Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: 4vA8xPJAQJ0tzVfkpit8Et4WF1dUhXTrs7JigL+QSDw=
Subject key identifier: 5B:2F:3F:35:7B:7E:71:2E:4A:5A:97:FB:7E:2B:A0:C1:E7:B7:F0:FA
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 019F17F99AA65DB06FF627A0AA5DD17E286B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 1919
Signing time: Tue 30 Jun 2026 10:01:01 +0000
Manifest this update: Tue 30 Jun 2026 10:01:01 +0000
Manifest next update: Wed 01 Jul 2026 10:01:01 +0000
Files and hashes: 1: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: 3VVk3vLj3MkxZx/1t81MNkz8PtzQIDqs6p/rHq2VOu4=)
2: GYXVPChjE0NPSEdDhucM44Q05y0.roa (hash: Aj116UIxTV5UX+R+IJJ14L/FveXnD0nSIlVBqSjnPM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:9a:a6:5d:b0:6f:f6:27:a0:aa:5d:d1:7e:28:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Jun 30 10:01:01 2026 GMT
Not After : Jul 1 10:01:01 2026 GMT
Subject: CN=5b2f3f357b7e712e4a5a97fb7e2ba0c1e7b7f0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:88:68:17:a7:ff:03:49:c6:fd:d8:0b:d8:
43:0b:c3:9b:40:ec:21:95:67:71:56:6d:b1:ee:87:
15:b3:74:c3:78:b0:53:70:0a:da:b1:6b:4c:c4:d1:
0a:24:ff:86:46:40:1b:80:45:83:32:2a:5f:3e:9a:
15:3a:e1:ea:3a:20:62:29:1c:f3:31:c1:71:fa:bc:
9f:ba:99:ef:f7:2d:8e:64:51:2b:50:6c:8b:ca:3b:
2a:60:af:e1:ad:dd:41:8f:f1:ae:70:96:70:06:0c:
dd:eb:ec:a3:c0:87:77:e5:c4:ae:e3:a2:6f:a5:38:
48:45:2e:16:18:79:f4:6a:0e:d8:7a:6e:3b:f7:c6:
2b:b4:c8:9c:cb:91:c9:82:2f:ba:8e:60:73:ed:f0:
cf:0c:1d:40:af:f7:61:07:a7:a0:9b:6c:99:24:b8:
32:9d:b8:26:6e:a2:f9:f3:73:70:f1:e6:60:93:ec:
30:fe:52:9f:b9:3a:ad:af:67:68:35:48:52:7f:85:
4d:24:82:ad:88:15:70:73:69:4d:73:82:73:69:5d:
cd:11:6f:67:4d:eb:31:bb:a1:c2:86:99:f1:98:4d:
35:14:81:7a:df:cc:5a:80:ae:19:09:60:90:22:56:
bb:ec:3e:e4:0e:b0:b8:2e:be:61:22:5e:99:1a:ad:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2F:3F:35:7B:7E:71:2E:4A:5A:97:FB:7E:2B:A0:C1:E7:B7:F0:FA
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ba:8c:60:b3:a9:5f:e7:e1:ce:d7:44:12:1e:d1:ef:d5:bc:
a3:e0:4c:72:32:9b:ff:81:21:eb:b6:83:10:4c:ed:7d:14:a4:
d0:4e:35:26:e9:19:1f:90:ab:1e:c4:54:35:c3:db:56:4d:2b:
e8:71:2c:47:b3:fe:d4:4e:59:81:3e:50:ad:df:86:57:6b:af:
01:80:05:d9:a9:5f:c2:d7:30:b0:b0:8c:f6:93:3e:6a:61:b4:
3f:57:d7:4a:c6:8c:22:1c:ca:43:a5:c6:2f:c6:87:55:78:e8:
3d:cb:8b:fa:be:51:55:f8:11:0a:1f:df:73:bb:ae:63:fe:46:
ef:01:b7:a4:cc:46:b3:ce:16:0b:74:ef:0f:c2:fc:3a:56:4a:
d4:75:25:3d:80:40:33:f9:35:21:80:46:a2:c9:85:80:4c:c6:
3b:53:f5:cf:ea:bc:62:a1:bc:4d:3a:7d:62:d1:18:07:e6:7a:
e8:a3:b6:57:f7:de:eb:f0:a3:cc:83:81:af:6d:22:ba:93:ad:
dc:9f:b4:07:be:56:f0:b0:04:54:ce:db:b6:4a:ba:9b:64:01:
a9:36:4f:75:01:03:1d:e6:0a:c6:ff:64:13:72:20:10:f4:fb:
61:ec:94:ac:16:b2:37:8c:c2:0b:37:19:c9:08:75:db:6c:cd:
22:8e:da:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+ZqmXbBv9iegql3RfihrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZmIwZDBiZTI5NmRjMWI3MTlkMjQ0MGZiNmFkOWM3NWQw
OGUyZTIwHhcNMjYwNjMwMTAwMTAxWhcNMjYwNzAxMTAwMTAxWjAzMTEwLwYDVQQD
Eyg1YjJmM2YzNTdiN2U3MTJlNGE1YTk3ZmI3ZTJiYTBjMWU3YjdmMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBqIaBen/wNJxv3YC9hDC8ObQOwh
lWdxVm2x7ocVs3TDeLBTcArasWtMxNEKJP+GRkAbgEWDMipfPpoVOuHqOiBiKRzz
McFx+ryfupnv9y2OZFErUGyLyjsqYK/hrd1Bj/GucJZwBgzd6+yjwId35cSu46Jv
pThIRS4WGHn0ag7Yem4798YrtMicy5HJgi+6jmBz7fDPDB1Ar/dhB6egm2yZJLgy
nbgmbqL583Nw8eZgk+ww/lKfuTqtr2doNUhSf4VNJIKtiBVwc2lNc4JzaV3NEW9n
Tesxu6HChpnxmE01FIF638xagK4ZCWCQIla77D7kDrC4Lr5hIl6ZGq38bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsvPzV7fnEuSlqX+34roMHnt/D6MB8GA1UdIwQY
MBaAFPD7DQviltwbcZ0kQPtq2cddCOLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEt
YzBlMjc4NzM2Yzg4LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEtYzBlMjc4NzM2Yzg4
LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULqMYLOp
X+fhztdEEh7R79W8o+BMcjKb/4Eh67aDEEztfRSk0E41JukZH5CrHsRUNcPbVk0r
6HEsR7P+1E5ZgT5Qrd+GV2uvAYAF2alfwtcwsLCM9pM+amG0P1fXSsaMIhzKQ6XG
L8aHVXjoPcuL+r5RVfgRCh/fc7uuY/5G7wG3pMxGs84WC3TvD8L8OlZK1HUlPYBA
M/k1IYBGosmFgEzGO1P1z+q8YqG8TTp9YtEYB+Z66KO2V/fe6/CjzIOBr20iupOt
3J+0B75W8LAEVM7btkq6m2QBqTZPdQEDHeYKxv9kE3IgEPT7YeyUrBayN4zCCzcZ
yQh122zNIo7aWA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:04 2026 by rpki-client