Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.mft
File: 8BEN0EuQ0jaaSydktx_TjQUIX-w.mft (raw, json)
Hash identifier: yDugLuSQXbhSESACZw9+HBcIu+ksO56wVVwqtZIBDCE=
Subject key identifier: 28:98:EF:CE:45:C5:93:29:F1:4D:BE:A1:48:1C:E4:74:8E:AE:C4:FE
Authority key identifier: F0:11:0D:D0:4B:90:D2:36:9A:4B:27:64:B7:1F:D3:8D:05:08:5F:EC
Certificate issuer: /CN=f0110dd04b90d2369a4b2764b71fd38d05085fec
Certificate serial: 019F85D6F28735BB41393C4B0BBB984A64D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BEN0EuQ0jaaSydktx_TjQUIX-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:24 +0000
Manifest this update: Tue 21 Jul 2026 18:01:24 +0000
Manifest next update: Wed 22 Jul 2026 18:01:24 +0000
Files and hashes: 1: 4ZQr3EKg7XLkj-p9Nvw6XTVpPbo.roa (hash: exTQU9dmfmZhdPx8oGiUL/j0MT0I/USYBEi+eDQjOJc=)
2: 8BEN0EuQ0jaaSydktx_TjQUIX-w.crl (hash: Qj3GtWYDbWWQvOfRS2iCQZZnKW+aA2yhgcQOQShfOOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BEN0EuQ0jaaSydktx_TjQUIX-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:f2:87:35:bb:41:39:3c:4b:0b:bb:98:4a:64:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0110dd04b90d2369a4b2764b71fd38d05085fec
Validity
Not Before: Jul 21 18:01:24 2026 GMT
Not After : Jul 22 18:01:24 2026 GMT
Subject: CN=2898efce45c59329f14dbea1481ce4748eaec4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:0c:03:19:29:d7:1d:5d:36:ab:42:8c:84:
bb:cc:83:37:57:d0:79:68:b9:7d:9d:bd:f4:f3:a1:
66:db:75:bf:a0:79:d6:54:78:9c:57:a4:62:31:35:
38:97:88:70:90:46:77:31:5e:7c:a7:bc:dc:02:b0:
a9:c9:01:ed:7e:d0:21:9d:ef:73:21:a7:16:69:34:
56:1c:bf:de:d0:75:38:ce:58:d0:d4:12:a0:44:cb:
09:3c:f1:62:93:6e:8e:9e:33:2b:5f:2a:0c:70:a0:
32:a4:a2:e5:e6:fe:53:7a:ee:1e:b9:c5:22:23:c3:
78:99:c2:fb:29:ef:c8:c6:75:ab:60:71:91:3b:09:
3c:c7:77:ab:b1:99:25:9c:6a:9c:4b:14:29:6a:78:
35:92:4e:22:43:f8:fb:64:43:39:a9:9c:5d:a2:70:
66:ad:97:2c:e8:94:c9:7c:cd:28:f9:45:63:31:5e:
e2:a1:80:83:46:04:1f:72:c5:89:3d:de:c3:d1:ff:
b6:2e:61:3b:77:f7:27:03:46:b6:ac:dc:3a:36:b0:
d3:90:d5:43:1a:f6:bd:8a:26:b9:68:3b:74:2a:e6:
cc:55:26:b1:28:80:0a:99:dd:2b:04:80:c9:ee:f9:
5d:fd:e3:3e:c8:9b:67:4c:71:93:07:da:e9:a7:18:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:98:EF:CE:45:C5:93:29:F1:4D:BE:A1:48:1C:E4:74:8E:AE:C4:FE
X509v3 Authority Key Identifier:
keyid:F0:11:0D:D0:4B:90:D2:36:9A:4B:27:64:B7:1F:D3:8D:05:08:5F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BEN0EuQ0jaaSydktx_TjQUIX-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fb:08:34:80:13:ad:8c:e4:01:c6:87:5f:fd:48:cc:a3:0e:
