Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: GpCsQQXXAsUYgPtiD4tnBviiaRInlQGMmvPQhPQ23Rg=
Subject key identifier: 45:85:74:48:6D:10:72:34:8D:91:D3:35:F1:B0:C0:ED:77:84:EC:3B
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 019FA93DD0D39705D70745B00802E80D3A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 18D8
Signing time: Tue 28 Jul 2026 15:00:28 +0000
Manifest this update: Tue 28 Jul 2026 15:00:28 +0000
Manifest next update: Wed 29 Jul 2026 15:00:28 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: iKahdIuJcAqLYExzhT8s4IGtfNkDmNk1fykhR15kIuY=)
2: dyj7Xcwg4fvIbgPvLBUgjAO8LDU.roa (hash: y2HtW5TPaDlHi0yiYdSPvHi8+3pJRBtpk7Wjb7tENAo=)
3: ocZPY67okT9wcZzWFKWfg9AUJ1M.roa (hash: iDAiG1YKPh6kU5IMftBrjc5iYiPA+UXefNbDPt+Am8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:d0:d3:97:05:d7:07:45:b0:08:02:e8:0d:3a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Jul 28 15:00:28 2026 GMT
Not After : Jul 29 15:00:28 2026 GMT
Subject: CN=458574486d1072348d91d335f1b0c0ed7784ec3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:c3:e8:cb:68:05:b5:3b:bd:fe:36:bb:67:
61:e5:cf:49:ed:5c:2a:81:e8:6c:f5:8b:07:82:97:
3d:2a:e6:a2:4b:23:5e:fe:43:a9:6f:7f:19:74:a7:
98:70:0d:34:d0:f5:94:d5:e0:ce:31:76:17:8b:ff:
42:56:8b:51:e3:dd:b7:d0:9e:8a:24:fa:00:4f:81:
48:c6:21:75:36:15:6b:1c:f7:6f:40:8c:b7:c1:e4:
5d:33:89:f0:e7:d2:bb:52:9e:eb:81:5c:4b:2b:53:
9c:5a:f3:5a:6e:1e:07:da:a8:bd:d9:c0:6f:04:63:
72:d8:0a:2c:f0:59:34:62:b3:79:c1:bd:87:0d:81:
69:96:2e:2f:5c:5a:bd:ff:e8:d9:5e:cc:7f:89:1d:
46:c9:4b:c1:b4:aa:c0:54:aa:8b:95:46:19:4e:03:
c6:31:47:a6:8e:9a:50:f9:45:b6:b3:22:e3:2d:97:
0d:0e:ae:5a:02:b0:3b:dd:2f:68:ce:58:0e:a8:05:
84:72:02:e6:27:be:18:e4:45:51:24:56:50:30:2e:
5f:53:09:98:9d:62:da:a9:cd:60:01:72:a8:1c:69:
dd:ed:91:c4:c1:3f:c7:fd:c6:0b:74:9c:97:b2:fa:
6a:82:5b:2a:62:79:95:a0:b7:9c:05:90:2b:ac:ee:
03:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:85:74:48:6D:10:72:34:8D:91:D3:35:F1:B0:C0:ED:77:84:EC:3B
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b8:e2:29:c9:f4:3e:07:98:23:3f:d7:ec:a4:1a:a4:31:95:
42:d9:61:d5:30:dd:d2:9e:05:be:e8:df:30:6e:fe:b3:0c:b4:
a5:de:5e:88:5a:ee:65:04:00:2a:a6:d7:50:00:86:4b:eb:82:
82:18:62:ee:4a:61:c0:b2:3e:36:3a:43:c6:81:52:f0:78:cf:
51:b3:9a:9f:8b:11:50:5c:ec:07:bb:c9:9d:15:f5:96:c9:d7:
dd:a8:7e:8f:ad:e5:d6:4f:19:ee:67:c8:28:71:ee:bc:9e:90:
48:28:bd:93:22:99:59:74:b0:8e:29:bd:cd:36:fc:2d:9b:ba:
80:95:1e:a3:db:a2:49:79:7d:c3:5b:18:76:a4:ec:77:cf:3e:
83:dd:3e:00:ce:ab:7b:ac:d8:4e:8c:dc:fd:62:8a:ff:00:e1:
51:08:0f:69:85:2c:6a:60:ff:38:3d:43:3c:da:54:25:75:71:
3d:34:2c:e9:e2:98:35:78:b3:5c:c1:30:69:95:95:42:f9:18:
f9:65:2b:b4:7a:16:87:4e:76:9a:87:34:11:52:a1:cc:b7:19:
44:98:3b:9e:c4:86:c9:b8:83:78:05:e6:f3:d0:84:bd:2f:06:
60:52:95:48:38:19:a2:64:c4:d5:5b:1a:86:b8:53:8e:cc:0b:
49:79:2a:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPdDTlwXXB0WwCALoDTqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2Y0OTYzMzU3ZGRiOTg1NWY5YmFjNGM3ZDk5NWFkYzg5
YTM3MmEwHhcNMjYwNzI4MTUwMDI4WhcNMjYwNzI5MTUwMDI4WjAzMTEwLwYDVQQD
Eyg0NTg1NzQ0ODZkMTA3MjM0OGQ5MWQzMzVmMWIwYzBlZDc3ODRlYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojnD6MtoBbU7vf42u2dh5c9J7Vwq
gehs9YsHgpc9KuaiSyNe/kOpb38ZdKeYcA000PWU1eDOMXYXi/9CVotR49230J6K
JPoAT4FIxiF1NhVrHPdvQIy3weRdM4nw59K7Up7rgVxLK1OcWvNabh4H2qi92cBv
BGNy2Aos8Fk0YrN5wb2HDYFpli4vXFq9/+jZXsx/iR1GyUvBtKrAVKqLlUYZTgPG
MUemjppQ+UW2syLjLZcNDq5aArA73S9ozlgOqAWEcgLmJ74Y5EVRJFZQMC5fUwmY
nWLaqc1gAXKoHGnd7ZHEwT/H/cYLdJyXsvpqglsqYnmVoLecBZArrO4DYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWFdEhtEHI0jZHTNfGwwO13hOw7MB8GA1UdIwQY
MBaAFPDPSWM1fduYVfm6xMfZla3ImjcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAt
NmUwNTZiNjE3ZDJhLzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAtNmUwNTZiNjE3ZDJh
LzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7jiKcn0
PgeYIz/X7KQapDGVQtlh1TDd0p4FvujfMG7+swy0pd5eiFruZQQAKqbXUACGS+uC
ghhi7kphwLI+NjpDxoFS8HjPUbOan4sRUFzsB7vJnRX1lsnX3ah+j63l1k8Z7mfI
KHHuvJ6QSCi9kyKZWXSwjim9zTb8LZu6gJUeo9uiSXl9w1sYdqTsd88+g90+AM6r
e6zYTozc/WKK/wDhUQgPaYUsamD/OD1DPNpUJXVxPTQs6eKYNXizXMEwaZWVQvkY
+WUrtHoWh052moc0EVKhzLcZRJg7nsSGybiDeAXm89CEvS8GYFKVSDgZomTE1Vsa
hrhTjswLSXkqTw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:55 2026 by rpki-client