Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: ozEJBcvh98iJe3WiaxhiTSHMAwK5byR3AJZtn9tRvCo=
Subject key identifier: BA:3C:59:97:30:E2:06:C2:C6:6E:D9:12:7F:52:6F:60:E3:7A:40:72
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 019FA8629EEF6577DA1C6E4F76C7BDED5344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 0D9F
Signing time: Tue 28 Jul 2026 11:01:03 +0000
Manifest this update: Tue 28 Jul 2026 11:01:03 +0000
Manifest next update: Wed 29 Jul 2026 11:01:03 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: 1ks0gRkFvEdHBNBUgIcPayN0okIiCudyiNfkIxbf1Kw=)
2: VtA7L-Ct6vFTl20MYPEZtGoRDeo.roa (hash: b0yRFvx0OppSDXs/JuwIRB5JsNwcA2V2X9CKVLLR4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:9e:ef:65:77:da:1c:6e:4f:76:c7:bd:ed:53:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Jul 28 11:01:03 2026 GMT
Not After : Jul 29 11:01:03 2026 GMT
Subject: CN=ba3c599730e206c2c66ed9127f526f60e37a4072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:d2:c5:5b:5b:b8:8e:2d:d3:a4:6b:60:09:
23:d7:5a:c7:aa:19:29:ca:4a:29:b6:eb:f8:be:fa:
7d:17:9b:ab:21:80:81:bb:10:07:14:7c:dd:b2:3c:
88:19:61:02:81:1a:7f:be:38:f6:41:70:a9:7e:6f:
4a:25:ce:c6:67:a0:9c:19:43:a7:cd:71:58:dd:c6:
fa:19:55:b4:51:4f:04:2f:e3:f0:af:30:ec:58:ff:
e8:85:a0:c9:37:0d:ae:7a:a2:42:bb:25:c6:d1:21:
f8:e8:81:16:37:f0:b3:40:9c:92:bd:13:68:69:5d:
f5:a1:b1:97:ed:e4:ca:28:7a:67:19:34:7d:c7:1a:
2f:f7:e2:e0:7a:9c:c9:57:0a:a3:8a:53:a4:c6:fc:
09:5e:57:06:da:c9:ab:7d:93:35:cb:2c:9f:cc:66:
c8:07:a7:31:aa:e2:89:86:87:a4:e1:9b:6b:1e:f2:
15:4c:27:92:13:78:83:ef:ab:50:de:56:14:67:81:
c8:b6:1f:76:da:0b:3f:0d:a7:7f:bc:3b:1c:30:d5:
6c:13:d0:03:17:c7:54:6a:79:4b:2f:f0:71:aa:0e:
9e:f3:f4:4d:a8:21:26:60:d1:86:65:d9:5c:7e:9c:
ee:55:3b:be:04:05:42:e9:9f:cf:32:73:b7:6a:85:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3C:59:97:30:E2:06:C2:C6:6E:D9:12:7F:52:6F:60:E3:7A:40:72
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:24:01:39:06:51:4e:1c:da:f0:46:0a:01:9c:bb:bd:bd:1d:
71:af:0c:7c:ad:9b:8c:c3:f1:81:70:7a:a8:ae:57:29:fa:43:
e0:dd:8b:83:60:59:81:23:af:4d:14:92:de:f5:aa:6f:63:14:
30:94:82:44:d1:97:a1:b0:0e:b8:2c:4a:f3:f6:6c:a4:71:37:
ab:c5:4f:49:f4:25:18:42:f5:d1:ec:8c:ea:9d:44:53:eb:1c:
59:c5:27:b5:bb:e9:dd:dd:ad:0a:94:b2:59:38:83:cb:f5:56:
51:6d:27:94:85:f8:80:06:5f:b6:d0:1c:7e:b4:d3:ca:ce:57:
02:67:d0:52:21:42:21:d1:86:38:de:51:8a:98:82:29:3b:d0:
6e:f9:cb:c6:2a:31:32:e7:30:52:e9:63:69:f4:30:45:20:e6:
27:68:ed:97:fa:6e:90:2b:ab:ca:80:51:b7:7d:60:15:4a:75:
f2:c7:2e:28:dc:9b:6c:17:04:48:86:a8:a4:a1:99:8b:8b:90:
f9:eb:82:04:e4:9b:f1:73:79:97:46:0d:57:de:7c:65:34:bd:
a6:93:7c:09:61:f5:51:9e:6c:14:10:b1:26:2d:5c:c8:02:de:
f5:41:20:0d:c6:1b:f9:9f:dc:04:08:b1:e8:c2:3a:04:10:9c:
af:df:80:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYp7vZXfaHG5Pdse97VNEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjIxOWVjYTU0YWIyNjljOGFhYjliMGZmNDE2ZTcyOTM4
MjliNTkwHhcNMjYwNzI4MTEwMTAzWhcNMjYwNzI5MTEwMTAzWjAzMTEwLwYDVQQD
EyhiYTNjNTk5NzMwZTIwNmMyYzY2ZWQ5MTI3ZjUyNmY2MGUzN2E0MDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaTSxVtbuI4t06RrYAkj11rHqhkp
ykoptuv4vvp9F5urIYCBuxAHFHzdsjyIGWECgRp/vjj2QXCpfm9KJc7GZ6CcGUOn
zXFY3cb6GVW0UU8EL+PwrzDsWP/ohaDJNw2ueqJCuyXG0SH46IEWN/CzQJySvRNo
aV31obGX7eTKKHpnGTR9xxov9+LgepzJVwqjilOkxvwJXlcG2smrfZM1yyyfzGbI
B6cxquKJhoek4ZtrHvIVTCeSE3iD76tQ3lYUZ4HIth922gs/Dad/vDscMNVsE9AD
F8dUanlLL/Bxqg6e8/RNqCEmYNGGZdlcfpzuVTu+BAVC6Z/PMnO3aoUfVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLo8WZcw4gbCxm7ZEn9Sb2DjekByMB8GA1UdIwQY
MBaAFPIiGeylSrJpyKq5sP9BbnKTgptZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jYjE0NjctMjQxYS00YmM1LWJhYTYt
NmYzNjNlODNhNzhlLzEvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9jYjE0NjctMjQxYS00YmM1LWJhYTYtNmYzNjNlODNhNzhl
LzEvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSQBOQZR
Thza8EYKAZy7vb0dca8MfK2bjMPxgXB6qK5XKfpD4N2Lg2BZgSOvTRSS3vWqb2MU
MJSCRNGXobAOuCxK8/ZspHE3q8VPSfQlGEL10eyM6p1EU+scWcUntbvp3d2tCpSy
WTiDy/VWUW0nlIX4gAZfttAcfrTTys5XAmfQUiFCIdGGON5RipiCKTvQbvnLxiox
MucwUuljafQwRSDmJ2jtl/pukCuryoBRt31gFUp18scuKNybbBcESIaopKGZi4uQ
+euCBOSb8XN5l0YNV958ZTS9ppN8CWH1UZ5sFBCxJi1cyALe9UEgDcYb+Z/cBAix
6MI6BBCcr9+AJg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:00:13 2026 by rpki-client