f9:c2:83:1b:52:e7:f7:f2:c7:fc:62:c3:71:b8:7d:30:f3:d3:
42:cb:91:bf:0c:dc:01:b3:1e:79:ce:a5:59:5b:f3:a3:e3:a9:
7c:5b:5f:cb:f0:8c:cd:ca:1a:35:f5:c9:9b:89:a2:5b:42:80:
c1:43:a0:aa:ae:30:e5:47:16:03:ea:c5:a0:24:b6:4e:39:d3:
51:a8:de:2a:e7:e7:cc:c1:45:21:b8:77:f5:a4:dc:24:47:c5:
32:3d:2a:2a:06:81:67:68:7f:c1:ab:be:e0:13:2b:a3:54:f6:
5e:4f:d6:3d:da:68:82:69:08:4c:07:ed:f3:fd:2c:e4:ac:00:
2d:cb:30:2d:aa:c3:c9:94:16:29:b0:a9:80:26:11:ab:a5:dd:
73:ba:6e:5f:37:d1:cc:9c:e6:c1:6f:7d:af:25:5d:f1:da:a4:
42:37:b7:e0:b9:58:0b:01:a3:c8:a4:2a:05:e4:e1:85:46:7c:
ef:31:c8:b3:cb:91:a5:44:df:d2:53:ff:18:d3:41:74:c2:db:
09:63:4e:e0:a6:20:c1:9a:27:a8:25:95:7d:12:62:87:73:ab:
06:27:72:68:94:cf:86:2d:42:ea:a4:9d:37:b1:ac:7a:0a:38:
aa:e3:2f:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1vKHNbtBOTxLC7uYSmTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMTEwZGQwNGI5MGQyMzY5YTRiMjc2NGI3MWZkMzhkMDUw
ODVmZWMwHhcNMjYwNzIxMTgwMTI0WhcNMjYwNzIyMTgwMTI0WjAzMTEwLwYDVQQD
EygyODk4ZWZjZTQ1YzU5MzI5ZjE0ZGJlYTE0ODFjZTQ3NDhlYWVjNGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk4MAxkp1x1dNqtCjIS7zIM3V9B5
aLl9nb3086Fm23W/oHnWVHicV6RiMTU4l4hwkEZ3MV58p7zcArCpyQHtftAhne9z
IacWaTRWHL/e0HU4zljQ1BKgRMsJPPFik26OnjMrXyoMcKAypKLl5v5Teu4eucUi
I8N4mcL7Ke/IxnWrYHGROwk8x3ersZklnGqcSxQpang1kk4iQ/j7ZEM5qZxdonBm
rZcs6JTJfM0o+UVjMV7ioYCDRgQfcsWJPd7D0f+2LmE7d/cnA0a2rNw6NrDTkNVD
Gva9iia5aDt0KubMVSaxKIAKmd0rBIDJ7vld/eM+yJtnTHGTB9rppxhH4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiY785FxZMp8U2+oUgc5HSOrsT+MB8GA1UdIwQY
MBaAFPARDdBLkNI2mksnZLcf040FCF/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJFTjBFdVEwamFhU3lka3R4X1RqUVVJWC13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAt
NTMzNGU2YjhjNWZlLzEvOEJFTjBFdVEwamFhU3lka3R4X1RqUVVJWC13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAtNTMzNGU2YjhjNWZl
LzEvOEJFTjBFdVEwamFhU3lka3R4X1RqUVVJWC13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPsINIAT
rYzkAcaHX/1IzKMO+cKDG1Ln9/LH/GLDcbh9MPPTQsuRvwzcAbMeec6lWVvzo+Op
fFtfy/CMzcoaNfXJm4miW0KAwUOgqq4w5UcWA+rFoCS2TjnTUajeKufnzMFFIbh3
9aTcJEfFMj0qKgaBZ2h/wau+4BMro1T2Xk/WPdpogmkITAft8/0s5KwALcswLarD
yZQWKbCpgCYRq6Xdc7puXzfRzJzmwW99ryVd8dqkQje34LlYCwGjyKQqBeThhUZ8
7zHIs8uRpUTf0lP/GNNBdMLbCWNO4KYgwZonqCWVfRJih3OrBidyaJTPhi1C6qSd
N7Gsego4quMv5Q==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:43:48 2026 by rpki-client