Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: kX3EjHSyrKKMZ9SBdmwRVkBMM7O63A6WZifzbmDGb8Y=
Subject key identifier: 7F:F2:CD:AB:79:EF:EF:48:57:11:B9:4D:48:DA:68:75:01:04:55:D3
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 019FA1164357B6FDC46124DC3192BAB47B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: 0479
Signing time: Mon 27 Jul 2026 01:00:18 +0000
Manifest this update: Mon 27 Jul 2026 01:00:18 +0000
Manifest next update: Tue 28 Jul 2026 01:00:18 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: T3/FiZ89EwwEx7hii9VwIKG3N04tWm/zDjpsAZWSaFw=)
2: Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa (hash: KhcCVOzCZNjhliNrDxOy2a8F19I6yxCDsbXLuV/7DNo=)
3: nTgR9PLLMxj6DumejGUp3QxDic4.roa (hash: 6jyqKs+vhmdq7Zq8Pff708q5roK5Wwnu9eGjYqiN4qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:43:57:b6:fd:c4:61:24:dc:31:92:ba:b4:7b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Jul 27 01:00:18 2026 GMT
Not After : Jul 28 01:00:18 2026 GMT
Subject: CN=7ff2cdab79efef485711b94d48da6875010455d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9f:a9:f9:4f:19:d9:75:47:80:a5:db:f7:6c:
88:2f:8c:cf:9a:12:53:30:83:19:87:8a:86:4a:ab:
2c:be:3d:7a:e7:a1:48:a2:6f:9c:38:9d:14:42:25:
a4:09:3b:be:8f:10:8c:90:76:20:5a:e6:9c:88:ad:
5d:dc:35:1b:57:94:9c:8f:1d:84:19:79:53:bc:e3:
fc:8c:1a:75:7f:87:12:24:47:e9:f3:b1:15:c7:49:
e0:da:b8:b6:6a:7e:b2:fa:de:a7:b0:ae:ea:82:de:
ed:2c:d5:4f:9d:d3:11:09:e9:f2:8a:25:a0:32:64:
58:6e:93:25:22:2a:7b:e0:2a:0d:b9:b2:aa:27:46:
ae:50:f2:bc:cf:e1:c5:56:82:66:da:01:37:84:49:
04:28:04:9b:49:d6:ec:82:eb:0f:22:0f:63:75:ba:
a9:bc:69:2c:c3:a6:2a:af:4a:90:9b:c0:33:fa:6c:
0b:f6:c2:67:b4:75:48:c5:e4:dd:f5:0d:81:c2:e9:
75:ca:6d:35:c7:13:50:79:15:cd:d9:1d:d7:a6:96:
85:fe:3e:68:97:0b:ac:71:13:42:a1:d6:31:28:3a:
d4:0f:f2:1f:8e:f2:f5:b7:e6:80:6e:2d:07:a9:80:
4c:35:1c:9f:a8:4b:03:88:e3:1e:0b:47:4e:3a:5f:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:CD:AB:79:EF:EF:48:57:11:B9:4D:48:DA:68:75:01:04:55:D3
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b0:72:1e:23:82:12:c4:45:6d:ab:40:7d:06:e5:32:bd:0b:
3f:4c:8e:7a:78:18:ef:98:3f:cc:c0:6c:1b:dd:04:82:8b:8a:
c1:9e:c6:76:a9:c2:5d:65:18:4b:d3:a2:d5:6c:e5:42:ec:7c:
06:f3:bf:d0:00:92:7a:0e:59:0d:ae:83:82:b6:c9:31:66:a8:
13:d9:c0:8c:3e:9d:b5:51:4c:9c:db:1f:60:48:ce:53:64:00:
74:4f:4e:53:53:ab:be:5c:43:df:2c:88:7a:86:e2:80:12:c5:
d5:63:44:85:3f:6f:e5:dc:18:ef:cc:71:1c:0f:29:ee:90:87:
34:2a:d9:95:9d:31:1f:5c:dd:eb:9e:e1:f5:92:b7:a0:68:df:
55:ca:c3:7d:44:9f:1a:5e:63:4a:b5:f4:72:33:49:ec:8e:52:
d4:7f:49:78:f1:a0:4e:33:09:ee:c0:55:83:d0:37:14:0a:35:
62:b5:05:1e:9b:eb:0e:11:25:21:67:8b:8a:19:bf:33:c7:68:
3e:82:d8:96:b6:cd:2c:ec:e4:70:29:6a:70:79:91:e7:40:c4:
84:6e:69:ef:cf:0c:7b:d7:b9:a3:55:ae:0c:42:5e:27:09:2a:
5f:4b:b4:f1:e2:67:d4:bf:1a:e8:76:b4:ec:83:b8:e4:5b:c0:
41:62:e7:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hFkNXtv3EYSTcMZK6tHsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2YyZGI3MmFhYjQzNWI5ZGFhMmIxZjdlMWE4YTMyNzY3
Nzg4YmUwHhcNMjYwNzI3MDEwMDE4WhcNMjYwNzI4MDEwMDE4WjAzMTEwLwYDVQQD
Eyg3ZmYyY2RhYjc5ZWZlZjQ4NTcxMWI5NGQ0OGRhNjg3NTAxMDQ1NWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5p+p+U8Z2XVHgKXb92yIL4zPmhJT
MIMZh4qGSqssvj1656FIom+cOJ0UQiWkCTu+jxCMkHYgWuaciK1d3DUbV5Scjx2E
GXlTvOP8jBp1f4cSJEfp87EVx0ng2ri2an6y+t6nsK7qgt7tLNVPndMRCenyiiWg
MmRYbpMlIip74CoNubKqJ0auUPK8z+HFVoJm2gE3hEkEKASbSdbsgusPIg9jdbqp
vGksw6Yqr0qQm8Az+mwL9sJntHVIxeTd9Q2Bwul1ym01xxNQeRXN2R3XppaF/j5o
lwuscRNCodYxKDrUD/IfjvL1t+aAbi0HqYBMNRyfqEsDiOMeC0dOOl+YIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/yzat57+9IVxG5TUjaaHUBBFXTMB8GA1UdIwQY
MBaAFPM/Lbcqq0NbnaorH34aijJ2d4i+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEt
YzZjMDZlMmIzYTlmLzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEtYzZjMDZlMmIzYTlm
LzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7ByHiOC
EsRFbatAfQblMr0LP0yOengY75g/zMBsG90EgouKwZ7GdqnCXWUYS9Oi1WzlQux8
BvO/0ACSeg5ZDa6DgrbJMWaoE9nAjD6dtVFMnNsfYEjOU2QAdE9OU1OrvlxD3yyI
eobigBLF1WNEhT9v5dwY78xxHA8p7pCHNCrZlZ0xH1zd657h9ZK3oGjfVcrDfUSf
Gl5jSrX0cjNJ7I5S1H9JePGgTjMJ7sBVg9A3FAo1YrUFHpvrDhElIWeLihm/M8do
PoLYlrbNLOzkcClqcHmR50DEhG5p788Me9e5o1WuDEJeJwkqX0u08eJn1L8a6Ha0
7IO45FvAQWLnNA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:36:56 2026 by rpki-client