Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier: 3pO2wMIZHuMGuY/S4ZbnW6lKQe2VqNo17r7oXpyxM6s=
Subject key identifier: AA:0B:57:40:EF:FB:95:66:A0:9D:13:FF:ED:8D:A3:79:E0:FD:07:88
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 01A00100E7FC89936C41D8E985FFE93BB600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number: 1A05
Signing time: Fri 14 Aug 2026 16:00:31 +0000
Manifest this update: Fri 14 Aug 2026 16:00:31 +0000
Manifest next update: Sat 15 Aug 2026 16:00:31 +0000
Files and hashes: 1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: Ah/OlQCtLvgnzODPDqCIF5muWcZrrnwTbSq89ZMcYv8=)
2: L7z1z3kD8b7F1K7aacc1gzUm6kI.roa (hash: D3CWLsb8k5BIPwmtHzd5EPsN02bvpYKIOpfirvWVx3E=)
3: UefnhI4rD4WdnFSP87tCcgYjugY.roa (hash: wX49sflwTEuHFD6MRKkajE1pPkRG+Oqz51HRQlhSsxs=)
4: lgrQvjx5MIWGF2Zc_WzTTVLP-v0.roa (hash: weF1SPmq8vuRk/u5oRHyuZvuVh74XYHXLM966wmgglw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:e7:fc:89:93:6c:41:d8:e9:85:ff:e9:3b:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Aug 14 16:00:31 2026 GMT
Not After : Aug 15 16:00:31 2026 GMT
Subject: CN=aa0b5740effb9566a09d13ffed8da379e0fd0788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:94:99:7e:88:48:6c:cc:aa:b1:03:28:5e:
9f:7e:79:ed:d3:78:fa:e2:db:16:1f:45:72:6f:5d:
16:12:3f:de:89:88:de:98:bc:a5:5f:2d:ae:11:4b:
33:3d:27:c5:87:98:a5:24:64:3c:da:47:7f:63:50:
73:42:8f:43:76:b9:b1:5e:4a:87:7e:2e:c2:95:f6:
1c:9f:8f:37:7b:31:73:1c:b6:51:e0:cf:bc:59:17:
36:8b:c5:84:23:54:a5:5f:bf:07:77:b2:a7:86:6c:
52:00:7b:1d:e0:3a:2a:45:f3:eb:1f:84:14:7c:b8:
e2:4b:3d:d2:8a:9e:e7:5d:c8:4d:8e:01:3f:1d:e3:
0c:14:93:7a:44:c3:6c:de:9d:fd:d8:37:b1:cf:fb:
01:fe:0b:21:b8:e0:9b:ff:89:0a:4d:02:87:41:75:
2b:b9:c3:41:6f:dc:30:98:e3:86:9f:7c:99:64:7a:
43:8b:92:a0:0d:f2:06:78:db:ae:68:81:9c:9f:95:
c1:87:69:6a:a6:4f:e0:bf:61:ca:1e:29:6e:23:48:
fb:58:78:fb:24:7d:1b:99:14:5d:26:fe:f6:ac:ab:
34:19:78:01:93:26:19:7c:90:53:54:15:12:ec:bd:
64:7a:7f:e8:2f:ae:fe:90:a6:3f:1a:75:26:cc:98:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0B:57:40:EF:FB:95:66:A0:9D:13:FF:ED:8D:A3:79:E0:FD:07:88
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bf:cb:04:85:75:21:89:91:6e:8a:49:f2:a1:94:84:d7:f6:
ec:f4:e0:da:77:b4:d0:b4:31:0c:73:b9:52:02:47:6e:6b:0c:
7d:2a:17:77:18:1d:c1:83:1a:2d:e5:81:fb:d3:8a:f8:0e:2d:
55:b1:36:b6:77:f2:a6:e2:1a:d5:d6:af:d0:3e:0d:f6:c8:5f:
de:c0:db:8d:0f:d3:ee:53:98:88:8d:f0:76:2a:eb:4a:f4:aa:
0f:27:3f:74:96:72:f8:fd:33:dd:bb:56:05:1d:50:2b:be:76:
86:cb:74:b1:40:4f:6e:9d:b4:f3:31:f4:7d:4a:ca:ff:51:e9:
ff:57:43:32:1b:32:ef:f8:3f:8f:3d:e5:e4:e2:ac:ad:0f:51:
b5:62:e0:63:ad:0d:f5:52:48:f2:fa:b5:83:df:1e:15:16:e6:
9e:f2:f0:bd:79:55:bc:d5:f2:d3:41:ba:0f:6d:53:df:4d:87:
ca:80:7d:41:2e:c8:5a:55:a4:ad:4d:63:89:e9:da:d0:7b:1e:
d0:58:08:e8:25:41:57:d0:de:8b:e9:a1:5c:bc:b8:ae:7f:a3:
24:1a:a2:59:2b:47:b6:c2:92:d3:8c:88:98:f9:4a:08:38:bb:
90:b9:a0:9a:6c:b4:fd:e1:7e:9d:16:3e:10:c0:00:fa:a5:21:
bf:11:18:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAOf8iZNsQdjphf/pO7YAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjYzNmZlYzdiNWIyZDE4ZGUzNzk3ZTY5ODRjMDY5NTVl
NzE2ZDcwHhcNMjYwODE0MTYwMDMxWhcNMjYwODE1MTYwMDMxWjAzMTEwLwYDVQQD
EyhhYTBiNTc0MGVmZmI5NTY2YTA5ZDEzZmZlZDhkYTM3OWUwZmQwNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr2UmX6ISGzMqrEDKF6ffnnt03j6
4tsWH0Vyb10WEj/eiYjemLylXy2uEUszPSfFh5ilJGQ82kd/Y1BzQo9DdrmxXkqH
fi7ClfYcn483ezFzHLZR4M+8WRc2i8WEI1SlX78Hd7KnhmxSAHsd4DoqRfPrH4QU
fLjiSz3Sip7nXchNjgE/HeMMFJN6RMNs3p392Dexz/sB/gshuOCb/4kKTQKHQXUr
ucNBb9wwmOOGn3yZZHpDi5KgDfIGeNuuaIGcn5XBh2lqpk/gv2HKHiluI0j7WHj7
JH0bmRRdJv72rKs0GXgBkyYZfJBTVBUS7L1ken/oL67+kKY/GnUmzJjEswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoLV0Dv+5VmoJ0T/+2No3ng/QeIMB8GA1UdIwQY
MBaAFPD2Nv7HtbLRjeN5fmmEwGlV5xbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hMDFhY2QtYTNkZS00ODM5LTlkMDIt
NjQzYzFmZTM4Mzg1LzEvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hMDFhY2QtYTNkZS00ODM5LTlkMDItNjQzYzFmZTM4Mzg1
LzEvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7/LBIV1
IYmRbopJ8qGUhNf27PTg2ne00LQxDHO5UgJHbmsMfSoXdxgdwYMaLeWB+9OK+A4t
VbE2tnfypuIa1dav0D4N9shf3sDbjQ/T7lOYiI3wdirrSvSqDyc/dJZy+P0z3btW
BR1QK752hst0sUBPbp208zH0fUrK/1Hp/1dDMhsy7/g/jz3l5OKsrQ9RtWLgY60N
9VJI8vq1g98eFRbmnvLwvXlVvNXy00G6D21T302HyoB9QS7IWlWkrU1jiena0Hse
0FgI6CVBV9Dei+mhXLy4rn+jJBqiWStHtsKS04yImPlKCDi7kLmgmmy0/eF+nRY+
EMAA+qUhvxEYtA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:03 2026 by rpki-client