Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
File: 8HHkN5gsw0b26BfKZIknI-21QZo.mft (raw, json)
Hash identifier: 7DybDgg/+VKppyHeWqN5fSW0iiVjE9OJBuTRuLi2ELY=
Subject key identifier: E7:87:7D:8A:4D:FF:81:34:01:29:09:36:04:AB:9E:80:CD:E6:5D:8C
Authority key identifier: F0:71:E4:37:98:2C:C3:46:F6:E8:17:CA:64:89:27:23:ED:B5:41:9A
Certificate issuer: /CN=f071e437982cc346f6e817ca64892723edb5419a
Certificate serial: 01A001A5AF19CB65F421201383A6125419F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
Manifest number: 1362
Signing time: Fri 14 Aug 2026 19:00:30 +0000
Manifest this update: Fri 14 Aug 2026 19:00:30 +0000
Manifest next update: Sat 15 Aug 2026 19:00:30 +0000
Files and hashes: 1: 4dTiivW_bvCIIr9OKslRJ2ttAH0.roa (hash: nywsABEuvSZWyJVu4fBV0raW88OjCnUfbkwJDiN85oo=)
2: 8HHkN5gsw0b26BfKZIknI-21QZo.crl (hash: YVLHrIpAihEm5QjlYA6hk93vk6tzIfby7ZpCSOVhPZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:af:19:cb:65:f4:21:20:13:83:a6:12:54:19:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071e437982cc346f6e817ca64892723edb5419a
Validity
Not Before: Aug 14 19:00:30 2026 GMT
Not After : Aug 15 19:00:30 2026 GMT
Subject: CN=e7877d8a4dff81340129093604ab9e80cde65d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:23:60:c2:f2:16:7e:20:b3:39:a4:40:f3:68:
4e:5c:21:10:17:8e:6b:3c:9b:84:fe:97:bf:12:d8:
5b:32:f0:67:61:52:75:71:f8:d0:7b:a2:50:eb:80:
f7:7b:19:7f:2c:fa:ae:86:47:8b:70:96:42:02:ed:
bb:35:0b:13:01:4e:37:52:a8:bc:8e:b5:27:34:7f:
e6:1a:97:4d:2d:1d:a3:4e:05:0f:e1:e2:9a:a9:3f:
19:41:d0:40:e3:fa:a0:bc:4f:f5:92:57:90:ae:6f:
10:8b:ea:6d:52:62:4c:80:b7:c9:23:d1:c3:6f:73:
9f:f3:5b:20:2b:aa:09:70:1d:bb:4e:90:d1:e4:f5:
32:37:4e:c6:1a:6f:c5:cc:b6:5d:fa:63:58:0c:4d:
1c:b9:74:f6:9c:bb:44:6f:0c:f3:8c:a0:b1:34:0c:
f0:80:92:a1:15:d3:79:f6:87:89:89:d9:2b:30:62:
58:0b:14:a4:87:74:39:4f:49:99:c5:3e:b9:88:98:
b9:99:ee:98:ea:df:55:cb:ec:05:17:a6:a2:40:91:
35:2f:e2:1c:71:e9:40:fe:52:b4:61:31:7c:25:f3:
f3:33:bc:37:a4:bf:a6:54:18:6b:e8:57:43:e4:75:
be:c3:88:ce:2e:17:ad:59:a0:7b:d4:d7:b0:5d:68:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:87:7D:8A:4D:FF:81:34:01:29:09:36:04:AB:9E:80:CD:E6:5D:8C
X509v3 Authority Key Identifier:
keyid:F0:71:E4:37:98:2C:C3:46:F6:E8:17:CA:64:89:27:23:ED:B5:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8c:1c:30:06:34:43:cc:3c:c7:8c:8b:3c:d8:54:e0:5e:ef:
