Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
File: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json)
Hash identifier: Z17CpzRZH/XrdRohLqbhO57IQEtqX07LBLLJhEcV5UE=
Subject key identifier: 24:DD:5A:48:78:FB:26:21:C0:81:1D:BA:80:38:4A:B3:F1:59:48:EE
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial: 019FA93E7A2C4450BA6EC8FB75D493F8F354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
Manifest number: 0A6E
Signing time: Tue 28 Jul 2026 15:01:11 +0000
Manifest this update: Tue 28 Jul 2026 15:01:11 +0000
Manifest next update: Wed 29 Jul 2026 15:01:11 +0000
Files and hashes: 1: 47kxAtPzB92ke9Gj45R1nUWgVnw.roa (hash: 46PaY742P+aUzn0nYc8F6xejf4fKE+vYdbMHMykBm6k=)
2: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: 3qla0vcdj6XXnj/uvietMlX46qV+iLzc4iStwLIkfG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:7a:2c:44:50:ba:6e:c8:fb:75:d4:93:f8:f3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Validity
Not Before: Jul 28 15:01:11 2026 GMT
Not After : Jul 29 15:01:11 2026 GMT
Subject: CN=24dd5a4878fb2621c0811dba80384ab3f15948ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:f6:da:ef:7e:84:e5:27:6a:d2:9a:92:29:
e5:07:42:b6:ed:8a:ae:f3:dc:2e:b4:c6:aa:f1:c0:
4e:ef:64:57:df:c8:3b:d2:59:d8:f2:07:b3:0c:c8:
d5:93:6d:ba:7d:3c:71:78:6b:6c:77:96:d0:dc:5f:
3b:cc:dc:80:3d:32:cb:22:2b:50:ce:d9:a3:1a:5d:
64:a5:cd:20:40:c0:fd:61:c5:21:0f:7a:34:2f:a7:
c2:9f:96:69:1e:95:de:4f:95:a9:0b:c4:85:8e:d8:
8d:42:ab:b0:27:ef:fd:69:1f:2e:ac:8d:64:76:78:
09:cf:f2:c2:53:cc:22:99:a2:7a:f5:fb:16:b6:b0:
8b:cf:50:ba:b7:05:cd:46:de:02:d7:d1:9d:99:fd:
81:78:e2:29:8c:c5:b1:78:34:c7:58:b5:cd:18:17:
02:fd:c6:fd:5f:77:43:e5:c3:ad:6b:88:bf:1d:cb:
41:de:9f:95:7a:d9:a8:cb:2c:ae:50:33:df:a0:6f:
51:7d:63:53:90:8b:fa:6a:3d:0a:ce:0f:27:93:23:
09:c4:cb:1e:85:88:67:a7:d3:6e:ef:55:ca:d4:02:
1e:08:b3:e0:1b:c2:84:99:34:01:5e:5d:30:ce:38:
79:74:65:08:d6:46:f8:86:3e:14:83:92:9e:29:31:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DD:5A:48:78:FB:26:21:C0:81:1D:BA:80:38:4A:B3:F1:59:48:EE
X509v3 Authority Key Identifier:
keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f2:18:8b:9a:24:70:9c:5e:f6:09:b9:47:53:dc:f2:21:80:
42:c0:9d:62:b2:be:3f:7e:0b:37:a9:3b:8c:32:02:96:be:3e:
09:6c:38:5a:c5:a5:53:c5:46:2d:24:b0:87:91:17:53:a2:39:
c7:a4:4f:2f:e6:b5:60:f6:8d:f8:4c:e1:c9:3d:8e:cd:6b:a9:
8d:1a:fd:3e:8f:8c:48:72:c5:96:7e:c0:d1:e0:4d:78:eb:c4:
33:53:cd:05:20:77:9e:40:c7:e0:87:8b:72:1a:a3:30:79:f8:
8b:9d:8d:c4:27:95:c7:cd:64:79:b9:c2:7a:12:6f:ab:53:04:
4a:66:03:65:a0:3e:c0:3d:e6:11:2e:11:cd:04:ed:75:e1:a9:
f2:32:38:b6:28:d4:d0:6b:f1:3f:d9:8e:08:93:c5:c6:04:44:
42:40:67:f4:e7:42:8e:44:f8:41:b5:26:b1:4c:86:01:5d:20:
51:10:f5:e1:4f:1b:ff:14:83:bf:45:9c:89:2f:fc:6c:2a:1b:
6a:3c:1e:ba:f3:d1:ba:5b:af:52:56:89:53:94:fc:69:ec:01:
94:bb:0f:7f:bd:b9:63:68:21:0c:4a:ba:31:f3:7f:ec:c1:22:
30:a4:a1:cf:c6:34:41:ce:cc:3a:83:fc:3a:e8:4e:38:20:62:
80:4d:62:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPnosRFC6bsj7ddST+PNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYzA2NDQ2MGVhNmQ1Y2ZkM2Y4OGRjMWNmNGVkMDc1MDJi
YmI2OTkwHhcNMjYwNzI4MTUwMTExWhcNMjYwNzI5MTUwMTExWjAzMTEwLwYDVQQD
EygyNGRkNWE0ODc4ZmIyNjIxYzA4MTFkYmE4MDM4NGFiM2YxNTk0OGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4L22u9+hOUnatKakinlB0K27Yqu
89wutMaq8cBO72RX38g70lnY8gezDMjVk226fTxxeGtsd5bQ3F87zNyAPTLLIitQ
ztmjGl1kpc0gQMD9YcUhD3o0L6fCn5ZpHpXeT5WpC8SFjtiNQquwJ+/9aR8urI1k
dngJz/LCU8wimaJ69fsWtrCLz1C6twXNRt4C19Gdmf2BeOIpjMWxeDTHWLXNGBcC
/cb9X3dD5cOta4i/HctB3p+VetmoyyyuUDPfoG9RfWNTkIv6aj0Kzg8nkyMJxMse
hYhnp9Nu71XK1AIeCLPgG8KEmTQBXl0wzjh5dGUI1kb4hj4Ug5KeKTEV8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTdWkh4+yYhwIEduoA4SrPxWUjuMB8GA1UdIwQY
MBaAFPHAZEYOptXP0/iNwc9O0HUCu7aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUt
YzlhY2ZlM2YzMTIxLzEvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUtYzlhY2ZlM2YzMTIx
LzEvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvIYi5ok
cJxe9gm5R1Pc8iGAQsCdYrK+P34LN6k7jDIClr4+CWw4WsWlU8VGLSSwh5EXU6I5
x6RPL+a1YPaN+EzhyT2OzWupjRr9Po+MSHLFln7A0eBNeOvEM1PNBSB3nkDH4IeL
chqjMHn4i52NxCeVx81kebnCehJvq1MESmYDZaA+wD3mES4RzQTtdeGp8jI4tijU
0GvxP9mOCJPFxgREQkBn9OdCjkT4QbUmsUyGAV0gURD14U8b/xSDv0WciS/8bCob
ajweuvPRuluvUlaJU5T8aewBlLsPf725Y2ghDEq6MfN/7MEiMKShz8Y0Qc7MOoP8
OuhOOCBigE1iRQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:43 2026 by rpki-client