Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: V8N8pAUyHQUlpWN9BPDFfaMX8FVLJmwiqOpdVDDNUgE=
Subject key identifier: 6F:BD:56:67:DB:BD:9C:B4:EF:9E:E0:71:0C:1A:49:B9:7E:08:7E:E3
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 019FA9E2C3CFECC21AC228142FEE481DB1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 1141
Signing time: Tue 28 Jul 2026 18:00:38 +0000
Manifest this update: Tue 28 Jul 2026 18:00:38 +0000
Manifest next update: Wed 29 Jul 2026 18:00:38 +0000
Files and hashes: 1: 4-1jTpLuCOAg2Vrbi_YFCr92v_4.roa (hash: fO6SjPHBF8aFGKNbO8o4HrubgQPH9aKLn7J3+znKEj4=)
2: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: jQq6KIBcr7gbTUm3LHgZOw0a4KK080RvHoNHfVilZYQ=)
3: Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa (hash: ArKoVR1HvT27XmVZlqzha6BxLY/5mnRJvZnwQwU+NF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:c3:cf:ec:c2:1a:c2:28:14:2f:ee:48:1d:b1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Jul 28 18:00:38 2026 GMT
Not After : Jul 29 18:00:38 2026 GMT
Subject: CN=6fbd5667dbbd9cb4ef9ee0710c1a49b97e087ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:a4:1a:c5:4e:a9:76:fc:26:7a:2c:35:36:
70:53:d2:e7:32:f8:13:3e:84:8c:d1:92:78:8c:dd:
f9:4d:7b:59:78:1e:0e:14:96:e2:a8:8b:80:6a:64:
53:1e:9c:a8:3e:8d:ed:1a:d1:6d:68:80:9a:fb:f7:
71:65:5d:23:b1:ad:76:9d:1d:94:a5:87:fb:c1:14:
70:44:99:62:9a:b0:2b:31:c4:3c:53:c2:8b:68:cd:
83:ce:3d:13:b4:5c:6d:a0:dc:68:88:24:04:f4:e1:
db:24:fe:96:fd:cc:a1:24:b5:0e:81:55:a3:2a:df:
18:6f:1c:dd:29:a6:18:57:9f:63:05:59:89:19:59:
23:36:6e:85:6b:05:6b:46:47:59:53:be:17:de:0b:
60:a6:be:5d:33:f9:c2:4e:5e:71:ba:b1:09:f6:67:
1b:dd:5c:ba:d8:5b:e6:07:6e:1a:5c:4b:3c:b2:bd:
5c:9c:38:df:c8:54:fd:d3:b2:24:64:44:7b:69:67:
ba:f5:76:49:36:92:e3:90:f0:79:67:20:89:f7:62:
34:7d:fc:51:0f:c3:13:e9:9f:95:2e:63:03:0d:77:
11:1e:08:70:8a:3c:be:41:e9:3c:c7:3e:ff:6d:19:
d0:48:c8:90:df:8b:d8:67:fe:08:58:0c:b4:d4:6e:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:56:67:DB:BD:9C:B4:EF:9E:E0:71:0C:1A:49:B9:7E:08:7E:E3
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:66:b0:7e:fe:7f:b2:63:5d:6f:17:d2:fe:d2:c4:eb:85:df:
0d:93:d6:d3:07:29:10:e8:87:67:b3:08:7d:e8:e6:54:01:69:
76:bb:dc:8c:72:bc:f0:8f:e2:b9:5f:ef:c6:b0:1f:28:c4:80:
8e:79:dc:ee:74:e5:a9:1d:33:e1:0f:2d:6b:1e:5a:6d:39:84:
6f:f6:b3:19:a9:94:7b:f2:93:e8:bb:40:fd:17:35:49:bb:ed:
19:09:0c:3e:72:e0:d2:65:35:3d:9c:80:bf:78:fc:ae:99:05:
7f:6d:01:3c:c8:57:93:7f:a2:21:f5:f1:ea:66:a8:44:a9:03:
c5:c0:7a:48:bb:20:cd:98:54:f6:75:a8:8a:64:37:8d:ee:c8:
26:9a:e7:b3:ea:e9:48:25:1d:90:44:e0:4f:7a:77:69:b3:27:
a1:b5:c1:b0:d5:fa:a3:47:10:94:b4:05:e7:db:bd:23:63:30:
d4:94:dc:1f:31:a1:03:8e:30:2e:db:98:87:ce:72:1c:59:1d:
6f:a6:98:7a:ed:7b:67:7a:f4:03:c1:1e:30:88:b0:98:65:6f:
67:38:81:7b:f7:be:da:83:76:6c:24:bb:da:59:5c:29:16:1c:
ed:6b:82:f0:2b:18:5e:6d:21:cd:a8:e9:ac:73:25:14:4e:45:
e4:8a:51:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4sPP7MIawigUL+5IHbHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjkzMDg1YjVmNzVjMGYxMGRlMDhlMjJjYmU0YjA2MjQ1
MWIxNTAwHhcNMjYwNzI4MTgwMDM4WhcNMjYwNzI5MTgwMDM4WjAzMTEwLwYDVQQD
Eyg2ZmJkNTY2N2RiYmQ5Y2I0ZWY5ZWUwNzEwYzFhNDliOTdlMDg3ZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHCkGsVOqXb8JnosNTZwU9LnMvgT
PoSM0ZJ4jN35TXtZeB4OFJbiqIuAamRTHpyoPo3tGtFtaICa+/dxZV0jsa12nR2U
pYf7wRRwRJlimrArMcQ8U8KLaM2Dzj0TtFxtoNxoiCQE9OHbJP6W/cyhJLUOgVWj
Kt8YbxzdKaYYV59jBVmJGVkjNm6FawVrRkdZU74X3gtgpr5dM/nCTl5xurEJ9mcb
3Vy62FvmB24aXEs8sr1cnDjfyFT907IkZER7aWe69XZJNpLjkPB5ZyCJ92I0ffxR
D8MT6Z+VLmMDDXcRHghwijy+Qek8xz7/bRnQSMiQ34vYZ/4IWAy01G4EVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+9VmfbvZy0757gcQwaSbl+CH7jMB8GA1UdIwQY
MBaAFPJpMIW191wPEN4I4iy+SwYkUbFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAt
NTVlODVlYTA5ZGRlLzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAtNTVlODVlYTA5ZGRl
LzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2awfv5/
smNdbxfS/tLE64XfDZPW0wcpEOiHZ7MIfejmVAFpdrvcjHK88I/iuV/vxrAfKMSA
jnnc7nTlqR0z4Q8tax5abTmEb/azGamUe/KT6LtA/Rc1SbvtGQkMPnLg0mU1PZyA
v3j8rpkFf20BPMhXk3+iIfXx6maoRKkDxcB6SLsgzZhU9nWoimQ3je7IJprns+rp
SCUdkETgT3p3abMnobXBsNX6o0cQlLQF59u9I2Mw1JTcHzGhA44wLtuYh85yHFkd
b6aYeu17Z3r0A8EeMIiwmGVvZziBe/e+2oN2bCS72llcKRYc7WuC8CsYXm0hzajp
rHMlFE5F5IpRUw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:18 2026 by rpki-client