51:b1:dc:83:87:1b:13:d7:41:da:1c:36:53:4e:6f:b2:ec:f2:
99:e5:dd:69:ce:0f:33:4b:04:03:c0:a7:b8:a4:91:fe:65:4c:
8b:7d:5c:b7:67:e2:d8:0a:b9:d6:29:07:0a:1f:89:c7:5a:7d:
ed:66:5d:49:5e:a6:36:84:9a:7d:58:5f:ed:cf:1a:ef:89:a1:
b8:5e:29:68:55:9f:1e:82:3b:78:74:de:64:cc:3e:b3:4f:d5:
86:c0:2f:23:7a:a1:5c:a1:59:62:5d:f0:f5:f7:b4:d4:b2:cb:
b0:f5:dc:0e:2d:da:a2:a3:c4:f2:d7:55:fb:04:d4:92:ae:3b:
de:5e:14:79:87:c1:88:3f:95:27:33:aa:35:02:0f:25:53:83:
73:6b:dd:a4:6a:92:69:a1:d0:70:ec:f3:d3:61:fe:65:b9:a3:
21:3c:56:06:85:2b:ec:32:5a:27:3e:94:44:97:ae:85:de:f7:
51:35:0c:47:93:bb:bb:f2:ea:ae:6d:2b:36:59:60:4c:b1:5f:
28:5b:ac:dc:d0:ca:e4:5c:2d:f7:ea:36:32:64:17:34:d9:ef:
ed:1f:c4:72:43:20:49:2b:b6:4c:c8:35:c5:59:4e:ca:05:71:
ab:74:cb:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpa8Zy2X0ISATg6YSVBnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNzFlNDM3OTgyY2MzNDZmNmU4MTdjYTY0ODkyNzIzZWRi
NTQxOWEwHhcNMjYwODE0MTkwMDMwWhcNMjYwODE1MTkwMDMwWjAzMTEwLwYDVQQD
EyhlNzg3N2Q4YTRkZmY4MTM0MDEyOTA5MzYwNGFiOWU4MGNkZTY1ZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CNgwvIWfiCzOaRA82hOXCEQF45r
PJuE/pe/EthbMvBnYVJ1cfjQe6JQ64D3exl/LPquhkeLcJZCAu27NQsTAU43Uqi8
jrUnNH/mGpdNLR2jTgUP4eKaqT8ZQdBA4/qgvE/1kleQrm8Qi+ptUmJMgLfJI9HD
b3Of81sgK6oJcB27TpDR5PUyN07GGm/FzLZd+mNYDE0cuXT2nLtEbwzzjKCxNAzw
gJKhFdN59oeJidkrMGJYCxSkh3Q5T0mZxT65iJi5me6Y6t9Vy+wFF6aiQJE1L+Ic
celA/lK0YTF8JfPzM7w3pL+mVBhr6FdD5HW+w4jOLhetWaB71NewXWjNVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeHfYpN/4E0ASkJNgSrnoDN5l2MMB8GA1UdIwQY
MBaAFPBx5DeYLMNG9ugXymSJJyPttUGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEhIa041Z3N3MGIyNkJmS1pJa25JLTIxUVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wMDcyNWEtMTllZi00MjQ0LTg4OTct
NzhjYjU5Yjc4YTRmLzEvOEhIa041Z3N3MGIyNkJmS1pJa25JLTIxUVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wMDcyNWEtMTllZi00MjQ0LTg4OTctNzhjYjU5Yjc4YTRm
LzEvOEhIa041Z3N3MGIyNkJmS1pJa25JLTIxUVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJowcMAY0
Q8w8x4yLPNhU4F7vUbHcg4cbE9dB2hw2U05vsuzymeXdac4PM0sEA8CnuKSR/mVM
i31ct2fi2Aq51ikHCh+Jx1p97WZdSV6mNoSafVhf7c8a74mhuF4paFWfHoI7eHTe
ZMw+s0/VhsAvI3qhXKFZYl3w9fe01LLLsPXcDi3aoqPE8tdV+wTUkq473l4UeYfB
iD+VJzOqNQIPJVODc2vdpGqSaaHQcOzz02H+ZbmjITxWBoUr7DJaJz6URJeuhd73
UTUMR5O7u/Lqrm0rNllgTLFfKFus3NDK5Fwt9+o2MmQXNNnv7R/EckMgSSu2TMg1
xVlOygVxq3TLIg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:25 2026 by rpki-client