Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
File: 8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json)
Hash identifier: wSdNPpjKgZiZHdjHqACsbuoU+4vDA7xdjAJKszNlbh0=
Subject key identifier: 3D:2C:05:8E:4B:81:05:AE:72:BC:DA:B0:D7:E4:3B:AC:3A:65:89:A1
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial: 019F84FB2D8E481826768AF7D416B6971D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
Manifest number: 0A22
Signing time: Tue 21 Jul 2026 14:01:21 +0000
Manifest this update: Tue 21 Jul 2026 14:01:21 +0000
Manifest next update: Wed 22 Jul 2026 14:01:21 +0000
Files and hashes: 1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: BV9uneEBRZfWuSCbi0F03IXkhBw+61lG44iFkjjHghA=)
2: NSu3QEv-adix_Q5roohaGM-bpUY.roa (hash: VnW6Wcl5mZCO2kBW9kdAmVPadw5Gk+HyABLxpyWmKB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fb:2d:8e:48:18:26:76:8a:f7:d4:16:b6:97:1d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Validity
Not Before: Jul 21 14:01:21 2026 GMT
Not After : Jul 22 14:01:21 2026 GMT
Subject: CN=3d2c058e4b8105ae72bcdab0d7e43bac3a6589a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:c1:b6:b2:44:39:20:fe:ae:01:db:a0:d2:
93:87:63:de:80:39:c6:c3:1d:f9:78:6b:c1:3d:28:
20:d5:68:e0:17:7b:79:11:01:45:dd:1a:70:1e:33:
05:20:cf:2c:4c:8b:31:43:39:17:60:33:58:12:43:
b5:c9:63:bc:93:2c:3b:4e:b8:fb:94:5a:6a:fe:24:
4e:65:61:94:ae:e9:4d:d8:c8:99:96:b5:2e:66:b2:
4e:e2:84:70:02:fc:32:45:04:0b:20:a0:7e:e7:db:
5b:0e:f3:be:c1:97:98:ca:34:f0:c5:72:1c:fe:e2:
44:e6:c9:11:ce:c2:6c:14:d6:39:65:dc:13:d5:0a:
fa:a8:67:38:c8:13:89:02:d5:4e:93:f4:ea:0c:13:
46:c7:a2:61:15:25:9f:38:c2:6a:76:2c:a2:26:ee:
0d:2e:ea:84:d1:ef:0e:91:cb:53:bd:97:de:ee:bb:
72:1d:9b:78:57:79:c5:8d:44:3d:33:0f:d6:0b:6f:
09:29:e1:9c:4f:e3:78:54:42:cf:cb:50:2b:86:e8:
0d:58:c9:14:43:ba:6f:a2:a8:48:cc:0f:c9:62:8c:
42:7d:f6:8d:7f:85:68:90:69:f7:ab:40:30:1d:04:
58:26:9b:76:1f:11:b6:68:61:b8:5f:62:74:bf:14:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2C:05:8E:4B:81:05:AE:72:BC:DA:B0:D7:E4:3B:AC:3A:65:89:A1
X509v3 Authority Key Identifier:
keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:27:32:4c:99:87:5e:c5:90:0d:92:52:05:5e:0a:73:af:0c:
ad:1b:6f:8f:97:01:00:ed:25:81:5e:80:cc:cc:ae:0d:b9:b5:
51:6b:07:2a:e8:4b:db:f6:58:9f:44:05:42:39:4d:35:19:45:
6c:d6:c7:bc:54:7a:cf:f0:77:44:48:74:b3:f2:fa:34:cc:16:
d6:41:50:fc:93:d8:c6:9e:66:43:c3:a7:aa:53:3c:c2:79:f5:
fa:02:68:ea:a9:68:53:e6:87:e8:fd:5c:be:97:38:a9:a1:93:
5c:c0:12:d0:be:ff:26:32:5c:b9:90:ba:eb:4b:dc:4d:4e:e7:
b4:d0:78:8b:0e:76:ea:64:60:cf:fd:47:8b:c4:c3:2f:a5:a6:
57:0c:35:47:14:1b:b6:0f:39:cb:57:ad:c9:0f:31:81:54:50:
5b:e3:89:0a:d2:11:8a:eb:c4:fa:42:37:95:b0:87:b7:d2:cd:
26:4a:53:4f:d2:f7:d0:06:6e:54:07:de:7a:78:46:8b:4e:15:
5e:81:e4:7e:28:1e:83:28:82:f1:96:b2:f1:8a:2f:68:17:7a:
b1:8c:2f:14:a6:b7:0c:22:64:3d:1f:d5:28:b6:e9:60:83:7f:
2a:b5:a6:19:dc:4b:6c:9e:66:68:3e:e4:37:a5:46:37:8a:05:
42:1f:18:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+E+y2OSBgmdor31Ba2lx0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOTg1OWI3MGVhNDUwZTEzYWRhODcyNGMwZWI2YmVlY2M4
ZGFhOTEwHhcNMjYwNzIxMTQwMTIxWhcNMjYwNzIyMTQwMTIxWjAzMTEwLwYDVQQD
EygzZDJjMDU4ZTRiODEwNWFlNzJiY2RhYjBkN2U0M2JhYzNhNjU4OWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2evBtrJEOSD+rgHboNKTh2PegDnG
wx35eGvBPSgg1WjgF3t5EQFF3RpwHjMFIM8sTIsxQzkXYDNYEkO1yWO8kyw7Trj7
lFpq/iROZWGUrulN2MiZlrUuZrJO4oRwAvwyRQQLIKB+59tbDvO+wZeYyjTwxXIc
/uJE5skRzsJsFNY5ZdwT1Qr6qGc4yBOJAtVOk/TqDBNGx6JhFSWfOMJqdiyiJu4N
LuqE0e8OkctTvZfe7rtyHZt4V3nFjUQ9Mw/WC28JKeGcT+N4VELPy1ArhugNWMkU
Q7pvoqhIzA/JYoxCffaNf4VokGn3q0AwHQRYJpt2HxG2aGG4X2J0vxSPXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0sBY5LgQWucrzasNfkO6w6ZYmhMB8GA1UdIwQY
MBaAFPKYWbcOpFDhOtqHJMDra+7MjaqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHBoWnR3NmtVT0U2Mm9ja3dPdHI3c3lOcXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xZjA0MGItYjMxMC00MzhiLWIxNWUt
M2RmNDdiNjIwZDYwLzEvOHBoWnR3NmtVT0U2Mm9ja3dPdHI3c3lOcXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xZjA0MGItYjMxMC00MzhiLWIxNWUtM2RmNDdiNjIwZDYw
LzEvOHBoWnR3NmtVT0U2Mm9ja3dPdHI3c3lOcXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCcyTJmH
XsWQDZJSBV4Kc68MrRtvj5cBAO0lgV6AzMyuDbm1UWsHKuhL2/ZYn0QFQjlNNRlF
bNbHvFR6z/B3REh0s/L6NMwW1kFQ/JPYxp5mQ8OnqlM8wnn1+gJo6qloU+aH6P1c
vpc4qaGTXMAS0L7/JjJcuZC660vcTU7ntNB4iw526mRgz/1Hi8TDL6WmVww1RxQb
tg85y1etyQ8xgVRQW+OJCtIRiuvE+kI3lbCHt9LNJkpTT9L30AZuVAfeenhGi04V
XoHkfigegyiC8Zay8YovaBd6sYwvFKa3DCJkPR/VKLbpYIN/KrWmGdxLbJ5maD7k
N6VGN4oFQh8YgQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:29:31 2026 by rpki-client