Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
File: V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json)
Hash identifier: k3j8np4nTTVi5pwcBuSFs5RLvUQSHrEGOvLXRPg0q9g=
Subject key identifier: 8D:BC:87:CA:CA:BC:50:6D:33:31:36:07:F9:3E:40:76:A9:47:EA:49
Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
Certificate issuer: /CN=57db143c17fb051944426a79f24334c25cdbc234
Certificate serial: 019FACE462F908225EA8F0DAFB897A7A4ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
Manifest number: 04AA
Signing time: Wed 29 Jul 2026 08:01:16 +0000
Manifest this update: Wed 29 Jul 2026 08:01:16 +0000
Manifest next update: Thu 30 Jul 2026 08:01:16 +0000
Files and hashes: 1: T5e0TgseHoV5T0D1V0ELGlI9FBc.roa (hash: Q9H/hI7Y9VsQ4ugMF8ryTSl2yPuCfHdqE0UId9QIWbI=)
2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: s4GfFnkvZ2yn21430kzenWWcGMLK96xRtvVY4g50VPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:62:f9:08:22:5e:a8:f0:da:fb:89:7a:7a:4e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234
Validity
Not Before: Jul 29 08:01:16 2026 GMT
Not After : Jul 30 08:01:16 2026 GMT
Subject: CN=8dbc87cacabc506d33313607f93e4076a947ea49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:d3:11:fd:66:de:b5:5b:bd:c4:e3:fd:76:
b9:74:b2:c2:50:c5:29:cd:7d:f6:16:e0:4a:c9:5e:
bf:bc:64:e1:27:6a:0c:ca:78:91:23:bd:7d:3e:72:
55:31:70:60:57:9c:54:ee:3b:d7:6c:4e:48:21:31:
d6:c6:79:54:88:58:34:82:19:9d:93:b3:88:28:4e:
ab:66:e2:4b:04:28:64:6e:0b:60:8c:31:06:ae:22:
4b:ed:7a:7a:72:d1:98:11:12:8e:6e:db:e2:87:07:
b7:a0:89:7b:ab:5d:23:f6:88:e9:18:3a:0f:e1:71:
be:b8:ff:cb:c8:fe:a5:87:6d:2a:ac:14:60:bb:82:
9a:ad:03:44:d5:6c:ed:e2:6f:4e:48:b2:82:e9:4f:
dd:be:36:9b:6d:a0:e4:ce:9e:55:1f:79:36:15:0d:
f6:4f:6b:7e:56:ec:77:a5:c4:0a:01:40:53:a8:89:
69:e0:47:8e:1f:7a:3f:53:9b:89:9e:38:4b:a1:4d:
57:d7:82:63:01:90:37:a5:2b:be:d2:00:d4:ed:98:
bf:98:6d:94:c5:36:6a:70:f5:15:dd:f8:e8:b5:41:
49:e9:36:0a:e6:54:a9:0d:28:4a:60:59:d1:17:7e:
b8:4b:fb:67:0e:0e:48:ab:47:7f:fa:ae:19:c7:2f:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BC:87:CA:CA:BC:50:6D:33:31:36:07:F9:3E:40:76:A9:47:EA:49
X509v3 Authority Key Identifier:
keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bf:f4:db:ff:73:d1:9c:5b:63:b9:8d:4d:d0:f2:71:7f:75:
8e:0d:4e:6e:0d:fb:e2:9f:6f:f6:d4:a2:f9:d3:99:e0:0d:60:
cd:13:a1:3a:10:a6:9b:55:31:c9:38:be:4d:6b:dd:c1:d5:8f:
16:f9:39:c3:eb:9a:ad:ca:c5:1d:69:b8:1d:d9:96:a1:d0:7f:
40:e2:4b:48:44:ec:5d:58:68:9e:bf:80:7c:6e:f1:41:5c:b6:
68:52:4e:1f:29:12:d4:05:d9:2e:56:a1:3c:7c:37:35:02:9d:
02:09:81:19:20:84:af:f9:f0:0f:6f:20:d7:cf:b2:a0:9a:f4:
66:83:db:84:b2:39:97:d4:ec:92:4e:9a:48:cf:71:ef:d1:19:
bb:8a:0f:20:85:a3:13:bf:96:41:e0:a6:0c:fd:77:63:93:42:
4f:35:00:91:66:86:09:d6:8a:b1:30:36:d7:69:2e:4b:73:bf:
dc:7a:5e:7a:bb:a3:dd:ad:81:96:4a:5a:ab:18:f9:8d:42:9f:
61:50:7d:a4:35:7f:b4:d5:f7:a4:95:25:d2:53:41:5f:f3:d5:
d7:e9:55:ea:39:a0:91:09:9d:5c:78:6e:2a:c1:43:98:54:69:
1e:d2:42:68:a1:15:3a:a9:af:40:5c:dd:b2:42:80:d8:5c:97:
2d:90:7d:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s5GL5CCJeqPDa+4l6ek7ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZGIxNDNjMTdmYjA1MTk0NDQyNmE3OWYyNDMzNGMyNWNk
YmMyMzQwHhcNMjYwNzI5MDgwMTE2WhcNMjYwNzMwMDgwMTE2WjAzMTEwLwYDVQQD
Eyg4ZGJjODdjYWNhYmM1MDZkMzMzMTM2MDdmOTNlNDA3NmE5NDdlYTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lPTEf1m3rVbvcTj/Xa5dLLCUMUp
zX32FuBKyV6/vGThJ2oMyniRI719PnJVMXBgV5xU7jvXbE5IITHWxnlUiFg0ghmd
k7OIKE6rZuJLBChkbgtgjDEGriJL7Xp6ctGYERKObtvihwe3oIl7q10j9ojpGDoP
4XG+uP/LyP6lh20qrBRgu4KarQNE1Wzt4m9OSLKC6U/dvjabbaDkzp5VH3k2FQ32
T2t+Vux3pcQKAUBTqIlp4EeOH3o/U5uJnjhLoU1X14JjAZA3pSu+0gDU7Zi/mG2U
xTZqcPUV3fjotUFJ6TYK5lSpDShKYFnRF364S/tnDg5Iq0d/+q4Zxy8rbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI28h8rKvFBtMzE2B/k+QHapR+pJMB8GA1UdIwQY
MBaAFFfbFDwX+wUZREJqefJDNMJc28I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDEzODAtZjgyMS00NDNhLTliZjIt
YmRhNGY4ZWIxYWQ5LzEvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85MDEzODAtZjgyMS00NDNhLTliZjItYmRhNGY4ZWIxYWQ5
LzEvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7/02/9z
0ZxbY7mNTdDycX91jg1Obg374p9v9tSi+dOZ4A1gzROhOhCmm1UxyTi+TWvdwdWP
Fvk5w+uarcrFHWm4HdmWodB/QOJLSETsXVhonr+AfG7xQVy2aFJOHykS1AXZLlah
PHw3NQKdAgmBGSCEr/nwD28g18+yoJr0ZoPbhLI5l9Tskk6aSM9x79EZu4oPIIWj
E7+WQeCmDP13Y5NCTzUAkWaGCdaKsTA212kuS3O/3Hpeeruj3a2Blkpaqxj5jUKf
YVB9pDV/tNX3pJUl0lNBX/PV1+lV6jmgkQmdXHhuKsFDmFRpHtJCaKEVOqmvQFzd
skKA2FyXLZB9Fw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:50:13 2026 by rpki-client