Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: W/pjWksBraoV0TRbAkeIFcdKpJPGrlBKaOWfkoIzxmU=
Subject key identifier: 3E:06:6A:46:A3:B4:1F:CB:F8:1C:53:3C:D7:4B:F5:19:7B:8F:0D:85
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 019FA0DFF51C568A5FAEF0F0CF6DE5817125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 1434
Signing time: Mon 27 Jul 2026 00:00:59 +0000
Manifest this update: Mon 27 Jul 2026 00:00:59 +0000
Manifest next update: Tue 28 Jul 2026 00:00:59 +0000
Files and hashes: 1: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (hash: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs=)
2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: F0AjxBSGI1BQOgRCLKIsM/pmnfnUfE8kfuLW0VXD25k=)
3: OmODl-Dxgvnfb7lh_C-Zh2V9ocU.roa (hash: PmAaIQqyZcT72p+jMNnZFGobOFfukrUMlowL+LPavOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:f5:1c:56:8a:5f:ae:f0:f0:cf:6d:e5:81:71:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Jul 27 00:00:59 2026 GMT
Not After : Jul 28 00:00:59 2026 GMT
Subject: CN=3e066a46a3b41fcbf81c533cd74bf5197b8f0d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:db:30:0b:27:c4:c2:fa:0e:3c:f2:35:53:
4e:41:dd:ef:2a:6d:94:d5:9b:19:ce:4d:86:c7:07:
90:db:3e:fa:f7:24:b4:8d:37:d7:c1:cc:2b:0c:85:
f8:2b:c1:89:dd:25:3a:33:0c:7a:3c:f7:c3:95:6e:
19:50:78:ab:c7:fb:97:eb:24:07:d7:d2:7d:10:a8:
5a:a5:d1:45:fe:9a:b2:58:11:c2:90:51:3b:3e:a6:
48:bd:e2:04:04:7d:60:b1:3a:11:23:c9:ff:c7:e4:
6d:61:90:dd:5d:87:ad:4e:7a:bf:e8:a7:cf:db:68:
1e:a1:f7:75:c9:30:c8:07:c2:c9:4f:b4:6d:fb:df:
c6:3a:a5:33:c4:59:91:44:9c:8f:38:11:f1:d7:d2:
20:47:55:b9:6a:1c:f2:3e:15:4a:a2:5b:4a:e4:52:
a4:b2:0c:8b:2e:e8:ef:ff:10:34:e8:19:c4:ae:bf:
ff:ce:52:85:c7:01:38:4f:76:fe:54:17:e4:8e:08:
b9:93:5f:28:73:9b:4c:62:99:07:a9:dc:2e:c5:4d:
58:6e:5f:f7:c0:22:fd:78:78:0b:e1:0f:47:09:4a:
9f:60:90:30:32:22:bb:c3:63:b5:f6:14:de:4c:d4:
7a:c2:df:fb:ba:93:20:ae:9e:8b:50:c9:d9:74:6e:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:06:6A:46:A3:B4:1F:CB:F8:1C:53:3C:D7:4B:F5:19:7B:8F:0D:85
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:89:c4:37:42:75:16:dc:82:13:94:6d:1d:95:fe:53:83:60:
31:ea:d8:10:72:a4:38:81:38:31:47:cb:7f:a5:3f:e4:b6:56:
22:06:a9:78:47:e1:33:77:6c:28:13:b0:d7:cf:dd:f0:61:74:
49:73:71:df:ed:c9:04:97:9b:01:c8:6b:42:71:3d:a1:6b:82:
af:28:65:df:d0:53:9a:f1:c1:05:c5:2a:f6:43:f2:09:97:a1:
ee:45:b5:35:80:25:aa:ee:5d:67:f5:48:34:07:2d:aa:41:08:
32:1e:97:cc:cf:8f:34:6d:ed:f8:fa:0e:f6:ce:05:1d:ca:d8:
f8:b2:cf:a9:c1:04:26:c2:f8:20:bf:79:33:08:bf:d1:21:ee:
c9:95:d8:09:43:1f:6f:f6:c8:bf:d3:13:74:97:25:58:5b:6b:
a3:64:6f:96:6f:2f:43:be:af:ec:81:3e:d4:bc:f7:40:6a:e9:
ac:80:4a:56:18:62:b4:04:29:8a:cb:01:0b:55:54:24:c7:04:
a9:df:50:95:7d:e6:c3:a5:11:7c:b4:f4:47:64:97:18:be:46:
af:88:dd:5f:7c:c8:e4:b0:74:f1:f3:b5:63:9c:54:e3:64:33:
95:11:c9:3f:c4:2d:18:e5:ba:46:2a:a0:9e:e4:c1:a1:a5:5a:
ba:e6:42:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g3/UcVopfrvDwz23lgXElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjFkZjQ0YjM0NjgyM2NjZThjNjY0M2I1ZmE2OTE5YWZi
MjMxOTUwHhcNMjYwNzI3MDAwMDU5WhcNMjYwNzI4MDAwMDU5WjAzMTEwLwYDVQQD
EygzZTA2NmE0NmEzYjQxZmNiZjgxYzUzM2NkNzRiZjUxOTdiOGYwZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWLbMAsnxML6DjzyNVNOQd3vKm2U
1ZsZzk2GxweQ2z769yS0jTfXwcwrDIX4K8GJ3SU6Mwx6PPfDlW4ZUHirx/uX6yQH
19J9EKhapdFF/pqyWBHCkFE7PqZIveIEBH1gsToRI8n/x+RtYZDdXYetTnq/6KfP
22geofd1yTDIB8LJT7Rt+9/GOqUzxFmRRJyPOBHx19IgR1W5ahzyPhVKoltK5FKk
sgyLLujv/xA06BnErr//zlKFxwE4T3b+VBfkjgi5k18oc5tMYpkHqdwuxU1Ybl/3
wCL9eHgL4Q9HCUqfYJAwMiK7w2O19hTeTNR6wt/7upMgrp6LUMnZdG42PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4GakajtB/L+BxTPNdL9Rl7jw2FMB8GA1UdIwQY
MBaAFPJh30SzRoI8zoxmQ7X6aRmvsjGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMt
NTc1ODYxNTYzNTRlLzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMtNTc1ODYxNTYzNTRl
LzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4nEN0J1
FtyCE5RtHZX+U4NgMerYEHKkOIE4MUfLf6U/5LZWIgapeEfhM3dsKBOw18/d8GF0
SXNx3+3JBJebAchrQnE9oWuCryhl39BTmvHBBcUq9kPyCZeh7kW1NYAlqu5dZ/VI
NActqkEIMh6XzM+PNG3t+PoO9s4FHcrY+LLPqcEEJsL4IL95Mwi/0SHuyZXYCUMf
b/bIv9MTdJclWFtro2Rvlm8vQ76v7IE+1Lz3QGrprIBKVhhitAQpissBC1VUJMcE
qd9QlX3mw6URfLT0R2SXGL5Gr4jdX3zI5LB08fO1Y5xU42QzlRHJP8QtGOW6Riqg
nuTBoaVauuZCxw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:19:03 2026 by rpki-client