Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: Ywh3PHJbCEKVtTwhw6JkItMThIIiXBsut+sYxTIVdOY=
Subject key identifier: 89:3A:CF:DC:90:6F:74:19:25:5E:60:DF:E2:6B:0E:10:B2:C4:5A:3E
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 019F18D6C4FFEBF8A5626D62219E5CE5B753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0FE4
Signing time: Tue 30 Jun 2026 14:02:36 +0000
Manifest this update: Tue 30 Jun 2026 14:02:36 +0000
Manifest next update: Wed 01 Jul 2026 14:02:36 +0000
Files and hashes: 1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: ysbSOSQjEAacbvXlkzD4XcoY2VTx7/VMiF2wwowzIMs=)
2: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (hash: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A=)
3: LwxlxO59sLpFilR69YBzUan2hpk.roa (hash: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:c4:ff:eb:f8:a5:62:6d:62:21:9e:5c:e5:b7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Jun 30 14:02:36 2026 GMT
Not After : Jul 1 14:02:36 2026 GMT
Subject: CN=893acfdc906f7419255e60dfe26b0e10b2c45a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:c9:be:0b:88:3a:d4:0f:df:f3:db:97:10:
e0:d3:df:ad:c7:7d:84:60:c6:75:c8:42:20:31:1d:
5a:c8:76:b5:bf:ee:65:f3:c6:d8:80:40:2a:01:d6:
16:46:97:d6:36:ca:c8:6d:c3:eb:9c:62:3a:c5:d6:
be:b0:fa:53:e6:ad:67:8c:94:64:1d:9f:26:c5:b5:
1b:94:99:d4:f9:08:78:f7:eb:7a:58:00:38:4c:ad:
e1:4d:1e:94:90:5a:fb:df:93:80:4c:b3:0f:92:a2:
5f:11:f7:4c:dc:68:b4:da:c7:87:53:0f:07:34:8c:
36:cb:85:ee:cb:bc:d9:38:b0:29:9c:7b:34:d3:3d:
da:20:0b:8d:de:ff:4d:ea:9e:ca:17:5d:45:4c:94:
ea:4a:14:63:ce:ae:b3:5d:e2:81:d1:b9:89:db:5b:
ed:75:9f:ab:ab:62:ba:1f:ec:0d:35:3a:6f:aa:e1:
7f:bb:8f:c5:69:7b:cb:ce:88:b7:c7:f5:cc:1d:ac:
7b:a5:3c:94:d8:8f:a7:cd:f5:0c:74:8b:7f:3d:59:
47:80:88:ee:68:41:89:dd:ef:f4:d8:31:7b:9c:69:
bc:eb:7f:94:87:11:9a:73:7a:0e:9c:22:5e:2c:02:
9d:45:9a:09:74:17:8a:79:96:01:92:e0:79:8f:09:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3A:CF:DC:90:6F:74:19:25:5E:60:DF:E2:6B:0E:10:B2:C4:5A:3E
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:78:f3:44:75:61:0e:2f:5e:1b:d8:4c:c1:9d:a8:a1:01:e7:
31:e8:93:b8:f6:86:b1:71:f5:4e:b9:5a:d9:a9:2d:d9:b2:fb:
0c:24:22:86:f8:6e:8e:8c:86:3c:63:c1:61:71:29:ad:05:cc:
2f:be:02:a7:4a:db:d8:7b:57:e3:cb:e0:b2:50:60:5d:34:48:
45:36:d4:f4:27:78:1e:f5:7f:2d:bd:84:21:13:1a:0c:56:63:
01:db:b3:fe:27:a8:87:ec:05:b4:2d:04:d0:62:18:b5:71:8b:
24:c0:4f:2d:ed:8f:9b:ac:7e:63:1c:52:71:52:8f:2a:7a:c3:
6e:d1:c9:d3:b1:74:2f:d9:1b:dc:89:c7:e4:66:97:63:5e:b0:
33:b0:88:ed:b0:b7:a2:ef:74:66:02:cd:f0:76:6c:66:e6:43:
3e:f2:8f:43:72:01:28:18:ea:4f:ab:a3:a5:c2:32:d5:36:39:
15:fa:69:d5:f3:2a:41:8c:fd:c2:d1:3b:a2:15:76:c9:a9:30:
4a:d0:ea:45:a5:a2:65:9e:8d:e3:1b:1d:6c:79:44:c8:f2:0d:
39:d6:ec:43:e2:48:e9:0f:2a:1f:3b:c1:3b:73:bd:e8:4f:eb:
ca:fb:94:98:1d:06:ae:b9:f5:bb:13:e0:7c:80:d1:d6:72:36:
df:07:cf:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1sT/6/ilYm1iIZ5c5bdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2M5M2RkYjFhMTcxNTFjNTZmMjJkY2FmMzFkZDgyMjk0
NjM3NDIwHhcNMjYwNjMwMTQwMjM2WhcNMjYwNzAxMTQwMjM2WjAzMTEwLwYDVQQD
Eyg4OTNhY2ZkYzkwNmY3NDE5MjU1ZTYwZGZlMjZiMGUxMGIyYzQ1YTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojPJvguIOtQP3/PblxDg09+tx32E
YMZ1yEIgMR1ayHa1v+5l88bYgEAqAdYWRpfWNsrIbcPrnGI6xda+sPpT5q1njJRk
HZ8mxbUblJnU+Qh49+t6WAA4TK3hTR6UkFr735OATLMPkqJfEfdM3Gi02seHUw8H
NIw2y4Xuy7zZOLApnHs00z3aIAuN3v9N6p7KF11FTJTqShRjzq6zXeKB0bmJ21vt
dZ+rq2K6H+wNNTpvquF/u4/FaXvLzoi3x/XMHax7pTyU2I+nzfUMdIt/PVlHgIju
aEGJ3e/02DF7nGm863+UhxGac3oOnCJeLAKdRZoJdBeKeZYBkuB5jwmesQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk6z9yQb3QZJV5g3+JrDhCyxFo+MB8GA1UdIwQY
MBaAFPJ8k92xoXFRxW8i3K8x3YIpRjdCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5Mjkt
MzZlMGM4YWZlMjZhLzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5MjktMzZlMGM4YWZlMjZh
LzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3jzRHVh
Di9eG9hMwZ2ooQHnMeiTuPaGsXH1Trla2akt2bL7DCQihvhujoyGPGPBYXEprQXM
L74Cp0rb2HtX48vgslBgXTRIRTbU9Cd4HvV/Lb2EIRMaDFZjAduz/ieoh+wFtC0E
0GIYtXGLJMBPLe2Pm6x+YxxScVKPKnrDbtHJ07F0L9kb3InH5GaXY16wM7CI7bC3
ou90ZgLN8HZsZuZDPvKPQ3IBKBjqT6ujpcIy1TY5Ffpp1fMqQYz9wtE7ohV2yakw
StDqRaWiZZ6N4xsdbHlEyPINOdbsQ+JI6Q8qHzvBO3O96E/ryvuUmB0Grrn1uxPg
fIDR1nI23wfPTA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:29:57 2026 by rpki-client