Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: bAWwC4stEbBxlYof/p+4L94xQBn2QY3Cttp9brxkLS4=
Subject key identifier: C8:96:25:D8:C0:03:9D:3A:82:57:77:4B:D7:CF:D1:37:6A:16:2D:44
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 019FA93E3DFC8FAC352F798CE9C47C2EF2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 13E3
Signing time: Tue 28 Jul 2026 15:00:56 +0000
Manifest this update: Tue 28 Jul 2026 15:00:56 +0000
Manifest next update: Wed 29 Jul 2026 15:00:56 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: aFOig8eoo6cZTLbqekUGOT28ITgaVlCrsRKeeWQWQlc=)
2: GOJdmQeTfRZxvLli-b1t8ivPIP0.roa (hash: rE4/LNjEHFf2tYypahcaP12dhBhPp76Zx6vdg4QGZdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:3d:fc:8f:ac:35:2f:79:8c:e9:c4:7c:2e:f2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Jul 28 15:00:56 2026 GMT
Not After : Jul 29 15:00:56 2026 GMT
Subject: CN=c89625d8c0039d3a8257774bd7cfd1376a162d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:d0:e3:21:cd:e3:d2:a2:1d:af:84:28:7b:
22:6f:cb:71:38:bb:61:2d:f5:1d:a0:05:d3:21:79:
8b:83:05:5d:d0:12:48:6d:f4:5c:46:42:29:27:0c:
81:93:a1:84:8a:93:47:ce:be:90:20:ee:0c:24:2f:
07:38:98:23:64:a7:62:97:3b:07:4c:40:cb:88:ec:
6b:84:37:64:c7:c0:0c:c0:76:ed:5d:17:01:60:ca:
80:0d:b0:f0:d4:dd:67:77:61:1f:3b:3f:7e:50:c2:
6c:22:b6:b5:ce:a7:b2:d6:5e:bc:fd:89:b2:8f:b6:
ed:e3:cf:6f:fe:c4:c6:e1:49:e3:9f:38:33:a0:f9:
ff:e3:b5:80:74:e5:f3:17:44:98:67:4a:46:c9:df:
01:a7:a1:90:c1:ce:96:87:66:6a:e3:19:37:a9:cf:
0b:45:30:50:76:6a:a0:b1:52:6b:c9:0a:68:09:2e:
dc:9d:83:ee:fc:95:9e:d8:5a:8c:29:a9:b2:1b:0c:
ed:b9:ab:28:4e:ec:41:f7:7d:0f:51:03:15:63:35:
3a:c7:0f:0e:15:0f:f7:fe:97:95:0e:95:a0:46:46:
e6:7d:74:cf:0a:67:c0:06:5d:f5:c9:fe:63:0b:1e:
b7:66:87:23:c8:63:89:5f:31:4f:d5:51:a0:c9:2d:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:96:25:D8:C0:03:9D:3A:82:57:77:4B:D7:CF:D1:37:6A:16:2D:44
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:63:49:b9:76:77:46:ec:81:31:4a:a7:44:a5:94:2f:51:ec:
e2:7c:05:b5:9b:fd:3f:d7:e6:74:e9:d7:e7:32:1a:01:e0:d9:
98:23:65:04:c8:27:c2:86:5b:de:ca:f3:42:61:89:4a:73:a5:
a1:7d:92:e6:23:0c:9f:71:e2:cf:dc:08:ca:5a:b3:8c:90:8f:
99:67:9b:38:4f:cd:47:a2:84:85:89:00:bf:55:02:6c:c7:59:
0a:04:42:02:3a:96:52:59:4b:16:28:b6:e2:23:84:c0:90:44:
87:0d:17:88:4e:d1:95:ec:5b:d9:d9:7b:9a:51:22:e9:fb:b4:
a8:14:4a:a6:37:f8:e2:38:3d:9b:4b:e1:9b:58:e1:3e:0e:e7:
3b:b1:10:36:ba:40:e9:62:d5:d9:e6:bc:b4:28:6f:5f:5a:74:
1c:85:c2:c5:6c:68:37:26:fe:5e:94:cd:85:43:12:da:91:96:
d3:ea:cd:17:ca:1c:07:ef:ad:b0:ea:5b:6e:36:06:24:2d:b4:
6e:f3:3a:a7:31:b6:17:72:59:ba:e4:25:b3:a2:8d:6c:04:41:
5a:76:a1:f7:20:60:d6:58:bc:23:0d:ad:f3:65:10:9f:f7:24:
34:57:78:f8:23:4e:7e:a0:d1:be:28:fc:b1:be:95:ea:d1:94:
75:b4:dc:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPj38j6w1L3mM6cR8LvKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2EyMzYwN2Y2ZDFlNmU2Y2VkMWRkOTRjOWJkMTBiMzA2
ZjYwOWQwHhcNMjYwNzI4MTUwMDU2WhcNMjYwNzI5MTUwMDU2WjAzMTEwLwYDVQQD
EyhjODk2MjVkOGMwMDM5ZDNhODI1Nzc3NGJkN2NmZDEzNzZhMTYyZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FPQ4yHN49KiHa+EKHsib8txOLth
LfUdoAXTIXmLgwVd0BJIbfRcRkIpJwyBk6GEipNHzr6QIO4MJC8HOJgjZKdilzsH
TEDLiOxrhDdkx8AMwHbtXRcBYMqADbDw1N1nd2EfOz9+UMJsIra1zqey1l68/Ymy
j7bt489v/sTG4UnjnzgzoPn/47WAdOXzF0SYZ0pGyd8Bp6GQwc6Wh2Zq4xk3qc8L
RTBQdmqgsVJryQpoCS7cnYPu/JWe2FqMKamyGwztuasoTuxB930PUQMVYzU6xw8O
FQ/3/peVDpWgRkbmfXTPCmfABl31yf5jCx63ZocjyGOJXzFP1VGgyS1O9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiWJdjAA506gld3S9fP0TdqFi1EMB8GA1UdIwQY
MBaAFPJ6I2B/bR5ubO0d2Uyb0Qswb2CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEt
ODc5MTNjMzU0OTJhLzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEtODc5MTNjMzU0OTJh
LzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmNJuXZ3
RuyBMUqnRKWUL1Hs4nwFtZv9P9fmdOnX5zIaAeDZmCNlBMgnwoZb3srzQmGJSnOl
oX2S5iMMn3Hiz9wIylqzjJCPmWebOE/NR6KEhYkAv1UCbMdZCgRCAjqWUllLFii2
4iOEwJBEhw0XiE7Rlexb2dl7mlEi6fu0qBRKpjf44jg9m0vhm1jhPg7nO7EQNrpA
6WLV2ea8tChvX1p0HIXCxWxoNyb+XpTNhUMS2pGW0+rNF8ocB++tsOpbbjYGJC20
bvM6pzG2F3JZuuQls6KNbARBWnah9yBg1li8Iw2t82UQn/ckNFd4+CNOfqDRvij8
sb6V6tGUdbTcRA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:13 2026 by rpki-client