Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier: kVPgLsoO3DIhY+A/olysUfpd1JcKupoUYsau0bN/rIw=
Subject key identifier: 23:40:11:A3:EB:76:98:EE:96:C5:B7:BB:BD:08:D8:E7:39:58:FF:92
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer: /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial: 019F18D6D0EF57A4BCE73F756542ABB1F73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number: 157A
Signing time: Tue 30 Jun 2026 14:02:39 +0000
Manifest this update: Tue 30 Jun 2026 14:02:39 +0000
Manifest next update: Wed 01 Jul 2026 14:02:39 +0000
Files and hashes: 1: 8UFGpbA8MDgJIJo8GfPEXs7dPEw.roa (hash: saYZDeX4Ot6QjGMv9hDM9mIHKuSoX0l+GffuAagEH4k=)
2: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: vrxvGZfDQY6SxTNl0GVUGp3VxXPfySO7cwO92HeLTGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:d0:ef:57:a4:bc:e7:3f:75:65:42:ab:b1:f7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Validity
Not Before: Jun 30 14:02:39 2026 GMT
Not After : Jul 1 14:02:39 2026 GMT
Subject: CN=234011a3eb7698ee96c5b7bbbd08d8e73958ff92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:03:91:6c:af:34:38:7f:b6:cd:3c:5a:9a:7c:
6c:4d:8f:80:a4:5f:14:ce:67:ac:84:28:dd:08:b9:
b5:a9:54:e1:18:3d:06:23:44:a4:46:23:14:b1:ba:
e2:41:70:41:7a:c6:cb:d9:4b:3e:54:86:4d:8f:36:
31:38:35:4a:24:0e:aa:5d:f0:c9:a5:60:bc:05:6d:
1e:2c:4c:97:95:f5:c5:80:74:50:3f:10:10:0e:77:
51:37:23:4d:06:85:06:45:19:49:18:f7:6d:63:4b:
09:e3:9a:42:15:55:f2:b7:3c:00:97:f3:0b:fb:bf:
79:79:8c:46:fb:0a:a8:aa:19:38:89:42:65:f7:34:
1c:bd:fa:97:94:3b:0e:89:3c:3f:fe:b3:60:ff:ce:
ca:3b:9d:8f:5b:ce:ee:ba:34:6f:df:19:d0:bd:90:
ac:77:ce:03:33:67:46:91:a5:92:c6:87:1b:70:0d:
9a:b9:ae:a3:08:15:ba:2b:d0:03:99:b4:48:38:39:
04:3e:ef:66:99:17:75:6e:5d:dc:0b:62:8e:2d:58:
98:90:87:f4:29:96:b0:da:fb:b0:0c:19:97:3a:c8:
1d:d7:1b:9f:4f:f4:d8:58:90:1b:5d:72:8d:d1:ce:
d0:9b:74:7b:2c:08:a1:b3:8b:48:4a:af:21:ab:26:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:40:11:A3:EB:76:98:EE:96:C5:B7:BB:BD:08:D8:E7:39:58:FF:92
X509v3 Authority Key Identifier:
keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:be:11:4f:d2:62:8f:98:ab:ad:b1:17:19:6d:14:ff:e3:1c:
2f:fc:3b:b9:44:98:8c:68:56:bd:3b:1a:1e:ca:2e:00:8c:e8:
11:d5:f9:94:f6:4d:17:89:85:98:59:c5:29:21:85:6d:2b:97:
4e:04:5c:2d:60:ad:77:eb:02:be:b2:6c:74:22:f4:50:6b:ec:
ed:2a:d2:94:7f:0d:2d:00:45:22:6c:4c:b1:41:58:61:a0:be:
33:05:c2:84:21:6b:52:9b:cf:5d:50:e9:3b:9f:7e:01:1e:11:
72:6a:a5:6c:e2:a9:77:b7:eb:68:42:8c:fe:81:b6:88:ce:cf:
ad:d4:12:60:e4:58:98:05:76:e1:7a:1a:0c:eb:30:03:15:e4:
d3:42:84:a0:8b:34:f4:f6:6e:45:92:9c:3a:14:62:5f:fd:50:
14:32:7f:6a:b4:fc:1f:92:fe:12:7e:3d:2f:15:59:a0:66:ac:
10:c3:e4:b7:0e:9a:a0:20:cc:08:22:e8:0b:cc:93:be:51:9c:
44:59:fa:5a:f3:9d:86:a2:a2:7b:50:77:b1:0f:1e:9a:2d:80:
57:02:21:f9:ed:bf:9f:05:16:45:52:61:32:75:dc:5e:01:ad:
52:ab:70:0c:f0:01:96:11:8e:29:40:42:fc:67:dc:9b:3d:b9:
64:70:c4:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1tDvV6S85z91ZUKrsfc9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjQ2MzQ2ZGRiM2U2YmE2ZTg5MDAwNWI4ODE0OGQyZDZj
ZTk5NzEwHhcNMjYwNjMwMTQwMjM5WhcNMjYwNzAxMTQwMjM5WjAzMTEwLwYDVQQD
EygyMzQwMTFhM2ViNzY5OGVlOTZjNWI3YmJiZDA4ZDhlNzM5NThmZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QORbK80OH+2zTxamnxsTY+ApF8U
zmeshCjdCLm1qVThGD0GI0SkRiMUsbriQXBBesbL2Us+VIZNjzYxODVKJA6qXfDJ
pWC8BW0eLEyXlfXFgHRQPxAQDndRNyNNBoUGRRlJGPdtY0sJ45pCFVXytzwAl/ML
+795eYxG+wqoqhk4iUJl9zQcvfqXlDsOiTw//rNg/87KO52PW87uujRv3xnQvZCs
d84DM2dGkaWSxocbcA2aua6jCBW6K9ADmbRIODkEPu9mmRd1bl3cC2KOLViYkIf0
KZaw2vuwDBmXOsgd1xufT/TYWJAbXXKN0c7Qm3R7LAihs4tISq8hqyazvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNAEaPrdpjulsW3u70I2Oc5WP+SMB8GA1UdIwQY
MBaAFPIkY0bds+a6bokABbiBSNLWzplxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlSalJ0Mno1cnB1aVFBRnVJRkkwdGJPbVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lZWE5ZDEtMjM5Yi00MzQ5LThiNDUt
YjViYWNkZDA3NzlkLzEvOGlSalJ0Mno1cnB1aVFBRnVJRkkwdGJPbVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lZWE5ZDEtMjM5Yi00MzQ5LThiNDUtYjViYWNkZDA3Nzlk
LzEvOGlSalJ0Mno1cnB1aVFBRnVJRkkwdGJPbVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfb4RT9Ji
j5irrbEXGW0U/+McL/w7uUSYjGhWvTsaHsouAIzoEdX5lPZNF4mFmFnFKSGFbSuX
TgRcLWCtd+sCvrJsdCL0UGvs7SrSlH8NLQBFImxMsUFYYaC+MwXChCFrUpvPXVDp
O59+AR4RcmqlbOKpd7fraEKM/oG2iM7PrdQSYORYmAV24XoaDOswAxXk00KEoIs0
9PZuRZKcOhRiX/1QFDJ/arT8H5L+En49LxVZoGasEMPktw6aoCDMCCLoC8yTvlGc
RFn6WvOdhqKie1B3sQ8emi2AVwIh+e2/nwUWRVJhMnXcXgGtUqtwDPABlhGOKUBC
/Gfcmz25ZHDEVA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:57 2026 by rpki-client