Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
File: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft (raw, json)
Hash identifier: XbbVx1uH1j56mpwEmYzMCkwS0DwX0pxChqI/gCU0Wk8=
Subject key identifier: 8A:5A:2C:28:9F:51:95:66:0F:D2:6C:DC:E7:40:53:B7:BD:78:02:83
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 019F84FA734B7D0D520BA5D14D34538500DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
Manifest number: 16CD
Signing time: Tue 21 Jul 2026 14:00:33 +0000
Manifest this update: Tue 21 Jul 2026 14:00:33 +0000
Manifest next update: Wed 22 Jul 2026 14:00:33 +0000
Files and hashes: 1: 9ROo0iC15VlIOvkEDWyQwJOCacY.roa (hash: X5stVJ1ytEh0HyvZJyffab9oO2fx+fQjNKYB1CriIiQ=)
2: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl (hash: Hg84UJ9NoHbewgQXsg3BjbyRc6Xj8pp35NCrTUqf6JQ=)
3: nZXVAEhAwzesGngGVae3JHM5UNg.roa (hash: JJvr3kNnqWeUrrnpiI7ivzQbH103rdFaTcpNQ7xPtuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:73:4b:7d:0d:52:0b:a5:d1:4d:34:53:85:00:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Jul 21 14:00:33 2026 GMT
Not After : Jul 22 14:00:33 2026 GMT
Subject: CN=8a5a2c289f5195660fd26cdce74053b7bd780283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:32:15:66:36:9d:c5:67:40:c1:d5:42:d1:
47:57:84:4c:4b:0e:82:f3:35:39:d7:42:be:e1:24:
1a:e1:37:c5:26:1c:76:7f:86:5e:be:f8:64:81:04:
ee:b5:b2:ba:c2:bf:97:2b:14:e5:4f:55:cf:21:b0:
d9:3f:8f:c7:e7:e7:35:a6:0c:f6:74:60:60:fe:fe:
63:13:ea:c1:3f:70:05:6f:21:20:b6:e3:a6:22:5d:
f1:8f:b9:64:dd:2e:52:e9:c2:d3:08:ea:85:4c:f8:
7b:a0:43:71:19:63:e9:3c:f8:77:a3:b9:9b:06:60:
24:e6:08:64:36:fc:45:73:7f:e5:61:de:3e:88:70:
14:1e:07:64:ba:10:d6:d8:63:8d:48:7d:36:0c:e9:
5b:8d:ce:9f:47:91:ab:cb:a5:6e:c0:ba:7b:81:66:
31:63:8e:28:50:03:d1:57:be:61:51:0f:76:0f:3c:
9f:c0:3a:83:93:1c:7e:a9:15:4b:50:da:88:dd:b8:
21:04:11:4f:19:ce:ac:0e:17:f3:fb:db:af:a0:38:
00:ed:48:04:b0:f6:d5:61:39:1c:0c:6d:bf:a3:a8:
03:98:55:d1:f6:7a:92:6e:44:56:98:3f:85:64:96:
0a:72:4c:d1:28:3b:65:1e:65:c4:2f:39:45:54:b5:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5A:2C:28:9F:51:95:66:0F:D2:6C:DC:E7:40:53:B7:BD:78:02:83
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:36:9c:f3:4c:05:4e:d9:0a:1e:80:ab:b7:45:57:b5:be:b1:
01:f9:bf:0d:d0:8b:5c:6d:ce:72:e1:5c:28:9a:13:c7:ca:a7:
5e:7f:8a:b6:ef:06:2f:6c:13:c1:f3:f7:1c:49:1b:b9:e6:9e:
