Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: 3LTNhNudL5/jRd4DPdBVMl3+777MT6+4Ngpz57bAfdA=
Subject key identifier: 7B:0E:B7:42:E1:AB:80:80:25:89:38:41:8C:EF:EE:6B:F0:11:BB:0A
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 019FA7F4109CF3FF3844762BD9277DC077AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 1264
Signing time: Tue 28 Jul 2026 09:00:17 +0000
Manifest this update: Tue 28 Jul 2026 09:00:17 +0000
Manifest next update: Wed 29 Jul 2026 09:00:17 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: TTlQeq5o4TXkOYW4XEPlS6yOV6IAVZ0EGPMqZ667wbU=)
2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:10:9c:f3:ff:38:44:76:2b:d9:27:7d:c0:77:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Jul 28 09:00:17 2026 GMT
Not After : Jul 29 09:00:17 2026 GMT
Subject: CN=7b0eb742e1ab8080258938418cefee6bf011bb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:a4:82:9f:3a:58:2f:48:2e:b8:2a:18:b8:
cc:61:b0:e9:a1:1a:69:bc:92:5f:a6:f2:85:15:ef:
5e:93:de:1a:8c:5d:9c:51:91:b2:b8:c0:62:d9:c8:
3c:30:db:d4:5a:84:43:dd:58:62:fc:73:02:3f:b3:
ad:7d:37:83:f9:8a:09:87:c8:dd:24:b2:7b:e5:b0:
20:c7:06:39:a8:c6:f6:62:ba:3d:d0:01:92:f1:13:
b3:11:d2:a3:23:64:ed:69:e5:56:78:1f:03:36:d8:
4d:29:1a:02:9b:43:b6:d3:8e:30:ad:4d:62:a7:b2:
56:bb:41:c0:44:52:eb:0e:1c:bc:91:17:f0:d6:2b:
03:c6:33:2d:11:9e:79:eb:63:e7:93:b2:a5:bf:d0:
79:6d:53:52:b1:c5:c8:2f:d6:0f:37:00:34:62:8d:
b3:34:e5:70:c8:30:b2:ee:1f:74:20:3d:ad:39:b4:
26:fe:cc:3f:37:69:02:31:75:06:2d:0e:09:d9:3a:
e9:ed:85:3a:27:c2:88:38:6c:5d:76:0d:d6:26:32:
10:bc:6c:6c:48:69:22:88:b9:61:3a:e7:be:1d:eb:
f7:fc:d4:16:3e:b5:1a:f8:a7:be:b1:4f:73:8e:0a:
4d:52:86:ca:a2:de:cf:d4:03:69:85:d4:5e:87:8f:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:B7:42:E1:AB:80:80:25:89:38:41:8C:EF:EE:6B:F0:11:BB:0A
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:37:d6:db:be:bb:87:3e:56:1b:43:a0:bc:ff:22:96:90:12:
71:59:3e:07:db:0c:0e:e8:b5:f3:f9:f2:7d:8d:f1:23:47:2c:
2d:51:88:9d:15:ed:26:28:d6:ef:7f:0e:ae:8f:55:2a:be:5c:
1a:2f:c1:b0:e0:32:04:ea:bd:75:5b:88:53:57:3b:a2:06:07:
a1:23:a3:98:c0:eb:58:d4:7d:32:4c:9b:53:0a:5c:7c:77:83:
bd:7f:7e:b7:32:65:db:fb:94:5a:04:a4:87:7e:ef:b2:de:f6:
13:a5:63:d7:a4:4c:15:8c:53:4f:89:d0:08:4a:3e:8f:84:ad:
fa:7f:20:51:a2:dc:06:85:c3:72:a3:c5:66:3b:95:c4:97:08:
66:5e:83:0d:42:8d:b5:33:4a:e4:71:2f:73:1e:55:20:d6:4f:
b5:06:81:fb:54:5a:f7:7d:1d:f1:1f:c7:fc:53:39:81:c1:ea:
b0:0e:f6:4f:91:2f:fa:9a:e7:4f:00:38:3f:bb:de:8a:fb:d5:
08:49:3e:33:7a:ae:4c:d4:71:dc:db:d6:76:ed:09:9f:e0:cf:
19:b8:f2:79:75:59:13:68:01:0a:7b:f9:6f:7e:34:4a:f6:ec:
ef:75:48:f6:ac:35:13:1a:e0:92:9a:90:43:88:6d:32:54:ce:
ea:84:21:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+n9BCc8/84RHYr2Sd9wHevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjkzMGUyM2IwOGExNWNjZDRkYzlhYjE4MjljNjA3ZmVk
ZGU4YTUwHhcNMjYwNzI4MDkwMDE3WhcNMjYwNzI5MDkwMDE3WjAzMTEwLwYDVQQD
Eyg3YjBlYjc0MmUxYWI4MDgwMjU4OTM4NDE4Y2VmZWU2YmYwMTFiYjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7ukgp86WC9ILrgqGLjMYbDpoRpp
vJJfpvKFFe9ek94ajF2cUZGyuMBi2cg8MNvUWoRD3Vhi/HMCP7OtfTeD+YoJh8jd
JLJ75bAgxwY5qMb2Yro90AGS8ROzEdKjI2TtaeVWeB8DNthNKRoCm0O2044wrU1i
p7JWu0HARFLrDhy8kRfw1isDxjMtEZ5562Pnk7Klv9B5bVNSscXIL9YPNwA0Yo2z
NOVwyDCy7h90ID2tObQm/sw/N2kCMXUGLQ4J2Trp7YU6J8KIOGxddg3WJjIQvGxs
SGkiiLlhOue+Hev3/NQWPrUa+Ke+sU9zjgpNUobKot7P1ANphdReh4/YSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsOt0Lhq4CAJYk4QYzv7mvwEbsKMB8GA1UdIwQY
MBaAFPH5MOI7CKFczU3Jqxgpxgf+3eilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEt
YWVhNzE0ZWM1MTEzLzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEtYWVhNzE0ZWM1MTEz
LzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjfW2767
hz5WG0OgvP8ilpAScVk+B9sMDui18/nyfY3xI0csLVGInRXtJijW738Oro9VKr5c
Gi/BsOAyBOq9dVuIU1c7ogYHoSOjmMDrWNR9MkybUwpcfHeDvX9+tzJl2/uUWgSk
h37vst72E6Vj16RMFYxTT4nQCEo+j4St+n8gUaLcBoXDcqPFZjuVxJcIZl6DDUKN
tTNK5HEvcx5VINZPtQaB+1Ra930d8R/H/FM5gcHqsA72T5Ev+prnTwA4P7veivvV
CEk+M3quTNRx3NvWdu0Jn+DPGbjyeXVZE2gBCnv5b340Svbs73VI9qw1ExrgkpqQ
Q4htMlTO6oQh2g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:46 2026 by rpki-client