Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: 8ojTiILLSecTGEpP2zSnwVAL0iFuu7BDsg45nJ5X98o=
Subject key identifier: 93:7F:5D:06:99:FA:90:AC:1B:F0:31:BF:02:24:4D:68:42:C7:0E:D2
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 019FA9AC3963E722A2482DD5DE5CD8EF9931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 0B45
Signing time: Tue 28 Jul 2026 17:01:03 +0000
Manifest this update: Tue 28 Jul 2026 17:01:03 +0000
Manifest next update: Wed 29 Jul 2026 17:01:03 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: 4kSDiEeZwpnbl3Cuo8xsFTGg83/RTOp0A5sQbAjcGs4=)
2: Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa (hash: 7U3vqi/fr/x9T5oXLoF5tZC73nYigGo0Lh9WQ9j33Bo=)
3: yfnXQNQR6qwLfnS_9inVuunPhTE.roa (hash: 6X/o1qnSnBUFZ+wmM2iXaRxxmfNZALk6TxkSNYTjhH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:39:63:e7:22:a2:48:2d:d5:de:5c:d8:ef:99:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Jul 28 17:01:03 2026 GMT
Not After : Jul 29 17:01:03 2026 GMT
Subject: CN=937f5d0699fa90ac1bf031bf02244d6842c70ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:11:48:96:15:ef:36:18:68:54:db:0c:31:
b1:ce:53:fb:f9:37:e7:b8:f1:ed:5f:fc:06:7e:53:
6a:34:30:5b:90:7d:8a:d9:32:96:b4:f5:d7:d7:c2:
4b:2b:0e:f8:2f:fe:85:fe:e4:d6:db:8c:5e:16:bc:
e7:1f:f5:69:2a:d4:b7:27:8a:7c:0f:c8:2a:c9:6e:
56:54:1e:f0:6b:26:32:34:2c:42:34:56:a9:12:33:
be:78:22:78:f3:f1:2b:7c:93:81:5f:78:29:91:d2:
3b:24:69:f3:2f:d9:14:d2:1e:a7:c8:db:ea:b0:55:
18:35:2b:d6:e5:ce:d5:dd:38:0f:a1:e0:e5:52:ff:
dc:27:3a:df:c2:7d:62:38:3e:04:6c:5b:c5:95:97:
bd:d4:1e:32:4c:ef:cb:8e:d4:36:0e:39:2d:0b:12:
2a:47:ab:ba:d5:a5:70:65:f1:3a:52:bd:15:3c:a1:
6d:16:12:4a:57:c9:4a:1f:f0:1e:09:76:50:f1:ad:
f5:e1:f9:ce:a7:49:f5:99:b7:13:ad:bd:e3:d6:7c:
ba:e7:79:c5:9e:fa:c8:17:9e:44:43:a7:5c:e7:31:
8e:7f:26:5c:02:58:57:8b:09:08:d8:a6:c3:57:11:
b8:27:3f:22:e4:cf:11:7f:5c:93:9b:8d:65:f6:5b:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7F:5D:06:99:FA:90:AC:1B:F0:31:BF:02:24:4D:68:42:C7:0E:D2
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9c:60:40:24:82:c5:64:e1:75:cd:02:bc:eb:87:da:1a:c0:
27:df:d6:d3:a7:df:a2:44:0d:d7:97:53:e2:29:48:ae:8a:5c:
e6:8e:1e:2b:7b:b7:91:85:74:b2:db:75:39:ec:a4:7f:13:c6:
be:82:15:36:dd:c2:5b:1a:4a:5d:5b:fb:65:4f:fc:ce:8a:37:
a1:3c:7d:2f:9b:75:a3:dd:fc:3d:aa:4c:c1:85:e3:ad:e3:00:
87:07:18:54:6e:f8:88:18:7d:9c:dc:7c:90:eb:d7:e5:b3:bd:
86:87:d1:d8:11:4d:b7:ff:c6:c6:b6:64:e1:55:9c:cd:13:45:
b0:08:c8:c0:47:b6:87:04:7b:0a:8d:bc:7a:ba:e9:d7:f0:dc:
82:8e:27:02:0b:a3:84:53:5f:2f:a2:ff:bc:64:03:f5:a5:b0:
b7:33:4f:e0:2c:65:b9:38:e1:37:be:6d:1e:42:fb:df:85:4b:
9f:b7:b5:a4:b3:26:c8:1c:09:d3:e8:46:77:46:73:a1:d2:60:
fa:01:b6:67:2e:a0:41:f2:ff:b1:98:17:a2:76:60:09:e9:1e:
98:1e:e4:6f:84:c0:34:44:7e:9b:1a:b3:35:a5:8d:b3:a3:c2:
5f:8e:97:3b:c0:62:43:eb:24:08:2b:29:17:cf:56:1a:7d:99:
77:9f:2c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prDlj5yKiSC3V3lzY75kxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMGJmNDYzMDNmZjU0YTUwNWY1MzNjNTU0MjUxOTIzZTQx
ZjU5MjYwHhcNMjYwNzI4MTcwMTAzWhcNMjYwNzI5MTcwMTAzWjAzMTEwLwYDVQQD
Eyg5MzdmNWQwNjk5ZmE5MGFjMWJmMDMxYmYwMjI0NGQ2ODQyYzcwZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIERSJYV7zYYaFTbDDGxzlP7+Tfn
uPHtX/wGflNqNDBbkH2K2TKWtPXX18JLKw74L/6F/uTW24xeFrznH/VpKtS3J4p8
D8gqyW5WVB7wayYyNCxCNFapEjO+eCJ48/ErfJOBX3gpkdI7JGnzL9kU0h6nyNvq
sFUYNSvW5c7V3TgPoeDlUv/cJzrfwn1iOD4EbFvFlZe91B4yTO/LjtQ2DjktCxIq
R6u61aVwZfE6Ur0VPKFtFhJKV8lKH/AeCXZQ8a314fnOp0n1mbcTrb3j1ny653nF
nvrIF55EQ6dc5zGOfyZcAlhXiwkI2KbDVxG4Jz8i5M8Rf1yTm41l9ltrlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJN/XQaZ+pCsG/AxvwIkTWhCxw7SMB8GA1UdIwQY
MBaAFPIL9GMD/1SlBfUzxVQlGSPkH1kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84MTU1OTAtOTUxYy00YzFmLTg2OTct
YzM2OTQwODhmMzRhLzEvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84MTU1OTAtOTUxYy00YzFmLTg2OTctYzM2OTQwODhmMzRh
LzEvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpxgQCSC
xWThdc0CvOuH2hrAJ9/W06ffokQN15dT4ilIropc5o4eK3u3kYV0stt1OeykfxPG
voIVNt3CWxpKXVv7ZU/8zoo3oTx9L5t1o938PapMwYXjreMAhwcYVG74iBh9nNx8
kOvX5bO9hofR2BFNt//GxrZk4VWczRNFsAjIwEe2hwR7Co28errp1/Dcgo4nAguj
hFNfL6L/vGQD9aWwtzNP4CxluTjhN75tHkL734VLn7e1pLMmyBwJ0+hGd0ZzodJg
+gG2Zy6gQfL/sZgXonZgCekemB7kb4TANER+mxqzNaWNs6PCX46XO8BiQ+skCCsp
F89WGn2Zd58sAw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:01 2026 by rpki-client