Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: kKvyf4SexACE773mLlXhN9mvlqYDCw/GA+3Xiqn71K4=
Subject key identifier: 1F:4A:F3:5B:1F:8F:88:64:5F:C4:74:CD:4B:5A:94:CA:F5:64:61:9F
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 019EB92230EDD30A556CB2CC223FB2B7B852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 13BC
Signing time: Fri 12 Jun 2026 00:01:26 +0000
Manifest this update: Fri 12 Jun 2026 00:01:26 +0000
Manifest next update: Sat 13 Jun 2026 00:01:26 +0000
Files and hashes: 1: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (hash: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs=)
2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: x9TlwWASb7gKUMa788OZ0PI2H0GC7eLiwa8QKxlSswE=)
3: OmODl-Dxgvnfb7lh_C-Zh2V9ocU.roa (hash: PmAaIQqyZcT72p+jMNnZFGobOFfukrUMlowL+LPavOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:30:ed:d3:0a:55:6c:b2:cc:22:3f:b2:b7:b8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Jun 12 00:01:26 2026 GMT
Not After : Jun 13 00:01:26 2026 GMT
Subject: CN=1f4af35b1f8f88645fc474cd4b5a94caf564619f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:16:73:7d:dc:2d:63:1c:bb:37:04:30:db:
74:53:a4:a9:8e:d0:c1:84:d2:fb:47:34:3d:93:ba:
d6:41:4f:57:93:75:a9:f6:a5:ba:f1:38:2e:11:08:
2b:b0:f8:af:f2:9a:dd:4d:94:2a:be:1f:35:7b:07:
09:48:0a:97:f5:2f:cb:8f:d0:48:c8:2c:23:fc:e1:
8c:15:60:e0:70:a3:de:7d:83:06:0b:38:11:9a:8e:
55:66:50:e6:8c:9b:5b:0a:51:43:de:00:78:88:4d:
14:16:26:04:f4:08:f6:e7:73:be:ca:d2:7e:9d:fd:
01:e7:c6:6c:08:d0:a0:a5:29:13:03:25:58:81:50:
de:29:c9:b2:f4:94:92:89:9a:8a:6a:01:53:27:86:
68:e9:51:22:57:7e:a1:f0:aa:a5:62:33:a4:48:2f:
ca:67:95:03:87:43:22:fe:13:e7:d6:77:4d:55:78:
59:ab:eb:fc:03:e3:69:f6:c4:64:51:1d:db:55:94:
4a:50:ff:91:a3:68:16:7c:08:65:69:d5:a6:83:eb:
fa:17:61:7c:6a:18:8b:79:1d:ee:81:a0:80:73:d3:
3b:9a:61:da:40:88:7c:8e:69:f7:1e:b3:58:08:a3:
97:54:8f:eb:b7:a3:e6:86:87:7e:5c:9b:80:b9:9d:
4b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4A:F3:5B:1F:8F:88:64:5F:C4:74:CD:4B:5A:94:CA:F5:64:61:9F
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:77:be:40:a8:b7:7e:31:52:29:60:a2:43:ba:71:37:c6:77:
20:41:76:79:8e:22:eb:4a:7e:44:cb:db:a7:c2:84:49:8a:0e:
d8:3e:85:6a:ea:cd:c8:ba:ca:c7:69:94:96:24:94:fc:1e:94:
21:7c:c9:71:3b:85:18:dd:d2:6e:8b:53:c1:29:48:70:e2:9f:
c9:f3:c8:52:69:5c:ad:d2:8a:83:0c:af:48:c7:7d:20:5e:8f:
a9:8d:bf:1a:70:5d:d0:36:b9:c7:17:29:ae:91:65:fe:50:e0:
82:82:e2:87:5b:64:87:18:20:64:aa:43:ee:26:08:ce:9b:1d:
7c:0c:9c:ec:51:31:1b:3c:68:e8:04:4a:58:a9:2f:b7:35:2d:
d1:b3:d1:4c:68:5a:1b:39:33:90:84:58:c4:f9:dd:6c:99:91:
77:97:ca:f1:c1:5b:4b:45:81:1e:f0:d6:81:16:c6:af:85:c6:
9c:cc:77:67:be:b1:a2:2f:0d:f7:f2:85:a8:ae:61:c2:b6:13:
fb:32:5a:86:ff:3e:29:67:f4:84:f2:e5:de:a9:f2:f3:db:80:
4b:1d:43:22:63:63:2a:a0:0a:a7:29:d0:8a:b6:36:f8:25:29:
dd:10:5e:fd:79:53:c1:3d:13:82:3b:0a:7c:b1:3e:e7:15:d5:
73:8f:d9:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65IjDt0wpVbLLMIj+yt7hSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjFkZjQ0YjM0NjgyM2NjZThjNjY0M2I1ZmE2OTE5YWZi
MjMxOTUwHhcNMjYwNjEyMDAwMTI2WhcNMjYwNjEzMDAwMTI2WjAzMTEwLwYDVQQD
EygxZjRhZjM1YjFmOGY4ODY0NWZjNDc0Y2Q0YjVhOTRjYWY1NjQ2MTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs64Wc33cLWMcuzcEMNt0U6SpjtDB
hNL7RzQ9k7rWQU9Xk3Wp9qW68TguEQgrsPiv8prdTZQqvh81ewcJSAqX9S/Lj9BI
yCwj/OGMFWDgcKPefYMGCzgRmo5VZlDmjJtbClFD3gB4iE0UFiYE9Aj253O+ytJ+
nf0B58ZsCNCgpSkTAyVYgVDeKcmy9JSSiZqKagFTJ4Zo6VEiV36h8KqlYjOkSC/K
Z5UDh0Mi/hPn1ndNVXhZq+v8A+Np9sRkUR3bVZRKUP+Ro2gWfAhladWmg+v6F2F8
ahiLeR3ugaCAc9M7mmHaQIh8jmn3HrNYCKOXVI/rt6Pmhod+XJuAuZ1LWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9K81sfj4hkX8R0zUtalMr1ZGGfMB8GA1UdIwQY
MBaAFPJh30SzRoI8zoxmQ7X6aRmvsjGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMt
NTc1ODYxNTYzNTRlLzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMtNTc1ODYxNTYzNTRl
LzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzXe+QKi3
fjFSKWCiQ7pxN8Z3IEF2eY4i60p+RMvbp8KESYoO2D6FaurNyLrKx2mUliSU/B6U
IXzJcTuFGN3SbotTwSlIcOKfyfPIUmlcrdKKgwyvSMd9IF6PqY2/GnBd0Da5xxcp
rpFl/lDggoLih1tkhxggZKpD7iYIzpsdfAyc7FExGzxo6ARKWKkvtzUt0bPRTGha
GzkzkIRYxPndbJmRd5fK8cFbS0WBHvDWgRbGr4XGnMx3Z76xoi8N9/KFqK5hwrYT
+zJahv8+KWf0hPLl3qny89uASx1DImNjKqAKpynQirY2+CUp3RBe/XlTwT0TgjsK
fLE+5xXVc4/Z+A==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:23:39 2026 by rpki-client