Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft
File: 8FeESpdTnPV_g8yXTVju0ofv2as.mft (raw, json)
Hash identifier: WllfDPD0SyXqZsvvgYGKfFU1p5lkWiMr5zlGVi/8Ym8=
Subject key identifier: 85:A6:BB:DC:F1:4B:D1:C1:13:D4:06:21:9E:B3:59:38:00:75:7E:E6
Authority key identifier: F0:57:84:4A:97:53:9C:F5:7F:83:CC:97:4D:58:EE:D2:87:EF:D9:AB
Certificate issuer: /CN=f057844a97539cf57f83cc974d58eed287efd9ab
Certificate serial: 019FAA8881AA629C337E9B761CD2095D0E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:40 +0000
Manifest this update: Tue 28 Jul 2026 21:01:40 +0000
Manifest next update: Wed 29 Jul 2026 21:01:40 +0000
Files and hashes: 1: 8FeESpdTnPV_g8yXTVju0ofv2as.crl (hash: WFFI3iwdmvttwcaHhn6xDAnhpUtEZVlJYoybZqL10/A=)
2: YAe6av1IQX5FoLA2_JIjBhAIgMk.roa (hash: ThkHx60LVftccna25b9+M7mqoqOKfrX7xC9VLS13eM8=)
3: pZ9V2IY1voGm3J0lqTj6JXZy-jc.roa (hash: ftUTgUhlmUu/y5OQmNNSk095RdRMaTOBMZx0Ohtho2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:81:aa:62:9c:33:7e:9b:76:1c:d2:09:5d:0e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f057844a97539cf57f83cc974d58eed287efd9ab
Validity
Not Before: Jul 28 21:01:40 2026 GMT
Not After : Jul 29 21:01:40 2026 GMT
Subject: CN=85a6bbdcf14bd1c113d406219eb3593800757ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:97:05:f6:33:0b:ae:05:c1:7d:27:2e:71:
42:aa:fb:ef:6b:08:f2:8f:2f:cb:5c:94:ee:9e:d0:
cb:02:ce:f1:f0:69:a6:6d:24:2f:aa:40:70:fe:50:
9a:6c:07:55:90:2f:42:2a:33:f3:93:d5:a5:ca:4a:
03:19:45:d7:fb:c7:d5:a3:0c:65:81:46:f2:23:04:
15:67:5a:66:20:fb:87:19:1f:54:b7:de:b2:90:78:
a2:b5:99:37:ee:87:ff:70:3f:88:c0:8c:94:f9:92:
26:81:71:1b:b3:d3:ca:0b:9e:57:10:6a:30:29:e9:
5b:f3:da:6f:7d:89:1d:cd:cf:e9:f7:ee:e2:1f:59:
99:f4:3b:ed:e3:95:19:b6:c2:81:e5:3a:ac:c7:0d:
4c:72:7c:46:df:27:6b:41:6f:cc:67:7b:e5:9f:bf:
9f:17:0a:78:b7:03:9e:03:3a:64:e8:fe:7e:49:3a:
75:c1:29:cb:f6:06:08:67:7c:f1:36:08:97:c0:0d:
11:00:94:9f:03:f5:33:c1:8b:6a:70:7b:b4:25:ff:
b7:20:72:64:0b:3f:ae:1e:3f:83:5c:bd:9f:e0:7c:
57:7c:9c:a0:53:3c:dc:3b:3c:95:78:52:4c:7d:9b:
58:46:64:e9:13:72:04:ea:56:2f:42:96:29:74:80:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A6:BB:DC:F1:4B:D1:C1:13:D4:06:21:9E:B3:59:38:00:75:7E:E6
X509v3 Authority Key Identifier:
keyid:F0:57:84:4A:97:53:9C:F5:7F:83:CC:97:4D:58:EE:D2:87:EF:D9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:13:ca:ac:f1:fc:f2:c9:3f:a7:cb:45:10:8a:13:77:b8:
