f91109e10920e13a4be69e93e19526cfb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:15:fb:b8:9b:c3:d7:86:5a:0c:10:46:d6:
a6:25:c6:9c:72:b3:be:08:70:be:ae:bc:f9:e2:19:
3e:76:46:3b:59:89:1d:90:1a:5a:e5:b5:2b:09:8d:
d5:c4:ce:06:fd:74:76:6b:92:f0:cd:a2:33:4d:e0:
29:ce:91:6e:78:8c:25:f0:cf:5e:23:4f:bb:9f:39:
71:ab:83:4c:2b:5b:44:7f:a0:d5:ab:c1:45:18:05:
84:ba:d2:ba:61:0d:65:78:65:8b:cd:d5:70:db:14:
c1:36:36:f8:5a:0f:b5:14:e1:ed:96:f7:fb:eb:2e:
75:ce:a2:13:d3:03:d5:bb:c5:d4:30:e0:ac:4d:ae:
14:e7:59:ba:e4:16:aa:54:b4:e1:ee:9a:30:5c:5e:
2b:49:56:76:2d:b9:30:d5:be:98:1e:aa:24:4e:3c:
f0:39:09:2e:6a:da:f3:76:8f:05:15:b9:fd:dd:b7:
27:c9:6c:d7:0a:ec:69:41:f3:93:15:55:bc:73:72:
3b:37:ae:08:36:1f:00:ad:85:1e:19:37:41:a9:77:
e6:3b:6e:49:da:38:e2:53:23:2d:4c:da:1b:c8:ff:
69:db:3d:4c:b2:5e:8c:89:c4:8a:6c:d3:72:c5:26:
7d:1d:e2:45:a0:e3:18:57:f1:58:73:69:3c:70:01:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:5F:91:10:9E:10:92:0E:13:A4:BE:69:E9:3E:19:52:6C:FB:6D
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:51:61:30:0f:21:e4:4a:f1:26:91:27:e3:8e:b5:a3:e0:3b:
67:40:d0:bc:13:73:bb:99:ef:ff:46:ac:29:dc:4c:41:a2:32:
63:6c:8d:91:aa:3a:20:12:9f:3c:38:b4:30:bc:d3:c0:73:5e:
11:b0:57:9e:b9:78:2c:81:93:fb:5a:f2:8d:33:01:a7:c9:46:
ed:26:56:8d:fc:5b:79:b4:aa:da:d1:4a:82:f6:41:41:fb:57:
fe:b5:7f:17:ae:3a:8c:72:94:e8:ed:f3:9a:6c:76:34:7c:41:
ca:b4:82:57:fd:8e:6f:92:09:13:5a:d5:b8:ec:ed:3f:6e:61:
84:38:5e:61:d8:77:39:ce:b2:ea:a0:d0:5d:d0:d0:fa:94:5d:
dc:a5:6e:1b:12:19:a6:d6:ac:46:6b:c5:6c:7e:54:e2:4b:eb:
eb:51:cd:ae:79:f8:64:70:38:26:7a:fa:84:6e:51:9b:50:bc:
df:7f:4b:6d:b4:90:10:4c:bd:94:a9:31:b6:38:50:e5:21:d1:
4f:3d:78:61:e2:f3:0f:46:3a:f4:11:18:23:83:25:7e:17:d1:
e4:31:53:74:36:f1:fc:93:8c:41:b1:c7:d8:df:44:02:af:bf:
65:04:7d:ec:41:8c:ac:f9:21:05:da:dd:f3:f2:74:2c:e2:cd:
36:5c:1f:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omg/Z+LNf+EoHemw5Vf4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDljYmJlZmRlNjEyZTYxZTBjZDBmZjBiODcxOTYxY2Jm
Nzk3ZTMwHhcNMjYwNzI4MTIwMTM2WhcNMjYwNzI5MTIwMTM2WjAzMTEwLwYDVQQD
EygzNTE2NWY5MTEwOWUxMDkyMGUxM2E0YmU2OWU5M2UxOTUyNmNmYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVUV+7ibw9eGWgwQRtamJcaccrO+
CHC+rrz54hk+dkY7WYkdkBpa5bUrCY3VxM4G/XR2a5LwzaIzTeApzpFueIwl8M9e
I0+7nzlxq4NMK1tEf6DVq8FFGAWEutK6YQ1leGWLzdVw2xTBNjb4Wg+1FOHtlvf7
6y51zqIT0wPVu8XUMOCsTa4U51m65BaqVLTh7powXF4rSVZ2Lbkw1b6YHqokTjzw
OQkuatrzdo8FFbn93bcnyWzXCuxpQfOTFVW8c3I7N64INh8ArYUeGTdBqXfmO25J
2jjiUyMtTNobyP9p2z1Msl6MicSKbNNyxSZ9HeJFoOMYV/FYc2k8cAFaywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUWX5EQnhCSDhOkvmnpPhlSbPttMB8GA1UdIwQY
MBaAFPDZy7795hLmHgzQ/wuHGWHL95fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQt
ZjkyOTE1YTk2OGJjLzEvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80OTk2OWUtNTQ2Yy00M2U1LThkYmQtZjkyOTE1YTk2OGJj
LzEvOE5uTHZ2M21FdVllRE5EX0M0Y1pZY3YzbC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlFhMA8h
5ErxJpEn4461o+A7Z0DQvBNzu5nv/0asKdxMQaIyY2yNkao6IBKfPDi0MLzTwHNe
EbBXnrl4LIGT+1ryjTMBp8lG7SZWjfxbebSq2tFKgvZBQftX/rV/F646jHKU6O3z
mmx2NHxByrSCV/2Ob5IJE1rVuOztP25hhDheYdh3Oc6y6qDQXdDQ+pRd3KVuGxIZ
ptasRmvFbH5U4kvr61HNrnn4ZHA4Jnr6hG5Rm1C8339LbbSQEEy9lKkxtjhQ5SHR
Tz14YeLzD0Y69BEYI4MlfhfR5DFTdDbx/JOMQbHH2N9EAq+/ZQR97EGMrPkhBdrd
8/J0LOLNNlwfiQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:54 2026 by rpki-client