Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: EjfAwAW2sKIT0A5XsnKdQyI0Egn3LVSkFjJrbRYSEtY=
Subject key identifier: D6:A0:9E:62:F6:CA:47:0A:5E:9C:32:76:21:76:F7:10:A8:B8:52:75
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 019EB76A5397984C9D15FE234EB83AF0BEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: 0400
Signing time: Thu 11 Jun 2026 16:00:59 +0000
Manifest this update: Thu 11 Jun 2026 16:00:59 +0000
Manifest next update: Fri 12 Jun 2026 16:00:59 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: 3jGW5cvgU2LrY1fBJs/VZAiMW3/fRSatAndbXUzfOoc=)
2: Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa (hash: KhcCVOzCZNjhliNrDxOy2a8F19I6yxCDsbXLuV/7DNo=)
3: nTgR9PLLMxj6DumejGUp3QxDic4.roa (hash: 6jyqKs+vhmdq7Zq8Pff708q5roK5Wwnu9eGjYqiN4qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:53:97:98:4c:9d:15:fe:23:4e:b8:3a:f0:be:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Jun 11 16:00:59 2026 GMT
Not After : Jun 12 16:00:59 2026 GMT
Subject: CN=d6a09e62f6ca470a5e9c32762176f710a8b85275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:51:e4:3c:7d:18:c7:fd:7b:87:77:79:6d:
fe:dc:69:dc:6a:3c:2c:6e:f8:4a:18:65:d2:13:d3:
f1:1b:a7:ad:a9:d8:c3:c9:e5:44:d4:66:93:b8:86:
2c:21:71:3d:17:2b:f8:1b:91:94:4f:09:14:af:9f:
35:8d:ef:fa:7c:a1:ea:95:58:f6:01:fb:6b:99:ce:
5e:ce:ce:cb:c3:53:02:44:7b:fc:76:9c:98:aa:9a:
5e:d5:41:07:d4:1a:0a:36:00:98:70:6f:3c:3d:35:
75:d6:06:18:fc:37:cf:bf:a1:b9:e4:06:70:57:f1:
30:96:8f:6b:4e:7a:d6:8d:af:15:6b:bc:9c:65:78:
5c:ac:86:c9:21:f8:74:f6:37:76:0a:ff:4d:c1:b5:
16:47:9d:68:00:dc:a0:53:ed:7b:a9:0d:8c:c5:4f:
08:92:4d:99:06:49:66:5e:f7:56:e0:61:66:ea:fb:
e3:db:c9:ee:57:82:2d:c3:04:d5:59:12:2e:64:30:
c7:23:e3:01:41:a9:56:0d:95:09:27:ac:38:93:81:
aa:30:b1:e9:3f:d4:8b:6c:4f:42:64:86:90:ab:8c:
f2:0b:47:f0:18:b9:c8:00:70:d8:5d:47:f4:f2:61:
a1:ae:1b:79:e0:cc:58:31:72:64:d1:87:4c:1e:8d:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:9E:62:F6:CA:47:0A:5E:9C:32:76:21:76:F7:10:A8:B8:52:75
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:a5:73:c1:06:dd:c2:c7:57:03:fd:be:2c:dc:57:22:e3:3c:
c1:d1:95:04:f4:84:ab:79:1c:33:3e:b3:61:b6:66:57:13:f3:
19:0f:2f:c0:52:9e:e9:d7:c4:9a:40:60:3d:9f:c1:26:cc:87:
43:bb:2d:4f:ac:c5:7b:09:bd:04:f4:f2:fc:8e:ed:54:3a:01:
6a:41:ad:5d:08:8b:f1:38:e2:3c:3f:5c:ec:bd:08:86:c3:71:
7d:5c:37:38:80:a0:f4:d8:c2:37:a5:46:c8:59:01:2a:cc:c7:
83:64:41:6b:50:3d:04:72:11:3d:f8:73:0c:4e:2a:99:1a:55:
8b:e0:8e:98:36:d8:5a:07:e5:8c:4d:ed:3b:ae:50:4c:44:e1:
d7:75:32:ae:d1:9f:57:cc:dd:14:ea:34:8f:f4:49:ec:c1:16:
d9:ef:fb:31:5d:9b:c0:b9:8d:b7:3c:35:b0:a0:b2:c1:6d:fd:
dc:53:5f:df:e2:d4:3d:68:c7:38:a3:a9:81:6b:e6:0c:65:36:
d3:70:c3:64:bf:ca:a2:fa:0c:a6:6e:71:49:9b:60:49:35:e8:
a4:f6:fa:ab:f1:3e:6f:4f:08:ff:75:60:c9:aa:1c:53:23:ec:
b4:06:b7:38:e9:be:2f:bb:94:36:d7:4e:1a:5f:9e:22:73:62:
16:b7:a5:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63alOXmEydFf4jTrg68L7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2YyZGI3MmFhYjQzNWI5ZGFhMmIxZjdlMWE4YTMyNzY3
Nzg4YmUwHhcNMjYwNjExMTYwMDU5WhcNMjYwNjEyMTYwMDU5WjAzMTEwLwYDVQQD
EyhkNmEwOWU2MmY2Y2E0NzBhNWU5YzMyNzYyMTc2ZjcxMGE4Yjg1Mjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWRR5Dx9GMf9e4d3eW3+3Gncajws
bvhKGGXSE9PxG6etqdjDyeVE1GaTuIYsIXE9Fyv4G5GUTwkUr581je/6fKHqlVj2
Aftrmc5ezs7Lw1MCRHv8dpyYqppe1UEH1BoKNgCYcG88PTV11gYY/DfPv6G55AZw
V/Ewlo9rTnrWja8Va7ycZXhcrIbJIfh09jd2Cv9NwbUWR51oANygU+17qQ2MxU8I
kk2ZBklmXvdW4GFm6vvj28nuV4ItwwTVWRIuZDDHI+MBQalWDZUJJ6w4k4GqMLHp
P9SLbE9CZIaQq4zyC0fwGLnIAHDYXUf08mGhrht54MxYMXJk0YdMHo2JnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNagnmL2ykcKXpwydiF29xCouFJ1MB8GA1UdIwQY
MBaAFPM/Lbcqq0NbnaorH34aijJ2d4i+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEt
YzZjMDZlMmIzYTlmLzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEtYzZjMDZlMmIzYTlm
LzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzqVzwQbd
wsdXA/2+LNxXIuM8wdGVBPSEq3kcMz6zYbZmVxPzGQ8vwFKe6dfEmkBgPZ/BJsyH
Q7stT6zFewm9BPTy/I7tVDoBakGtXQiL8TjiPD9c7L0IhsNxfVw3OICg9NjCN6VG
yFkBKszHg2RBa1A9BHIRPfhzDE4qmRpVi+COmDbYWgfljE3tO65QTETh13UyrtGf
V8zdFOo0j/RJ7MEW2e/7MV2bwLmNtzw1sKCywW393FNf3+LUPWjHOKOpgWvmDGU2
03DDZL/KovoMpm5xSZtgSTXopPb6q/E+b08I/3VgyaocUyPstAa3OOm+L7uUNtdO
Gl+eInNiFrel1A==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:45 2026 by rpki-client