Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: g9tgXxemA9kkluKj5QolF3aSHqwPFBF9hDF5RQQZOgE=
Subject key identifier: A7:9C:0D:AE:56:C5:98:AF:94:AB:CF:91:D2:BA:48:90:E9:31:9A:40
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 01A01FE7E2EF3E9FA78533F3CA5C08983B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 1A17
Signing time: Thu 20 Aug 2026 16:01:25 +0000
Manifest this update: Thu 20 Aug 2026 16:01:25 +0000
Manifest next update: Fri 21 Aug 2026 16:01:25 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: Ws7lW/4WY6ulxtU2UvvlDQDynYLyhAmJPyck+0rHMSA=)
2: l6d-s6pGrwjzo2MVrYFXt_vj8FQ.roa (hash: GWCGfDBQXbx8zU/9pE2/fyqt5ipxe1FQBrMDGvjciQY=)
3: wNW1OJ6nNt-LJ_qt91rusWZGqUk.roa (hash: Uf/zMrnHEJKdoypvZyEP0WBvkTlQGSBhuCZb5Fsvgco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:e7:e2:ef:3e:9f:a7:85:33:f3:ca:5c:08:98:3b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Aug 20 16:01:25 2026 GMT
Not After : Aug 21 16:01:25 2026 GMT
Subject: CN=a79c0dae56c598af94abcf91d2ba4890e9319a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:f8:49:5b:03:ea:f8:f9:09:3d:c3:f8:8d:
10:19:9a:ff:43:36:41:51:56:a7:9b:86:30:de:d7:
35:98:ac:b8:5a:b5:f1:83:cc:a2:54:09:6e:b2:4c:
6f:ba:7d:b1:22:96:0e:c2:fb:a1:12:36:2f:40:d2:
81:42:d0:30:b6:5c:9a:40:80:38:3e:1d:a1:90:46:
6e:ea:62:12:f8:46:11:0e:af:63:81:a1:fb:d9:6f:
8c:d0:d1:43:d2:00:c8:9e:37:bc:ee:3b:97:d3:fc:
a1:f0:be:57:df:69:1a:71:8f:56:ee:7f:a5:3a:74:
64:f7:5c:bc:61:b6:84:77:17:6e:88:23:12:16:2a:
a3:8e:6d:c7:7e:e0:7d:35:a8:e6:fe:aa:c5:1e:99:
a0:77:78:af:61:10:f4:da:aa:6e:ae:22:0f:f8:70:
40:c7:00:a6:82:32:d3:2c:22:7b:21:b1:dd:ff:29:
b2:95:1c:09:d9:d1:32:4e:47:40:ae:36:35:c8:52:
52:2f:82:37:aa:9a:b8:57:6d:96:53:9f:4e:86:af:
cd:0a:53:2d:5b:58:2a:de:09:2b:d1:03:1a:11:dc:
28:8c:f2:f4:8f:59:8d:a5:d5:b7:45:0f:f4:51:a8:
46:5c:5c:f4:aa:55:1b:b5:76:3c:53:ca:4a:a1:49:
0e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:0D:AE:56:C5:98:AF:94:AB:CF:91:D2:BA:48:90:E9:31:9A:40
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:49:d4:e0:cb:b7:37:c2:d6:76:04:ca:08:61:03:e2:67:50:
af:4d:a4:21:c6:d2:bb:c4:93:44:bf:32:ad:26:8d:71:eb:ae:
ac:02:c2:30:c9:b0:a5:ca:30:b7:0d:63:20:ec:33:a7:4e:20:
09:de:64:48:4b:c0:0d:74:0e:3e:cd:e5:4d:f1:cc:f0:2a:e7:
6e:34:57:e5:05:9f:1e:31:f7:b8:72:e6:5f:be:8a:ce:19:fd:
6c:20:79:db:3a:c9:3a:08:11:6c:05:1b:89:92:9f:72:dd:b5:
6f:4d:ac:59:28:f9:5f:99:92:c2:77:8f:07:b5:6d:b5:d8:fd:
00:84:43:a6:9f:5a:48:e9:02:5f:5f:a4:6b:39:54:86:46:93:
17:a1:52:25:5d:bf:1c:8c:5b:e0:bb:13:b0:87:69:03:54:85:
19:12:32:5a:d7:2c:4d:4f:c3:de:04:00:eb:98:13:9d:37:90:
7b:ea:4c:87:26:47:bb:06:17:a3:29:23:76:2a:45:3c:27:4f:
91:a8:c9:8d:e6:9d:29:ad:2a:08:9e:c8:e0:73:b6:da:61:fc:
0d:b1:53:a5:0d:58:4b:12:f5:11:bb:52:ac:55:a1:fe:e2:4c:
37:54:59:a4:41:08:37:d6:0b:6f:6c:0d:e4:a6:0d:97:0d:d9:
9d:6c:0f:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAf5+LvPp+nhTPzylwImDt/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMmJlOTgyMDYwYTQzNzM0ZDBhZDEyNmFkNDZkYTJmMzk1
YzlkZWYwHhcNMjYwODIwMTYwMTI1WhcNMjYwODIxMTYwMTI1WjAzMTEwLwYDVQQD
EyhhNzljMGRhZTU2YzU5OGFmOTRhYmNmOTFkMmJhNDg5MGU5MzE5YTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAP4SVsD6vj5CT3D+I0QGZr/QzZB
UVanm4Yw3tc1mKy4WrXxg8yiVAluskxvun2xIpYOwvuhEjYvQNKBQtAwtlyaQIA4
Ph2hkEZu6mIS+EYRDq9jgaH72W+M0NFD0gDInje87juX0/yh8L5X32kacY9W7n+l
OnRk91y8YbaEdxduiCMSFiqjjm3HfuB9Najm/qrFHpmgd3ivYRD02qpuriIP+HBA
xwCmgjLTLCJ7IbHd/ymylRwJ2dEyTkdArjY1yFJSL4I3qpq4V22WU59Ohq/NClMt
W1gq3gkr0QMaEdwojPL0j1mNpdW3RQ/0UahGXFz0qlUbtXY8U8pKoUkOwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKecDa5WxZivlKvPkdK6SJDpMZpAMB8GA1UdIwQY
MBaAFPMr6YIGCkNzTQrRJq1G2i85XJ3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGIt
OTliY2JlNmQ3ZjYzLzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGItOTliY2JlNmQ3ZjYz
LzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEnU4Mu3
N8LWdgTKCGED4mdQr02kIcbSu8STRL8yrSaNceuurALCMMmwpcowtw1jIOwzp04g
Cd5kSEvADXQOPs3lTfHM8CrnbjRX5QWfHjH3uHLmX76Kzhn9bCB52zrJOggRbAUb
iZKfct21b02sWSj5X5mSwnePB7Vttdj9AIRDpp9aSOkCX1+kazlUhkaTF6FSJV2/
HIxb4LsTsIdpA1SFGRIyWtcsTU/D3gQA65gTnTeQe+pMhyZHuwYXoykjdipFPCdP
kajJjeadKa0qCJ7I4HO22mH8DbFTpQ1YSxL1EbtSrFWh/uJMN1RZpEEIN9YLb2wN
5KYNlw3ZnWwPwA==
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:36 2026 by rpki-client