Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: hUinzQ7mTKT0js+Zm4fhNRlZeOadZ0jUhqYsEj29Ffg=
Subject key identifier: 72:5E:C8:88:28:C6:C5:C6:50:0A:80:F5:99:36:8B:44:11:38:E9:50
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 019FA9073C67B6B65A13831FEEFA1B667C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 14:00:51 +0000
Manifest this update: Tue 28 Jul 2026 14:00:51 +0000
Manifest next update: Wed 29 Jul 2026 14:00:51 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: R4dmiaJvgko+AqT4gLgz0lCp4rI9IP4+3SLs5U+olsQ=)
2: NuU8W7V2quwnNAYLT9_LV52Vbbk.roa (hash: SGhDxlcXeif+7R/rxn7Q7SC8rZycoqSPaENJlB28piw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:3c:67:b6:b6:5a:13:83:1f:ee:fa:1b:66:7c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Jul 28 14:00:51 2026 GMT
Not After : Jul 29 14:00:51 2026 GMT
Subject: CN=725ec88828c6c5c6500a80f599368b441138e950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:6c:0d:33:0a:85:87:e0:de:df:28:d5:eb:
a4:05:86:96:0b:2e:58:b6:40:51:d0:f4:bb:9c:bd:
6d:8a:ea:ba:cd:07:b3:9d:ff:5f:5a:3d:78:cf:95:
91:18:32:cb:0f:7b:22:e2:e7:75:e4:46:ff:e1:c9:
98:d2:ce:73:63:bc:32:9d:85:17:fa:79:81:cb:92:
2c:a3:6b:60:db:c5:3d:04:40:fe:02:a9:d6:2d:7c:
6d:04:88:b7:fc:d8:fd:7c:83:56:38:ce:d2:73:5a:
a1:93:95:93:ea:9c:c2:eb:d2:85:d2:3b:82:c4:f4:
98:b6:29:1e:8d:e2:63:27:c0:4e:77:24:ac:47:36:
e3:ff:5c:50:52:a1:1e:38:59:9b:d6:3a:76:cd:73:
f8:76:63:de:91:ce:c8:8a:20:43:21:c2:97:b4:44:
b1:dd:59:33:c1:69:c2:60:96:44:c5:e7:a5:57:a7:
07:27:50:c2:1f:aa:19:ed:bc:27:12:f6:26:ae:9a:
8c:08:99:43:bb:cb:1b:30:a6:5d:1f:d8:3f:c4:3a:
b9:6e:e8:16:ad:c5:c3:42:b0:24:d0:65:1f:2d:0a:
39:57:f0:cb:00:0c:56:4d:41:d7:50:22:35:4a:48:
43:a7:39:38:27:f8:f5:4d:24:57:2b:9a:6f:84:07:
fd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5E:C8:88:28:C6:C5:C6:50:0A:80:F5:99:36:8B:44:11:38:E9:50
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:91:13:01:28:be:00:f2:51:3c:f5:73:38:75:a8:b7:8a:cc:
5b:d6:08:75:82:1f:ca:7e:70:ed:aa:dc:71:55:7a:30:1c:90:
9a:1d:0d:78:00:09:34:a4:19:4d:be:fb:d9:d8:f4:d3:9a:2c:
a9:37:3c:0f:ec:e3:88:bb:46:72:7f:d0:aa:e7:34:e6:16:17:
48:50:5a:13:2b:81:64:70:19:98:5f:18:b0:16:28:0a:3c:fb:
82:a3:96:fa:02:86:40:e8:f2:a9:d5:96:ab:2c:28:af:0a:ea:
ec:ad:56:81:b9:95:0e:71:5b:d3:5b:f2:fc:2c:cc:76:ed:b8:
c1:0f:4f:d3:e9:e8:73:00:9f:fe:ac:ff:76:33:74:f9:18:e7:
18:53:10:e9:81:72:de:a3:9f:a6:48:f8:6d:cb:70:2a:78:53:
0a:e3:d5:7c:b7:05:d2:20:d6:40:a1:61:1a:4b:81:6c:d8:5c:
92:f6:de:d2:88:c8:51:87:9b:08:69:d8:b3:3c:a1:d2:5c:87:
84:88:65:e3:8b:96:b3:36:e3:97:53:d8:e9:2d:3a:a6:4f:5c:
35:c8:a0:80:ac:4b:0d:82:3a:9d:da:34:e3:b7:d8:0a:f2:2d:
13:1a:08:b2:6b:ec:20:86:48:b6:25:5f:11:b6:51:ca:be:d8:
08:75:88:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBzxntrZaE4Mf7vobZnwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjY4MWNhYTFkMzdlNTg5OWJhMjdkZmJjMzY5NjBlMDZi
NWQzZjIwHhcNMjYwNzI4MTQwMDUxWhcNMjYwNzI5MTQwMDUxWjAzMTEwLwYDVQQD
Eyg3MjVlYzg4ODI4YzZjNWM2NTAwYTgwZjU5OTM2OGI0NDExMzhlOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1hsDTMKhYfg3t8o1eukBYaWCy5Y
tkBR0PS7nL1tiuq6zQeznf9fWj14z5WRGDLLD3si4ud15Eb/4cmY0s5zY7wynYUX
+nmBy5Iso2tg28U9BED+AqnWLXxtBIi3/Nj9fINWOM7Sc1qhk5WT6pzC69KF0juC
xPSYtikejeJjJ8BOdySsRzbj/1xQUqEeOFmb1jp2zXP4dmPekc7IiiBDIcKXtESx
3VkzwWnCYJZExeelV6cHJ1DCH6oZ7bwnEvYmrpqMCJlDu8sbMKZdH9g/xDq5bugW
rcXDQrAk0GUfLQo5V/DLAAxWTUHXUCI1SkhDpzk4J/j1TSRXK5pvhAf9gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJeyIgoxsXGUAqA9Zk2i0QROOlQMB8GA1UdIwQY
MBaAFPJmgcqh035Ymbon37w2lg4GtdPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMt
NjQwNzVjMmFlNDYzLzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMtNjQwNzVjMmFlNDYz
LzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx5ETASi+
APJRPPVzOHWot4rMW9YIdYIfyn5w7arccVV6MByQmh0NeAAJNKQZTb772dj005os
qTc8D+zjiLtGcn/Qquc05hYXSFBaEyuBZHAZmF8YsBYoCjz7gqOW+gKGQOjyqdWW
qyworwrq7K1WgbmVDnFb01vy/CzMdu24wQ9P0+nocwCf/qz/djN0+RjnGFMQ6YFy
3qOfpkj4bctwKnhTCuPVfLcF0iDWQKFhGkuBbNhckvbe0ojIUYebCGnYszyh0lyH
hIhl44uWszbjl1PY6S06pk9cNciggKxLDYI6ndo047fYCvItExoIsmvsIIZItiVf
EbZRyr7YCHWISg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:47 2026 by rpki-client