Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier: Fyp0s32b91fk+UghsH36qsZydGWEkTHZYEWF9fifGxg=
Subject key identifier: B7:C8:8B:87:43:B5:5B:C2:AE:AA:C7:C6:7B:9C:F8:72:9F:4E:FE:12
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial: 019FA89A367FB009B5063E5943A202F4D191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 12:01:46 +0000
Manifest this update: Tue 28 Jul 2026 12:01:46 +0000
Manifest next update: Wed 29 Jul 2026 12:01:46 +0000
Files and hashes: 1: 1-0HVLayObU8RuL6OrsnJm4gmTnI.asa (hash: KYPcud2EQy4OYgiyeuat0HLeEC0DLCcTFa4Ml4StUxY=)
2: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: s/8NYJAIcgUYjjkIlRRIzfUqtLwRSw71C0DbJZ758wo=)
3: ZHNg-iGHdhJIyPbT0YesOHZSckA.roa (hash: jtRC2+2eYimT7dpLaE8cbiYXDkhbQMmqL54jAdK1K3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:36:7f:b0:09:b5:06:3e:59:43:a2:02:f4:d1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Validity
Not Before: Jul 28 12:01:46 2026 GMT
Not After : Jul 29 12:01:46 2026 GMT
Subject: CN=b7c88b8743b55bc2aeaac7c67b9cf8729f4efe12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:db:b6:94:29:6d:65:fd:15:16:84:df:00:
0a:0d:6c:15:e5:04:f7:da:c3:f3:5f:b8:2c:9f:19:
17:2e:ad:cb:98:1f:e2:f3:9d:9f:1a:20:cf:e5:04:
86:65:77:20:b2:7c:f0:97:bf:df:d9:a9:5f:11:6b:
2d:fa:a8:d8:ed:2b:31:15:86:35:8e:61:ff:6c:5e:
ae:ae:33:af:e7:c8:1f:21:94:a3:6b:46:af:d6:bc:
4e:1f:13:b2:c0:64:d9:1d:23:11:e4:4c:22:7e:e7:
a8:99:8f:51:8d:e8:bd:48:bb:8e:cc:ae:ab:b1:b9:
f2:34:30:1d:6b:2d:69:2f:6f:b8:0f:75:f5:58:df:
7b:db:ee:de:a7:a0:84:6f:32:8b:ee:02:47:f2:26:
3e:39:cf:05:be:68:4d:c2:e9:60:71:fa:05:9d:96:
05:d6:fd:9e:37:3a:5e:31:aa:3a:43:42:87:b9:71:
a4:da:c8:6a:10:59:a6:5c:16:9b:f8:73:80:96:b0:
cb:35:07:14:1e:4e:c7:e3:4a:58:21:9a:70:35:6a:
92:74:27:7a:1b:60:01:35:54:60:c9:4e:4a:f3:94:
62:8e:f0:86:f9:ea:41:4c:b7:a8:05:42:90:06:ca:
41:72:ac:9b:24:eb:bb:2f:3f:29:5f:41:03:9b:dd:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C8:8B:87:43:B5:5B:C2:AE:AA:C7:C6:7B:9C:F8:72:9F:4E:FE:12
X509v3 Authority Key Identifier:
keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9b:34:4b:28:95:b7:b6:3a:cd:1d:ba:2c:00:1c:d0:ab:ec:
5c:2a:e5:4d:e4:1a:82:74:8a:b9:82:ad:36:6d:0d:73:f4:f4:
49:c9:ad:fb:99:da:8b:47:e9:e9:e1:f9:a9:b3:80:ee:c2:51:
88:cf:48:19:1e:5b:31:2e:8e:60:4d:73:b4:97:f5:b8:dc:0d:
61:87:51:14:99:1b:e7:e8:1d:56:5f:4c:72:80:39:7e:47:c6:
ea:43:16:f3:ee:fb:52:4a:d8:88:98:79:26:00:f9:22:ab:92:
fe:31:8a:61:cc:4d:2c:97:5e:fe:64:1b:9d:6b:de:45:b2:54:
97:5e:11:a0:f7:b2:3d:83:0e:88:ff:b1:7b:d8:90:74:d3:44:
c6:e0:17:11:5f:36:c1:c4:99:ea:55:38:b2:06:52:35:fc:5a:
ca:5e:a7:60:51:47:df:ca:d6:68:60:67:be:67:f3:f9:96:ac:
33:43:df:6b:38:bc:fd:e2:ab:8b:87:6e:5f:96:16:a9:fb:ac:
78:a4:3b:b1:cc:45:13:35:cb:e3:68:67:cf:ca:a0:23:be:14:
68:ed:dc:82:65:db:2b:f7:5d:df:62:9f:8c:6a:06:68:c9:71:
19:b8:5d:fd:bf:d5:4e:08:2a:b8:52:2d:34:e4:34:0e:77:5f:
dc:ae:6e:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omjZ/sAm1Bj5ZQ6IC9NGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWIwYjU4NWI5YzM5NjI4OGQyMGU5Y2Y2NjVhZTFkZTM5
Zjc4MzMwHhcNMjYwNzI4MTIwMTQ2WhcNMjYwNzI5MTIwMTQ2WjAzMTEwLwYDVQQD
EyhiN2M4OGI4NzQzYjU1YmMyYWVhYWM3YzY3YjljZjg3MjlmNGVmZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKvbtpQpbWX9FRaE3wAKDWwV5QT3
2sPzX7gsnxkXLq3LmB/i852fGiDP5QSGZXcgsnzwl7/f2alfEWst+qjY7SsxFYY1
jmH/bF6urjOv58gfIZSja0av1rxOHxOywGTZHSMR5EwifueomY9Rjei9SLuOzK6r
sbnyNDAday1pL2+4D3X1WN972+7ep6CEbzKL7gJH8iY+Oc8FvmhNwulgcfoFnZYF
1v2eNzpeMao6Q0KHuXGk2shqEFmmXBab+HOAlrDLNQcUHk7H40pYIZpwNWqSdCd6
G2ABNVRgyU5K85RijvCG+epBTLeoBUKQBspBcqybJOu7Lz8pX0EDm929GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfIi4dDtVvCrqrHxnuc+HKfTv4SMB8GA1UdIwQY
MBaAFPKrC1hbnDliiNIOnPZlrh3jn3gzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMt
OTA4YjI1MGNiYTc5LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMtOTA4YjI1MGNiYTc5
LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZs0SyiV
t7Y6zR26LAAc0KvsXCrlTeQagnSKuYKtNm0Nc/T0Scmt+5nai0fp6eH5qbOA7sJR
iM9IGR5bMS6OYE1ztJf1uNwNYYdRFJkb5+gdVl9McoA5fkfG6kMW8+77UkrYiJh5
JgD5IquS/jGKYcxNLJde/mQbnWveRbJUl14RoPeyPYMOiP+xe9iQdNNExuAXEV82
wcSZ6lU4sgZSNfxayl6nYFFH38rWaGBnvmfz+ZasM0Pfazi8/eKri4duX5YWqfus
eKQ7scxFEzXL42hnz8qgI74UaO3cgmXbK/dd32KfjGoGaMlxGbhd/b/VTggquFIt
NOQ0Dndf3K5u9w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:07:57 2026 by rpki-client