Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json)
Hash identifier: ZUwv+RyN7Ds8KEmngDm+2dEa1i/TzVCmodN0rT7664w=
Subject key identifier: C6:95:DC:86:01:0D:CC:7F:93:82:7D:A0:D3:2D:38:CD:EA:A4:0F:AD
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial: 019F17C2975B717952B7127BF497A200DF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
Manifest number: 0C40
Signing time: Tue 30 Jun 2026 09:00:56 +0000
Manifest this update: Tue 30 Jun 2026 09:00:56 +0000
Manifest next update: Wed 01 Jul 2026 09:00:56 +0000
Files and hashes: 1: 1e3-ee_DDB8uKbq4DDF2oeY9brA.roa (hash: d1HzxXfkVXwQpykJbxZZ+w5Pxsb18cIOczK6ype9Npo=)
2: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: u+8B+B0wzHw7vIp3t2h7R4KehWa06t86DfNPX8zgquE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:97:5b:71:79:52:b7:12:7b:f4:97:a2:00:df:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Validity
Not Before: Jun 30 09:00:56 2026 GMT
Not After : Jul 1 09:00:56 2026 GMT
Subject: CN=c695dc86010dcc7f93827da0d32d38cdeaa40fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:f5:64:e2:9e:9a:75:60:e1:f5:6a:f4:44:
da:ea:5c:f8:1e:55:29:a3:16:5b:a6:a9:c8:c0:18:
8a:e5:04:7a:49:0c:8e:79:be:5e:85:1d:79:2e:80:
ca:a7:e1:a1:ba:3a:e7:ec:e6:06:b2:ba:91:45:90:
17:6c:b2:c0:a0:22:99:9c:9b:f9:d7:00:7c:d9:05:
0c:6d:42:71:04:b8:80:dd:40:17:8d:c3:65:b5:52:
e9:98:c0:57:c1:e9:89:ea:d6:58:43:1f:3e:4e:1b:
17:1c:1c:3f:ac:b2:bf:25:b8:40:11:f4:ce:11:ff:
17:5b:cd:11:96:e3:16:6c:f6:68:47:eb:70:64:ad:
74:77:70:48:22:56:6c:60:d3:f9:ed:d0:d8:46:3a:
f2:10:48:78:0b:6f:c4:72:d9:a0:53:ea:2e:b2:f3:
82:7e:45:5a:37:a8:5a:fa:f0:12:77:26:70:29:d2:
27:9f:5d:3f:12:3a:4d:50:e8:c4:b0:ca:8d:93:e5:
65:90:69:d0:d5:56:4a:ce:a4:00:74:43:2d:72:0e:
c9:1a:9d:27:c7:d2:b1:26:84:2a:40:fc:ec:7c:95:
e7:e3:8b:bc:e7:6f:8c:ca:a8:a9:cf:34:58:d5:7a:
03:ca:c7:d6:14:85:6a:5c:ff:34:56:4b:a3:a2:84:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:95:DC:86:01:0D:CC:7F:93:82:7D:A0:D3:2D:38:CD:EA:A4:0F:AD
X509v3 Authority Key Identifier:
keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4f:37:1f:8e:2d:9a:64:2f:68:47:10:42:49:15:7f:96:f6:
21:ef:d4:3b:b6:f1:15:43:d7:7a:14:1f:8f:e2:30:9b:c1:30:
51:59:e9:91:39:16:fc:c1:f5:17:67:44:d3:3d:d3:93:58:56:
34:82:02:30:f8:f0:88:f1:a5:00:0b:fb:96:a4:ac:32:46:31:
6b:f5:a1:55:f1:8b:85:0f:06:bb:9a:f2:ba:4a:72:8d:d0:e4:
8b:13:19:aa:58:4c:d5:89:51:6b:a1:97:6d:6d:da:17:b0:b9:
29:17:1e:5f:da:23:83:ec:bb:5e:5d:89:cb:fd:76:bf:cd:5a:
6f:99:21:7e:18:7c:a2:84:65:28:e4:2e:85:08:e8:e6:68:0b:
97:54:31:cb:4b:e7:e0:41:58:8b:fa:04:73:17:79:7f:99:b3:
0b:71:ad:af:fe:f2:06:91:64:58:57:78:a7:75:8d:68:c7:89:
36:5e:c3:92:de:c8:5e:20:5b:bc:48:5a:10:5d:d4:cd:ef:2f:
6f:65:3a:b4:47:e0:ad:92:0d:49:17:26:32:4b:04:e6:e5:0f:
a9:19:2a:2d:fc:2e:0d:11:f9:9a:0d:9d:d4:9b:65:52:95:0f:
03:02:b3:c1:a0:5e:d9:ec:10:3d:65:47:cf:ec:f9:90:d5:5d:
13:8c:87:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwpdbcXlStxJ79JeiAN8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjVlMDE4MWM0YmJhZTVjMDkwYWIxNTlkMDY1NjJmMTMy
MmUyNzgwHhcNMjYwNjMwMDkwMDU2WhcNMjYwNzAxMDkwMDU2WjAzMTEwLwYDVQQD
EyhjNjk1ZGM4NjAxMGRjYzdmOTM4MjdkYTBkMzJkMzhjZGVhYTQwZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw531ZOKemnVg4fVq9ETa6lz4HlUp
oxZbpqnIwBiK5QR6SQyOeb5ehR15LoDKp+Ghujrn7OYGsrqRRZAXbLLAoCKZnJv5
1wB82QUMbUJxBLiA3UAXjcNltVLpmMBXwemJ6tZYQx8+ThsXHBw/rLK/JbhAEfTO
Ef8XW80RluMWbPZoR+twZK10d3BIIlZsYNP57dDYRjryEEh4C2/EctmgU+ousvOC
fkVaN6ha+vASdyZwKdInn10/EjpNUOjEsMqNk+VlkGnQ1VZKzqQAdEMtcg7JGp0n
x9KxJoQqQPzsfJXn44u852+MyqipzzRY1XoDysfWFIVqXP80VkujooSgYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaV3IYBDcx/k4J9oNMtOM3qpA+tMB8GA1UdIwQY
MBaAFPH14BgcS7rlwJCrFZ0GVi8TIuJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2Mt
OWJlYmY3ZGNjMWE2LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2MtOWJlYmY3ZGNjMWE2
LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbk83H44t
mmQvaEcQQkkVf5b2Ie/UO7bxFUPXehQfj+Iwm8EwUVnpkTkW/MH1F2dE0z3Tk1hW
NIICMPjwiPGlAAv7lqSsMkYxa/WhVfGLhQ8Gu5ryukpyjdDkixMZqlhM1YlRa6GX
bW3aF7C5KRceX9ojg+y7Xl2Jy/12v81ab5khfhh8ooRlKOQuhQjo5mgLl1Qxy0vn
4EFYi/oEcxd5f5mzC3Gtr/7yBpFkWFd4p3WNaMeJNl7Dkt7IXiBbvEhaEF3Uze8v
b2U6tEfgrZINSRcmMksE5uUPqRkqLfwuDRH5mg2d1JtlUpUPAwKzwaBe2ewQPWVH
z+z5kNVdE4yHaw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:58 2026 by rpki-client