fd:b3:48:4e:98:e2:bb:43:a5:c8:83:e1:71:bf:83:2f:a5:ef:
df:74:0c:ad:21:60:c3:c0:f4:06:28:dd:f3:30:75:10:bd:23:
1c:34:c2:07:c3:fa:97:c5:46:63:2f:85:2b:a0:21:f3:05:d7:
f2:a1:22:17:da:eb:bf:7c:db:d3:e2:36:c0:dc:a6:00:1d:ee:
fa:f0:ed:c2:48:ba:e9:b1:9d:dd:9a:25:8f:39:47:5b:76:74:
2a:4c:27:1f:6f:97:a0:86:ba:4d:64:f9:17:93:53:c0:a3:94:
02:af:28:95:34:7f:2e:04:fa:51:26:09:71:2b:b1:6c:85:e7:
e8:9f:c2:c6:96:4d:16:06:34:7b:23:f4:e4:74:7e:d3:47:4f:
35:06:0b:fa:07:5b:34:d1:69:68:be:cf:cf:67:d5:cc:32:dc:
63:44:70:2f:05:51:73:2c:fe:a5:8d:07:8b:b7:02:fc:7f:3a:
28:69:13:6b:d6:c1:f9:da:fa:c0:fb:b5:f2:a6:1e:b4:36:0f:
4e:f0:6a:dd:93:a0:a3:8f:37:db:90:7d:91:f6:73:4e:6e:d0:
84:13:1e:6b:47:e1:dd:12:44:b2:88:47:dd:75:93:83:b1:e5:
45:e8:25:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiIGqYpwzfpt2HNIJXQ6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNTc4NDRhOTc1MzljZjU3ZjgzY2M5NzRkNThlZWQyODdl
ZmQ5YWIwHhcNMjYwNzI4MjEwMTQwWhcNMjYwNzI5MjEwMTQwWjAzMTEwLwYDVQQD
Eyg4NWE2YmJkY2YxNGJkMWMxMTNkNDA2MjE5ZWIzNTkzODAwNzU3ZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo2XBfYzC64FwX0nLnFCqvvvawjy
jy/LXJTuntDLAs7x8GmmbSQvqkBw/lCabAdVkC9CKjPzk9WlykoDGUXX+8fVowxl
gUbyIwQVZ1pmIPuHGR9Ut96ykHiitZk37of/cD+IwIyU+ZImgXEbs9PKC55XEGow
Kelb89pvfYkdzc/p9+7iH1mZ9Dvt45UZtsKB5Tqsxw1McnxG3ydrQW/MZ3vln7+f
Fwp4twOeAzpk6P5+STp1wSnL9gYIZ3zxNgiXwA0RAJSfA/UzwYtqcHu0Jf+3IHJk
Cz+uHj+DXL2f4HxXfJygUzzcOzyVeFJMfZtYRmTpE3IE6lYvQpYpdICTvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWmu9zxS9HBE9QGIZ6zWTgAdX7mMB8GA1UdIwQY
MBaAFPBXhEqXU5z1f4PMl01Y7tKH79mrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZlRVNwZFRuUFZfZzh5WFRWanUwb2Z2MmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmIt
MjRhMGQ4MmNlYTllLzEvOEZlRVNwZFRuUFZfZzh5WFRWanUwb2Z2MmFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmItMjRhMGQ4MmNlYTll
LzEvOEZlRVNwZFRuUFZfZzh5WFRWanUwb2Z2MmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3ITyqzx
/PLJP6fLRRCKE3e4/bNITpjiu0OlyIPhcb+DL6Xv33QMrSFgw8D0Bijd8zB1EL0j
HDTCB8P6l8VGYy+FK6Ah8wXX8qEiF9rrv3zb0+I2wNymAB3u+vDtwki66bGd3Zol
jzlHW3Z0KkwnH2+XoIa6TWT5F5NTwKOUAq8olTR/LgT6USYJcSuxbIXn6J/CxpZN
FgY0eyP05HR+00dPNQYL+gdbNNFpaL7Pz2fVzDLcY0RwLwVRcyz+pY0Hi7cC/H86
KGkTa9bB+dr6wPu18qYetDYPTvBq3ZOgo48325B9kfZzTm7QhBMea0fh3RJEsohH
3XWTg7HlReglIw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:17 2026 by rpki-client