fa:52:dc:64:b5:c2:fd:39:57:e9:43:dd:a1:43:ad:df:5f:61:
e3:0c:2f:5a:57:17:83:57:7e:5e:72:ae:f3:09:5f:4f:47:5a:
9f:96:99:79:4a:6d:75:13:53:9b:8f:95:7b:65:c7:5d:11:6d:
bf:07:03:2c:af:63:6a:91:9c:03:f5:b5:05:9c:40:7e:f3:d3:
dc:51:7f:49:64:8f:af:41:24:53:c9:64:a4:25:49:5f:53:ea:
07:60:6c:e1:4e:b5:d0:f9:81:07:4f:0a:49:d3:a4:a4:db:0e:
99:a2:8b:d6:1e:d4:7b:6c:fe:e5:ac:8b:88:04:f1:80:b8:67:
1d:1b:ea:8a:ad:32:e8:46:d3:b2:4b:37:fa:df:21:ab:02:de:
76:9d:59:6a:29:18:b7:9e:55:8b:b3:70:21:2b:7b:38:62:1a:
71:4c:15:f3:5d:37:ec:33:f8:b8:99:50:96:23:82:97:5a:9b:
cf:b2:bb:a9:93:62:16:6e:44:37:f1:03:c9:23:7c:5e:5b:61:
ce:9b:be:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+E+nNLfQ1SC6XRTTRThQDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTdkMWYwZDczZmU0ODFjMjE4OGQyOGRlZjBlODU4ZTcx
NTY5N2UwHhcNMjYwNzIxMTQwMDMzWhcNMjYwNzIyMTQwMDMzWjAzMTEwLwYDVQQD
Eyg4YTVhMmMyODlmNTE5NTY2MGZkMjZjZGNlNzQwNTNiN2JkNzgwMjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+MyFWY2ncVnQMHVQtFHV4RMSw6C
8zU510K+4SQa4TfFJhx2f4ZevvhkgQTutbK6wr+XKxTlT1XPIbDZP4/H5+c1pgz2
dGBg/v5jE+rBP3AFbyEgtuOmIl3xj7lk3S5S6cLTCOqFTPh7oENxGWPpPPh3o7mb
BmAk5ghkNvxFc3/lYd4+iHAUHgdkuhDW2GONSH02DOlbjc6fR5Gry6VuwLp7gWYx
Y44oUAPRV75hUQ92DzyfwDqDkxx+qRVLUNqI3bghBBFPGc6sDhfz+9uvoDgA7UgE
sPbVYTkcDG2/o6gDmFXR9nqSbkRWmD+FZJYKckzRKDtlHmXELzlFVLUOXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpaLCifUZVmD9Js3OdAU7e9eAKDMB8GA1UdIwQY
MBaAFCen0fDXP+SBwhiNKN7w6FjnFWl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZmUjhOY181SUhDR0kwbzN2RG9XT2NWYVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kODJlZjYtODM2YS00N2M3LWE2YzEt
ZDZlYWFmYzZiNGY1LzEvSjZmUjhOY181SUhDR0kwbzN2RG9XT2NWYVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kODJlZjYtODM2YS00N2M3LWE2YzEtZDZlYWFmYzZiNGY1
LzEvSjZmUjhOY181SUhDR0kwbzN2RG9XT2NWYVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjac80wF
TtkKHoCrt0VXtb6xAfm/DdCLXG3OcuFcKJoTx8qnXn+Ktu8GL2wTwfP3HEkbueae
+lLcZLXC/TlX6UPdoUOt319h4wwvWlcXg1d+XnKu8wlfT0dan5aZeUptdRNTm4+V
e2XHXRFtvwcDLK9japGcA/W1BZxAfvPT3FF/SWSPr0EkU8lkpCVJX1PqB2Bs4U61
0PmBB08KSdOkpNsOmaKL1h7Ue2z+5ayLiATxgLhnHRvqiq0y6EbTsks3+t8hqwLe
dp1ZaikYt55Vi7NwISt7OGIacUwV81037DP4uJlQliOCl1qbz7K7qZNiFm5EN/ED
ySN8Xlthzpu+qQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:05:16 2026 by rpki-client