Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: duhkXcsHXGQMotq8xj6gwbVoNABnpuCYv+1HSzJkbtY=
Subject key identifier: 89:A9:1E:B5:31:56:4F:AE:13:3C:E2:9A:7D:F8:5E:28:DE:D6:10:5F
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 019F17F9B4BA075F0431AD2487279AAB79FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 0871
Signing time: Tue 30 Jun 2026 10:01:08 +0000
Manifest this update: Tue 30 Jun 2026 10:01:08 +0000
Manifest next update: Wed 01 Jul 2026 10:01:08 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: 7w+94GK3hG7tjkrbS6uDuKIhuGss3Ey7UpgW/Pp3ueY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:b4:ba:07:5f:04:31:ad:24:87:27:9a:ab:79:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: Jun 30 10:01:08 2026 GMT
Not After : Jul 1 10:01:08 2026 GMT
Subject: CN=89a91eb531564fae133ce29a7df85e28ded6105f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:7e:7a:b0:d8:ca:8f:f3:00:65:21:b9:1f:
2e:b8:02:22:25:b5:fc:e7:1a:e3:56:4f:82:85:c8:
16:ef:21:5a:a1:84:d6:01:02:ce:c2:88:4b:16:15:
ba:9c:eb:0c:e7:85:5e:cb:38:21:c7:33:fe:f6:a3:
45:ef:00:e6:15:64:82:d9:11:e8:c2:28:f6:b2:c6:
81:4d:5c:a4:f1:a3:ea:fd:a3:b2:bd:47:c4:a3:14:
5d:0e:f8:1e:25:5c:a7:29:75:b7:02:e2:65:43:11:
8b:96:85:f1:60:c1:ed:ad:b1:f6:99:31:94:15:68:
4f:87:d0:e9:8a:31:61:16:f7:99:c3:7b:cb:17:48:
8c:9c:fd:93:78:44:b7:80:38:2c:b1:65:0f:cc:83:
51:2c:84:e9:2f:1a:ce:37:48:86:2a:63:7a:10:e8:
01:8f:59:c3:21:5c:8a:e1:d9:d6:9d:e4:2a:72:93:
85:e5:57:53:6f:f9:93:e2:ca:2d:e7:ec:9d:44:b1:
b5:b6:78:7c:68:11:7d:d5:e2:81:5e:c9:81:a5:af:
6e:2a:8d:bf:87:2a:ce:67:30:4c:9e:95:36:45:4b:
c9:fc:d6:6e:bc:3c:c5:21:3a:1e:51:1f:f8:3d:3a:
d1:4c:6e:b7:10:3a:24:f7:a2:65:ab:fe:5e:0e:81:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A9:1E:B5:31:56:4F:AE:13:3C:E2:9A:7D:F8:5E:28:DE:D6:10:5F
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:83:c7:58:c0:b9:1e:35:24:ec:60:53:cc:a5:7e:88:0d:7d:
f8:83:09:85:22:4c:66:34:2b:2b:18:42:1c:10:ca:41:28:37:
d9:85:ea:ad:d4:32:c4:c0:9e:8b:08:f3:22:25:3a:e4:95:ac:
c7:42:5e:5b:66:7d:35:b7:14:a2:6e:8b:fc:12:8c:74:da:ad:
dd:26:1e:c6:32:1a:04:3a:87:00:c3:91:89:3f:cb:1c:35:65:
07:ba:75:82:f7:7d:73:4d:8b:ad:c3:33:f2:59:09:1c:81:60:
f1:41:b8:09:45:ab:55:bd:79:09:d9:67:28:ce:b8:9a:58:3e:
d7:a4:f0:46:ee:28:86:ac:d3:e7:b1:41:c4:78:61:8d:ca:4e:
9a:c1:bc:a9:88:39:8d:c0:21:d4:50:3f:e0:f5:f3:45:cb:75:
c9:f2:87:7f:a4:ef:85:71:b1:ce:8a:29:37:39:05:4e:d9:47:
2c:64:c9:ed:a0:0e:62:eb:d9:9c:cf:67:18:4b:b9:c8:32:ba:
07:5f:84:98:90:e0:d8:6b:3a:61:7b:b8:e2:56:ba:96:20:8e:
c4:a0:1d:f8:06:d7:7c:a0:fd:89:24:d9:5e:d3:82:86:69:e5:
97:44:24:45:63:e3:96:a6:74:d1:af:fc:0f:40:b0:0d:40:57:
31:f5:da:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+bS6B18EMa0khyeaq3n8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2YxZjMzNWM3ZDA0YjM2MDhmZDE5MTRhOWMwNTNiMDRh
N2ZjYjkwHhcNMjYwNjMwMTAwMTA4WhcNMjYwNzAxMTAwMTA4WjAzMTEwLwYDVQQD
Eyg4OWE5MWViNTMxNTY0ZmFlMTMzY2UyOWE3ZGY4NWUyOGRlZDYxMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypx+erDYyo/zAGUhuR8uuAIiJbX8
5xrjVk+ChcgW7yFaoYTWAQLOwohLFhW6nOsM54VeyzghxzP+9qNF7wDmFWSC2RHo
wij2ssaBTVyk8aPq/aOyvUfEoxRdDvgeJVynKXW3AuJlQxGLloXxYMHtrbH2mTGU
FWhPh9DpijFhFveZw3vLF0iMnP2TeES3gDgssWUPzINRLITpLxrON0iGKmN6EOgB
j1nDIVyK4dnWneQqcpOF5VdTb/mT4sot5+ydRLG1tnh8aBF91eKBXsmBpa9uKo2/
hyrOZzBMnpU2RUvJ/NZuvDzFIToeUR/4PTrRTG63EDok96Jlq/5eDoGiLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImpHrUxVk+uEzzimn34Xije1hBfMB8GA1UdIwQY
MBaAFPA/HzNcfQSzYI/RkUqcBTsEp/y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYt
MzM4YTA3ZThlYmQ2LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYtMzM4YTA3ZThlYmQ2
LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoPHWMC5
HjUk7GBTzKV+iA19+IMJhSJMZjQrKxhCHBDKQSg32YXqrdQyxMCeiwjzIiU65JWs
x0JeW2Z9NbcUom6L/BKMdNqt3SYexjIaBDqHAMORiT/LHDVlB7p1gvd9c02LrcMz
8lkJHIFg8UG4CUWrVb15CdlnKM64mlg+16TwRu4ohqzT57FBxHhhjcpOmsG8qYg5
jcAh1FA/4PXzRct1yfKHf6TvhXGxzoopNzkFTtlHLGTJ7aAOYuvZnM9nGEu5yDK6
B1+EmJDg2Gs6YXu44la6liCOxKAd+AbXfKD9iSTZXtOChmnll0QkRWPjlqZ00a/8
D0CwDUBXMfXaaQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:57 2026 by rpki-client