Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: DTjF1fGfZAVtWgFZytEvCp86WlOw7VITaxX1wT9nqrg=
Subject key identifier: 2B:31:E3:65:75:78:5E:C7:5B:1B:68:33:52:40:07:5F:8D:43:C7:CA
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 019FAD1AAC4EBC6EAE7A516AF1BDB4641505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 09FC
Signing time: Wed 29 Jul 2026 09:00:34 +0000
Manifest this update: Wed 29 Jul 2026 09:00:34 +0000
Manifest next update: Thu 30 Jul 2026 09:00:34 +0000
Files and hashes: 1: 3gZgHbD-hrqcq_Pjyy1piMjeRhE.roa (hash: gOXLcL67YsVsuGlPynBLLbxradMX9qPaxCdbkscokfQ=)
2: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: ip5a8vpgC3nE6YcCa0OAP9erU6OOvOIA/OYkVGgqUas=)
3: t0K4HGcM7SYmbee1zvHwQlP_JGY.roa (hash: AGbfQJGLAl/VV+53Q0j0FQio/VcRd8jWfQfbs9NOEoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:ac:4e:bc:6e:ae:7a:51:6a:f1:bd:b4:64:15:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Jul 29 09:00:34 2026 GMT
Not After : Jul 30 09:00:34 2026 GMT
Subject: CN=2b31e36575785ec75b1b68335240075f8d43c7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:31:b3:40:be:3a:61:10:30:3f:33:ff:12:
c7:71:69:fa:9c:a1:eb:1a:b2:09:ed:26:22:6c:96:
0e:94:5d:d9:af:7b:72:f1:2f:b7:0f:98:be:b7:3f:
53:1d:82:8d:c8:63:7c:df:c9:bb:47:b7:b7:cf:b8:
d4:a6:ee:15:34:bd:38:7d:24:99:33:ae:af:ab:7d:
7c:ea:2a:7a:f8:ca:d3:30:94:2a:5b:5f:4f:b0:30:
3a:ee:c2:16:4d:27:c3:df:99:1b:a7:aa:84:fd:53:
d4:ee:46:4e:c2:d5:0d:61:41:b7:92:8b:77:f7:5d:
80:04:3f:4e:86:f3:8c:c3:1f:55:7c:84:cd:14:66:
3f:01:10:2c:4c:41:ee:32:22:61:52:ca:b7:13:fd:
b2:f5:52:b3:e2:06:de:32:67:dc:63:b7:99:ec:f5:
c6:b6:28:91:9f:91:6c:34:31:66:ec:12:d9:ef:5e:
c6:eb:1d:1f:92:b5:fd:3c:4e:db:9a:c4:9d:af:8a:
67:b2:fe:d6:5d:a8:1e:72:53:30:95:0e:6e:c7:17:
b8:7c:de:00:df:01:01:f2:72:a2:51:d9:c2:d5:a9:
f4:39:11:df:cf:e9:8d:57:48:94:ba:b5:f4:d4:e2:
bb:35:e4:3b:fa:2b:f6:12:6c:ba:07:a9:15:40:68:
55:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:31:E3:65:75:78:5E:C7:5B:1B:68:33:52:40:07:5F:8D:43:C7:CA
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cf:09:06:19:15:b8:50:f7:74:9e:82:5f:30:fe:8d:9c:e3:
73:dd:7c:8e:0c:d7:c0:75:99:7f:c3:59:56:ed:46:b0:6a:d2:
1f:0f:f0:82:06:11:16:09:ea:6d:ec:05:c8:3f:f9:1c:63:9c:
0e:3c:92:e6:4f:7c:09:15:c2:b1:e0:5a:74:30:2b:72:11:b2:
aa:fb:67:7b:de:e0:a3:1a:6d:8b:06:eb:24:9f:c9:26:bb:b5:
a9:a2:15:99:10:9e:8e:ab:80:65:d5:e3:76:cd:82:51:aa:8c:
4d:6e:3d:cc:8d:17:49:c5:20:8d:fe:c1:92:31:f1:a8:af:01:
ff:a2:60:7c:ad:cc:41:0a:62:e1:49:02:17:82:d6:4d:dd:9c:
64:6a:84:b7:e2:a4:7c:e1:91:61:df:15:9c:91:f8:75:51:93:
07:77:89:a6:86:8b:c4:5f:01:35:0f:75:10:d0:d9:51:d0:31:
b0:89:58:4e:e1:55:c1:2c:1d:3b:3f:3d:33:3f:20:56:f4:69:
20:61:93:11:d4:2b:f6:68:ff:57:10:82:88:5c:d9:98:e1:70:
8d:0a:1c:3c:09:df:57:7b:a4:93:a1:e4:34:40:90:b8:2f:2f:
18:9e:7e:21:0c:c3:55:75:3f:25:3e:b1:01:48:ac:fa:fd:45:
8e:55:4b:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGqxOvG6uelFq8b20ZBUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzNlNmNiMmViMDJmY2M3NDJiYWY5MWFiODY1YzliMjBk
NjQ4NGIwHhcNMjYwNzI5MDkwMDM0WhcNMjYwNzMwMDkwMDM0WjAzMTEwLwYDVQQD
EygyYjMxZTM2NTc1Nzg1ZWM3NWIxYjY4MzM1MjQwMDc1ZjhkNDNjN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhMxs0C+OmEQMD8z/xLHcWn6nKHr
GrIJ7SYibJYOlF3Zr3ty8S+3D5i+tz9THYKNyGN838m7R7e3z7jUpu4VNL04fSSZ
M66vq3186ip6+MrTMJQqW19PsDA67sIWTSfD35kbp6qE/VPU7kZOwtUNYUG3kot3
912ABD9OhvOMwx9VfITNFGY/ARAsTEHuMiJhUsq3E/2y9VKz4gbeMmfcY7eZ7PXG
tiiRn5FsNDFm7BLZ717G6x0fkrX9PE7bmsSdr4pnsv7WXageclMwlQ5uxxe4fN4A
3wEB8nKiUdnC1an0ORHfz+mNV0iUurX01OK7NeQ7+iv2Emy6B6kVQGhV/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsx42V1eF7HWxtoM1JAB1+NQ8fKMB8GA1UdIwQY
MBaAFGvD5ssusC/MdCuvkauGXJsg1khLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYt
MTEwOThhYTJlYmMzLzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYtMTEwOThhYTJlYmMz
LzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfM8JBhkV
uFD3dJ6CXzD+jZzjc918jgzXwHWZf8NZVu1GsGrSHw/wggYRFgnqbewFyD/5HGOc
DjyS5k98CRXCseBadDArchGyqvtne97goxptiwbrJJ/JJru1qaIVmRCejquAZdXj
ds2CUaqMTW49zI0XScUgjf7BkjHxqK8B/6JgfK3MQQpi4UkCF4LWTd2cZGqEt+Kk
fOGRYd8VnJH4dVGTB3eJpoaLxF8BNQ91ENDZUdAxsIlYTuFVwSwdOz89Mz8gVvRp
IGGTEdQr9mj/VxCCiFzZmOFwjQocPAnfV3ukk6HkNECQuC8vGJ5+IQzDVXU/JT6x
AUis+v1FjlVLLQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:11:30 2026 by rpki-client