Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
File: 8E3LHKHUaLwERw8dtKRuz1uCeEg.mft (raw, json)
Hash identifier: CeT7DgWgz+YxBexBMkJlGCXAhFNPBPyrka/ia4NXRTc=
Subject key identifier: 0E:29:B8:2B:25:5B:62:76:C2:65:E2:BB:A0:CD:23:2D:F2:E5:CE:8C
Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
Certificate issuer: /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Certificate serial: 019F17F9843A68E9FFCE1A566BAC9BA0CC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
Manifest number: 0606
Signing time: Tue 30 Jun 2026 10:00:55 +0000
Manifest this update: Tue 30 Jun 2026 10:00:55 +0000
Manifest next update: Wed 01 Jul 2026 10:00:55 +0000
Files and hashes: 1: 8E3LHKHUaLwERw8dtKRuz1uCeEg.crl (hash: pcXA9/OqumZh+IPI3Pcfq4obamiBSPMrbf7hFGTbQVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:84:3a:68:e9:ff:ce:1a:56:6b:ac:9b:a0:cc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Validity
Not Before: Jun 30 10:00:55 2026 GMT
Not After : Jul 1 10:00:55 2026 GMT
Subject: CN=0e29b82b255b6276c265e2bba0cd232df2e5ce8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:d6:01:61:3b:57:80:41:a4:bf:7d:68:8d:
43:83:ac:b9:0c:75:bc:9e:e6:ba:2c:56:24:1d:97:
27:df:45:bb:ba:a0:8d:f4:37:5c:48:ed:19:18:62:
45:6c:be:1e:c6:aa:59:e1:34:02:af:11:72:82:12:
d6:e9:fc:b6:66:6f:f6:53:8a:7c:cd:50:29:00:3b:
cf:30:27:b6:ef:be:af:89:db:ef:d4:82:34:3a:39:
13:63:57:59:8b:1f:3a:36:2b:5f:56:ec:de:77:96:
67:e9:04:63:a2:fe:2c:63:1d:8b:60:1e:57:b2:f2:
62:a8:2a:89:02:24:40:3f:ec:10:40:b4:78:ce:97:
6b:9d:7f:89:8a:46:57:77:61:bc:6f:9e:78:15:92:
4c:2e:85:81:a7:14:8e:0c:19:f2:7c:99:6e:43:3f:
8c:03:b4:c1:9a:f1:38:c8:0e:ec:25:77:e7:c8:a1:
4b:a2:79:4b:38:e0:e3:90:2b:2c:89:4a:b2:16:b9:
87:ea:80:69:b3:77:e1:75:dc:70:0b:a6:0c:c0:3c:
91:63:2e:85:e3:0f:24:ca:81:57:07:5e:28:1d:d3:
67:20:65:8a:dc:b7:11:86:79:3b:d6:04:49:d0:aa:
62:ec:6f:d3:c1:f7:6b:16:51:fb:93:52:70:59:d9:
9a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:29:B8:2B:25:5B:62:76:C2:65:E2:BB:A0:CD:23:2D:F2:E5:CE:8C
X509v3 Authority Key Identifier:
keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8b:50:6e:66:4b:11:4f:f7:05:2e:2a:05:2c:b2:da:c9:6b:
b7:00:23:59:58:81:cc:6e:66:84:ac:94:d6:e3:88:c2:07:fa:
a0:c1:f8:10:f4:2b:5c:b8:a8:39:d4:fc:f5:0a:53:65:7e:83:
33:61:85:0a:91:44:00:fd:a8:1c:b6:b6:29:fd:1f:10:84:0c:
01:0d:ca:9e:48:f2:2d:2e:85:97:41:5e:b0:44:b9:4f:6a:d8:
6b:31:47:66:5a:1f:10:1f:32:79:a8:6c:af:fa:41:c1:47:ee:
f7:6c:01:50:e1:38:fc:46:e3:81:4c:3f:2c:25:66:b1:26:ed:
db:29:ed:8e:e2:73:ea:05:ec:9b:e6:64:ff:bb:fa:89:d6:23:
12:c4:c5:b4:a8:60:33:af:ed:58:9b:4a:f2:09:c7:da:7f:26:
0a:d9:15:4d:b4:b1:4a:93:78:7c:95:b2:c9:0b:e8:fc:6d:15:
f6:0c:c3:e7:4f:0a:bc:22:4a:5b:36:42:4d:c1:f4:6f:60:24:
85:27:09:e5:a7:e8:9c:df:10:b9:f0:7b:44:d6:ab:45:a9:95:
f9:28:db:73:74:a3:69:91:6b:1d:d2:b3:fb:ac:10:a8:73:94:
a5:3c:c3:b1:fe:a3:86:6a:14:e3:84:5b:f6:5d:6d:67:c2:a4:
25:12:72:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+YQ6aOn/zhpWa6yboMxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGRjYjFjYTFkNDY4YmMwNDQ3MGYxZGI0YTQ2ZWNmNWI4
Mjc4NDgwHhcNMjYwNjMwMTAwMDU1WhcNMjYwNzAxMTAwMDU1WjAzMTEwLwYDVQQD
EygwZTI5YjgyYjI1NWI2Mjc2YzI2NWUyYmJhMGNkMjMyZGYyZTVjZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGvWAWE7V4BBpL99aI1Dg6y5DHW8
nua6LFYkHZcn30W7uqCN9DdcSO0ZGGJFbL4exqpZ4TQCrxFyghLW6fy2Zm/2U4p8
zVApADvPMCe2776vidvv1II0OjkTY1dZix86NitfVuzed5Zn6QRjov4sYx2LYB5X
svJiqCqJAiRAP+wQQLR4zpdrnX+JikZXd2G8b554FZJMLoWBpxSODBnyfJluQz+M
A7TBmvE4yA7sJXfnyKFLonlLOODjkCssiUqyFrmH6oBps3fhddxwC6YMwDyRYy6F
4w8kyoFXB14oHdNnIGWK3LcRhnk71gRJ0Kpi7G/TwfdrFlH7k1JwWdmaHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4puCslW2J2wmXiu6DNIy3y5c6MMB8GA1UdIwQY
MBaAFPBNyxyh1Gi8BEcPHbSkbs9bgnhIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEUzTEhLSFVhTHdFUnc4ZHRLUnV6MXVDZUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNTZiMWItNGIxMC00MWRjLTlmZmEt
ZGI1MTYwZWU3NGU3LzEvOEUzTEhLSFVhTHdFUnc4ZHRLUnV6MXVDZUVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jNTZiMWItNGIxMC00MWRjLTlmZmEtZGI1MTYwZWU3NGU3
LzEvOEUzTEhLSFVhTHdFUnc4ZHRLUnV6MXVDZUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqotQbmZL
EU/3BS4qBSyy2slrtwAjWViBzG5mhKyU1uOIwgf6oMH4EPQrXLioOdT89QpTZX6D
M2GFCpFEAP2oHLa2Kf0fEIQMAQ3KnkjyLS6Fl0FesES5T2rYazFHZlofEB8yeahs
r/pBwUfu92wBUOE4/EbjgUw/LCVmsSbt2yntjuJz6gXsm+Zk/7v6idYjEsTFtKhg
M6/tWJtK8gnH2n8mCtkVTbSxSpN4fJWyyQvo/G0V9gzD508KvCJKWzZCTcH0b2Ak
hScJ5afonN8QufB7RNarRamV+Sjbc3SjaZFrHdKz+6wQqHOUpTzDsf6jhmoU44Rb
9l1tZ8KkJRJymw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:08 2026 by rpki-client