Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
File: 8XUAF9wNk26aoWaTGTffeJKv6fE.mft (raw, json)
Hash identifier: XD7lfphPcLvtMActg0I/xufijeF8uhpndGJhKVGe/Dg=
Subject key identifier: 98:B0:03:9E:62:94:01:D9:97:BD:56:D6:12:C1:CF:3E:4B:6D:B8:A3
Authority key identifier: F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
Certificate issuer: /CN=f1750017dc0d936e9aa166931937df7892afe9f1
Certificate serial: 019FA7BD7557F4AD50BDA3C702C4E19B5294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
Manifest number: 03A0
Signing time: Tue 28 Jul 2026 08:00:39 +0000
Manifest this update: Tue 28 Jul 2026 08:00:39 +0000
Manifest next update: Wed 29 Jul 2026 08:00:39 +0000
Files and hashes: 1: 8XUAF9wNk26aoWaTGTffeJKv6fE.crl (hash: iJFGXAMvS8qA/9FTIAojjdMbSve5k7juCjXDgRqiWRE=)
2: RJmo5W4f9aoT7fFDQ3yD2RKwAac.roa (hash: IZ2vUVo1okHZdVGuQKYV71GbDyxma+mzCV0u8e3RDcE=)
3: zkLVUigEz4LNZ2zhuWJBHwJfHuo.asa (hash: PXcCM5Lh6x9uec+divpobIpUSKP+kseMCox7ZsGLoDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:75:57:f4:ad:50:bd:a3:c7:02:c4:e1:9b:52:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1750017dc0d936e9aa166931937df7892afe9f1
Validity
Not Before: Jul 28 08:00:39 2026 GMT
Not After : Jul 29 08:00:39 2026 GMT
Subject: CN=98b0039e629401d997bd56d612c1cf3e4b6db8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:73:cc:49:17:98:86:5a:50:c6:d6:18:3a:
bf:98:b8:06:29:79:2a:dd:a3:6d:a9:d8:a8:0f:90:
64:27:fc:6a:27:3f:b4:25:37:60:1a:e4:78:a5:33:
9a:07:30:d8:33:53:ea:c1:b2:9b:5b:da:dc:de:bc:
d8:1f:ca:52:9a:ba:91:93:6e:1e:dc:9c:3f:41:b1:
4f:3b:9f:a0:37:91:f4:b9:91:7b:44:6b:a9:71:fa:
e4:65:ef:c9:f3:c2:f7:59:57:ad:49:5a:05:9c:9f:
2c:11:59:bc:d2:d0:5c:98:5b:3c:21:4d:81:ce:88:
0c:62:2d:6d:b3:05:da:80:84:23:ec:62:02:b9:1c:
d2:46:bb:ff:f8:a5:fe:3a:1c:17:a5:3d:22:1b:c5:
01:13:4a:36:8c:bd:49:6c:36:13:2f:47:fb:18:7e:
50:80:ff:1e:18:4b:0e:51:89:cf:f9:ed:d6:cd:36:
b6:8d:09:3b:08:57:97:af:c5:c1:ec:13:1e:6d:1e:
4c:f2:14:85:f9:d7:80:90:6b:5e:03:8a:9a:24:6e:
ca:24:75:de:e6:bf:f2:45:7b:07:be:45:25:88:6c:
f6:37:9a:53:63:32:14:32:0c:df:37:2f:e9:b1:00:
61:45:f2:6a:a8:c9:d7:97:e2:be:84:dc:08:6b:b1:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B0:03:9E:62:94:01:D9:97:BD:56:D6:12:C1:CF:3E:4B:6D:B8:A3
X509v3 Authority Key Identifier:
keyid:F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:21:ac:03:21:a1:79:60:3f:34:17:9f:4c:86:71:b3:5f:f9:
