Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json)
Hash identifier: cHwWfJmomgyRrO+ivGAguQnJzG37/PQc1DDyqmaFgc0=
Subject key identifier: DF:9D:23:8A:FB:D3:62:F9:08:0C:5A:9A:19:9F:95:5B:48:D6:0A:C4
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 019FA8D07B15CDF90F135FCF421F53B23F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
Manifest number: 0CA2
Signing time: Tue 28 Jul 2026 13:01:02 +0000
Manifest this update: Tue 28 Jul 2026 13:01:02 +0000
Manifest next update: Wed 29 Jul 2026 13:01:02 +0000
Files and hashes: 1: 6Qo_0tvV-nF1V3290tyCPcyJh_o.roa (hash: miQhI+W7erQXF0Elh5+jiDUej+PQhWgEiCLyU5iCciM=)
2: 9ookbD4ZU4VY6TDRIjyZKBvmQXI.roa (hash: M/Bs/iLa6unZww6rfQbsSA6jP0n4wnfBywF5HPWrEvA=)
3: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: zGH1YEFOYWjREME8W69FiY4dSJ7QGCDiTcyDw/ibSQs=)
4: IFrY2kkAzLqt5nU6H0jjg7fOnfs.roa (hash: 3jLeNihZ7jH0KElGLvHndCBcoZfJ8baWrI/MSc9FDOM=)
5: PgdFhXr4B5CibOVMVSzG8VZJbJI.roa (hash: ZVEiyh33egqUEszPE12gddvboVKjJ6wjLhbhT2yy81g=)
6: VwfnUo7iWGrwpmjYLkStkdsJWgc.roa (hash: 0vyTKG4s8Sxb6Vvga9d9VBfQgDaf6QryBCp9P8NqVAk=)
7: Wb0JFSc4Yv8IZMCTo-g4uUkinx4.roa (hash: QbARyoCiF4BxJCcobyg9rCwtMBorp1r1V7vAEHyauzY=)
8: czKDro5NX_B7iWJU3teZpH_MFjc.roa (hash: IaANvC54ocsGYfpcLfku3gzas0/nThyZNXREyxhjK4Q=)
9: sCTR8cDIH84F0OMO06djeXs_-PQ.roa (hash: ugj+brY/Z7Vee3VbgiQKLfHy9VAROXKxM5IhUTLTOGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:7b:15:cd:f9:0f:13:5f:cf:42:1f:53:b2:3f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Jul 28 13:01:02 2026 GMT
Not After : Jul 29 13:01:02 2026 GMT
Subject: CN=df9d238afbd362f9080c5a9a199f955b48d60ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:35:33:78:6b:c3:85:ef:06:61:2d:cd:e5:
7d:9b:04:55:87:df:98:24:ac:64:f6:ac:95:39:9c:
ea:af:6b:28:31:2e:90:4b:1e:44:ef:60:26:61:cd:
1f:4b:80:41:f5:b6:64:38:0a:04:41:ac:f8:57:0a:
8b:7f:9d:7b:dd:8b:bb:2a:55:5c:61:62:68:4d:6d:
4f:82:0e:98:d5:9c:bf:f9:f1:bd:26:f2:ec:ad:f6:
e7:13:d2:ba:3c:d3:be:c2:8f:5b:7d:11:56:ca:d3:
bd:12:c3:38:3a:75:6c:47:9b:f5:86:12:03:c6:72:
68:f8:ab:46:37:db:e4:9a:18:c5:60:c0:88:20:49:
de:39:f2:b8:09:d0:aa:be:d2:1e:e8:79:1f:20:9a:
91:67:bb:f6:c5:68:25:1d:ff:e1:89:82:c1:15:b6:
3f:ce:f3:fb:9b:1d:ae:30:c3:b3:5e:4d:54:26:f2:
35:c5:78:0a:d6:b0:5f:9d:a6:f2:8b:54:fa:eb:db:
9e:b3:4f:44:a8:ff:4f:16:a3:19:3b:89:e7:25:d1:
34:ba:f1:66:20:bf:6c:9c:2b:98:9f:71:81:bd:0c:
