Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier: YoOuhB0iLvdbK94cBKTFz+UBGxBFC+F4BohHdutrdII=
Subject key identifier: FB:C0:FA:FC:87:6B:1C:AF:4D:FA:0B:DA:79:C8:6B:A1:1E:8C:9D:66
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial: 019FAA19A1279F9DAE99099CCEC4829828DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number: 0DF9
Signing time: Tue 28 Jul 2026 19:00:34 +0000
Manifest this update: Tue 28 Jul 2026 19:00:34 +0000
Manifest next update: Wed 29 Jul 2026 19:00:34 +0000
Files and hashes: 1: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: 9lMhkCgVJJIeOnjrIDXHus6E4jucyq5AtSOYvUu2bpQ=)
2: ROpvBepIbgL1YB38sWe6DYyZ2hY.roa (hash: e7h0xATOBW6CdBIVhb27eeZ36b1QWdWkJWfktjBe1pA=)
3: gFtvV2Nf6aHPmzajQ5srlB1oKxU.roa (hash: I4oXKyNPDYtBodXHPnB3VP2AM/PrjjCBgXSPVTROeHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:a1:27:9f:9d:ae:99:09:9c:ce:c4:82:98:28:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Validity
Not Before: Jul 28 19:00:34 2026 GMT
Not After : Jul 29 19:00:34 2026 GMT
Subject: CN=fbc0fafc876b1caf4dfa0bda79c86ba11e8c9d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:5a:17:fc:b0:bc:19:c1:f5:c2:08:e1:7c:
b2:60:16:9d:bc:d9:bb:87:d8:cd:ae:91:97:88:01:
0b:f8:ed:3d:4f:48:b1:52:5c:d0:db:1f:4a:06:73:
f2:62:cc:f2:95:34:c7:fc:60:ca:5b:14:30:8f:3d:
80:dc:4e:fb:ad:e5:71:4c:08:a4:6b:eb:bb:1c:3a:
bc:ef:f1:08:42:d3:85:9a:48:c5:7d:bf:10:63:f5:
6b:d3:4f:86:e7:96:00:9f:f6:bd:86:d3:9e:49:fa:
8e:bf:b1:fe:fa:56:d7:c8:ed:c1:a5:66:75:30:d7:
00:1e:d9:b3:2c:df:bc:f5:f7:7e:ea:58:a4:a2:48:
b5:d7:5c:9e:73:10:b6:01:f9:53:8a:c9:f1:96:44:
c2:ab:cd:de:f5:f7:8f:81:c5:c4:a0:2d:81:ce:20:
e6:04:f3:a7:ff:86:cf:ac:d1:d4:a9:40:cd:bf:3f:
d5:b2:46:98:47:d0:b4:4b:48:c1:a3:28:66:b7:9b:
a7:71:0e:0b:03:40:9d:52:d0:6a:93:88:79:6d:d7:
9c:a2:d9:97:18:04:b9:11:f0:e4:e8:97:f5:d4:87:
99:22:4d:81:7c:ac:f5:f0:cb:13:24:c5:7c:b5:5e:
cb:e0:78:92:fc:36:2d:37:d6:85:aa:fa:c1:ac:06:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C0:FA:FC:87:6B:1C:AF:4D:FA:0B:DA:79:C8:6B:A1:1E:8C:9D:66
X509v3 Authority Key Identifier:
keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d0:17:8b:2a:85:8e:2e:8a:dc:36:e3:12:24:2e:d7:ea:36:
0e:1d:a2:a2:3d:1e:3c:c3:5e:94:ee:93:1d:aa:66:a8:3b:16:
ea:9c:c8:1b:37:7d:f0:72:4a:71:0e:c3:63:43:5a:da:20:7f:
db:27:01:02:f7:e2:e0:f8:54:55:89:14:2e:26:bd:90:f6:d3:
8f:64:4c:14:9a:af:62:ec:24:51:26:d3:5d:63:8a:64:b1:bb:
53:56:f5:1b:2d:24:31:f9:e0:71:70:45:55:f7:cb:60:a6:3a:
35:8d:ea:19:4a:0e:fe:af:fb:89:5a:f9:d2:f8:f5:58:0f:f4:
90:4c:63:e6:d1:33:b1:f8:e4:1e:ce:9f:05:4c:a9:73:dc:d1:
ba:c0:18:3e:26:71:4b:96:08:86:b1:e3:3d:0a:a7:a0:f1:c2:
e6:19:35:ac:ea:8c:56:8b:82:a8:ff:a9:1f:1d:54:6f:ab:30:
0c:0c:d0:79:05:3b:c4:aa:72:3a:bb:58:41:c0:1f:65:ba:5c:
fa:c8:34:37:e3:1e:b9:30:82:bf:66:0a:67:08:64:36:de:f8:
cc:86:ec:4f:12:f2:6a:67:3e:71:5b:4c:f3:a9:5d:3e:97:ed:
df:28:80:eb:c8:73:a9:8d:1f:d7:42:5c:3e:9a:87:10:de:92:
6e:87:d3:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGaEnn52umQmczsSCmCjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYzViMGQ3YzBhOWNkMjRiNzNjZGNiOTJjODc0NmU4NWE0
YTViOGYwHhcNMjYwNzI4MTkwMDM0WhcNMjYwNzI5MTkwMDM0WjAzMTEwLwYDVQQD
EyhmYmMwZmFmYzg3NmIxY2FmNGRmYTBiZGE3OWM4NmJhMTFlOGM5ZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN9aF/ywvBnB9cII4XyyYBadvNm7
h9jNrpGXiAEL+O09T0ixUlzQ2x9KBnPyYszylTTH/GDKWxQwjz2A3E77reVxTAik
a+u7HDq87/EIQtOFmkjFfb8QY/Vr00+G55YAn/a9htOeSfqOv7H++lbXyO3BpWZ1
MNcAHtmzLN+89fd+6likoki111yecxC2AflTisnxlkTCq83e9fePgcXEoC2BziDm
BPOn/4bPrNHUqUDNvz/VskaYR9C0S0jBoyhmt5uncQ4LA0CdUtBqk4h5bdecotmX
GAS5EfDk6Jf11IeZIk2BfKz18MsTJMV8tV7L4HiS/DYtN9aFqvrBrAY6AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvA+vyHaxyvTfoL2nnIa6EejJ1mMB8GA1UdIwQY
MBaAFDPFsNfAqc0ktzzcuSyHRuhaSluPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYt
MGZhYjIyNjllYThlLzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYtMGZhYjIyNjllYThl
LzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINAXiyqF
ji6K3DbjEiQu1+o2Dh2ioj0ePMNelO6THapmqDsW6pzIGzd98HJKcQ7DY0Na2iB/
2ycBAvfi4PhUVYkULia9kPbTj2RMFJqvYuwkUSbTXWOKZLG7U1b1Gy0kMfngcXBF
VffLYKY6NY3qGUoO/q/7iVr50vj1WA/0kExj5tEzsfjkHs6fBUypc9zRusAYPiZx
S5YIhrHjPQqnoPHC5hk1rOqMVouCqP+pHx1Ub6swDAzQeQU7xKpyOrtYQcAfZbpc
+sg0N+MeuTCCv2YKZwhkNt74zIbsTxLyamc+cVtM86ldPpft3yiA68hzqY0f10Jc
PpqHEN6SbofT5Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:29 2026 by rpki-client