0f:18:86:7a:ac:07:e5:32:d2:60:e5:44:a0:02:40:e1:77:af:
62:9c:41:6d:9a:a0:bb:e4:c9:39:fb:cf:36:a8:43:d5:a6:d2:
4e:ba:72:b5:d2:9d:16:45:5d:3e:c7:6f:ff:5a:9d:b4:de:c0:
c8:5e:2e:f2:cd:a4:c2:f2:b4:a3:03:8e:91:c5:df:cf:a8:49:
03:6d:c7:7b:74:98:54:93:bd:58:a6:68:06:df:41:73:d0:1a:
55:66:e8:fd:ab:60:6a:69:29:5c:57:3d:c6:18:a8:c0:d5:05:
3b:11:4d:9a:ee:ee:8e:7c:24:43:5c:94:29:3a:18:7f:79:f8:
3e:59:a7:4b:f2:fd:77:c2:27:dd:53:fe:2f:8d:23:7d:46:6b:
c2:63:82:4e:8f:ce:58:21:7f:24:f4:23:d0:29:ed:ff:3e:5a:
ef:ae:d4:a6:18:2d:07:cd:a1:83:84:a2:84:c7:2c:78:2d:0d:
cc:53:fe:b3:c2:f7:98:aa:c3:38:f9:87:40:6f:e8:ea:a5:66:
b5:20:9e:d5:bf:7b:35:91:62:1a:e6:27:17:4f:19:27:b0:f6:
12:5c:2e:9e:d0:af:0c:2e:74:4e:69:06:5b:dd:b6:f0:5e:57:
54:1d:0f:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nvXVX9K1QvaPHAsThm1KUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNzUwMDE3ZGMwZDkzNmU5YWExNjY5MzE5MzdkZjc4OTJh
ZmU5ZjEwHhcNMjYwNzI4MDgwMDM5WhcNMjYwNzI5MDgwMDM5WjAzMTEwLwYDVQQD
Eyg5OGIwMDM5ZTYyOTQwMWQ5OTdiZDU2ZDYxMmMxY2YzZTRiNmRiOGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjpzzEkXmIZaUMbWGDq/mLgGKXkq
3aNtqdioD5BkJ/xqJz+0JTdgGuR4pTOaBzDYM1PqwbKbW9rc3rzYH8pSmrqRk24e
3Jw/QbFPO5+gN5H0uZF7RGupcfrkZe/J88L3WVetSVoFnJ8sEVm80tBcmFs8IU2B
zogMYi1tswXagIQj7GICuRzSRrv/+KX+OhwXpT0iG8UBE0o2jL1JbDYTL0f7GH5Q
gP8eGEsOUYnP+e3WzTa2jQk7CFeXr8XB7BMebR5M8hSF+deAkGteA4qaJG7KJHXe
5r/yRXsHvkUliGz2N5pTYzIUMgzfNy/psQBhRfJqqMnXl+K+hNwIa7H1mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiwA55ilAHZl71W1hLBzz5LbbijMB8GA1UdIwQY
MBaAFPF1ABfcDZNumqFmkxk333iSr+nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFhVQUY5d05rMjZhb1dhVEdUZmZlSkt2NmZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9mNjE0ZWYtNTZhZS00ZGRmLWEzZmMt
OTI5OTVmY2Y1N2M2LzEvOFhVQUY5d05rMjZhb1dhVEdUZmZlSkt2NmZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9mNjE0ZWYtNTZhZS00ZGRmLWEzZmMtOTI5OTVmY2Y1N2M2
LzEvOFhVQUY5d05rMjZhb1dhVEdUZmZlSkt2NmZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyGsAyGh
eWA/NBefTIZxs1/5DxiGeqwH5TLSYOVEoAJA4XevYpxBbZqgu+TJOfvPNqhD1abS
TrpytdKdFkVdPsdv/1qdtN7AyF4u8s2kwvK0owOOkcXfz6hJA23He3SYVJO9WKZo
Bt9Bc9AaVWbo/atgamkpXFc9xhiowNUFOxFNmu7ujnwkQ1yUKToYf3n4PlmnS/L9
d8In3VP+L40jfUZrwmOCTo/OWCF/JPQj0Cnt/z5a767UphgtB82hg4SihMcseC0N
zFP+s8L3mKrDOPmHQG/o6qVmtSCe1b97NZFiGuYnF08ZJ7D2ElwuntCvDC50TmkG
W9228F5XVB0P7g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 13:37:41 2026 by rpki-client