9e:16:bf:6f:bb:c1:65:83:e2:02:b9:73:f6:51:1b:
8a:51:eb:6e:ae:26:d2:c1:a0:6a:e3:77:26:41:46:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9D:23:8A:FB:D3:62:F9:08:0C:5A:9A:19:9F:95:5B:48:D6:0A:C4
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ff:97:fd:35:af:08:ff:be:52:29:4a:7f:20:79:e5:4b:f0:
d3:ad:06:e1:06:bc:ff:4a:d3:4e:6c:59:bc:60:0a:0e:78:a8:
80:47:b1:78:85:f0:2f:6d:cb:59:d7:9f:b9:7f:27:a0:38:02:
6a:63:b9:27:68:bf:95:76:25:40:84:fa:27:30:e2:4e:d5:45:
21:c0:27:f6:fb:c1:63:22:41:1d:88:0a:14:aa:ae:ab:5b:55:
3f:73:c7:b9:94:03:9f:5f:a1:14:32:87:44:ef:0c:dd:3d:0f:
88:51:21:85:27:99:b2:29:00:4b:ec:84:03:16:ad:c8:ab:b0:
bd:8e:4f:0e:1a:91:e4:cb:b8:27:89:13:50:8c:4d:29:03:5d:
3a:de:5b:1b:90:73:b7:64:f2:76:ce:51:d2:8e:7a:ff:9b:dc:
20:01:b9:c3:6a:7b:9a:a3:29:2b:c5:de:ed:1a:81:b9:9e:96:
fe:23:a9:24:d6:b6:e5:d7:95:88:2d:75:22:b1:02:7f:f5:3d:
e5:0a:3b:a7:13:0d:0d:80:a7:98:d5:0a:9f:fb:af:8f:4b:1f:
00:11:9f:ae:ce:58:b4:7b:12:ba:30:46:fd:63:e9:a4:96:bf:
ad:dc:97:72:2a:aa:2b:40:02:df:c9:63:f7:35:eb:9b:a5:b3:
e7:28:83:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0HsVzfkPE1/PQh9Tsj9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz
NGRiYWQwHhcNMjYwNzI4MTMwMTAyWhcNMjYwNzI5MTMwMTAyWjAzMTEwLwYDVQQD
EyhkZjlkMjM4YWZiZDM2MmY5MDgwYzVhOWExOTlmOTU1YjQ4ZDYwYWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqQ1M3hrw4XvBmEtzeV9mwRVh9+Y
JKxk9qyVOZzqr2soMS6QSx5E72AmYc0fS4BB9bZkOAoEQaz4VwqLf5173Yu7KlVc
YWJoTW1Pgg6Y1Zy/+fG9JvLsrfbnE9K6PNO+wo9bfRFWytO9EsM4OnVsR5v1hhID
xnJo+KtGN9vkmhjFYMCIIEneOfK4CdCqvtIe6HkfIJqRZ7v2xWglHf/hiYLBFbY/
zvP7mx2uMMOzXk1UJvI1xXgK1rBfnabyi1T669ues09EqP9PFqMZO4nnJdE0uvFm
IL9snCuYn3GBvQyeFr9vu8Flg+ICuXP2URuKUeturibSwaBq43cmQUYqAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+dI4r702L5CAxamhmflVtI1grEMB8GA1UdIwQY
MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt
NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4
LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/+X/TWv
CP++UilKfyB55Uvw060G4Qa8/0rTTmxZvGAKDniogEexeIXwL23LWdefuX8noDgC
amO5J2i/lXYlQIT6JzDiTtVFIcAn9vvBYyJBHYgKFKquq1tVP3PHuZQDn1+hFDKH
RO8M3T0PiFEhhSeZsikAS+yEAxatyKuwvY5PDhqR5Mu4J4kTUIxNKQNdOt5bG5Bz
t2Tyds5R0o56/5vcIAG5w2p7mqMpK8Xe7RqBuZ6W/iOpJNa25deViC11IrECf/U9
5Qo7pxMNDYCnmNUKn/uvj0sfABGfrs5YtHsSujBG/WPppJa/rdyXciqqK0AC38lj
9zXrm6Wz5yiDBA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:55 2026 by rpki-client