Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: Y5LmmjsuyKlrwLLr3RCLIk3vypLDGppL2jLbg73QvhY=
Subject key identifier: C3:CC:74:AD:17:C2:2A:8C:02:B6:6D:D7:62:C6:14:7D:B2:85:1F:EF
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 019F276CFF2250E7DF71501AA5D038AB37F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 13D9
Signing time: Fri 03 Jul 2026 10:01:22 +0000
Manifest this update: Fri 03 Jul 2026 10:01:22 +0000
Manifest next update: Sat 04 Jul 2026 10:01:22 +0000
Files and hashes: 1: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: Tf789blsRZFS/ayWqp3L4D2A7Rw2nzUVN2tcyuAfqpQ=)
2: iir-MP9u--5X9N6sLaapXHQB96w.roa (hash: KYgiiMZkt1y8OXMvRPUfLQi6b3EsUMCv28kMOUxnz3s=)
3: l8WM5SXhhLHZk6-0rTuPZujifDU.roa (hash: OwasY0cE4RjsEomhMQYGit6AbKnSUZ5M+37Aov/WE20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:6c:ff:22:50:e7:df:71:50:1a:a5:d0:38:ab:37:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Jul 3 10:01:22 2026 GMT
Not After : Jul 4 10:01:22 2026 GMT
Subject: CN=c3cc74ad17c22a8c02b66dd762c6147db2851fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:cb:1e:42:bf:73:f0:80:20:54:e6:a7:dd:
11:2d:cf:29:12:2a:5f:95:46:a6:ce:f8:19:aa:66:
ff:02:27:d3:d6:27:f4:5e:3b:ba:9c:24:ac:a5:09:
0b:3f:a2:80:a7:9a:5e:f9:75:a8:32:5e:cb:bc:db:
bc:c2:8d:66:5d:ce:28:c6:e3:3f:a2:c4:a0:82:dd:
ce:44:5f:14:7a:38:01:44:0b:19:25:1a:cb:c4:4b:
9c:65:83:b2:09:a9:3d:11:ac:8b:35:d8:ef:9b:ce:
bb:67:6d:2f:58:6e:53:d4:d3:41:ca:64:f6:6c:59:
a2:ed:f7:57:f4:ac:04:50:d0:aa:f7:f6:5c:a0:26:
1f:a6:a5:e2:d1:2f:65:cf:c6:44:09:07:89:2c:8e:
1a:11:47:ec:f6:60:a2:2d:af:00:d7:db:3e:fd:c6:
16:5b:56:65:b6:6a:38:40:89:1d:63:97:87:3e:f0:
7e:4d:39:55:c9:d7:f6:ac:e6:0b:23:13:67:d1:df:
33:98:2a:48:5d:77:91:e4:f3:77:6b:36:3c:31:5d:
94:c5:7f:b9:db:89:5c:35:09:b0:08:fe:1f:90:6a:
af:78:5d:96:7d:5a:f7:22:ae:d5:09:85:7b:9a:b6:
fc:fa:2d:a9:47:03:26:1a:5e:85:be:e2:1b:6f:8f:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CC:74:AD:17:C2:2A:8C:02:B6:6D:D7:62:C6:14:7D:B2:85:1F:EF
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ea:af:2c:96:41:2a:c2:34:17:8b:15:2e:d5:85:98:cb:5e:
28:82:9d:24:cd:39:ed:f8:cb:c5:c1:3e:f0:2e:c6:15:fd:0a:
41:cf:74:b1:b7:d2:af:cf:47:24:ed:e4:52:63:10:33:3f:f0:
82:3c:4a:df:ad:e4:40:4b:3e:dc:4b:bf:3c:08:78:ab:80:36:
82:9a:75:87:74:df:94:72:16:dd:24:05:2c:8a:ea:18:32:5d:
81:cb:23:ba:c4:87:d2:b6:73:1c:ca:32:02:d5:a6:0a:30:2b:
15:fe:b1:4c:65:de:4d:6a:19:d8:01:c2:3a:ff:21:75:a1:6f:
b7:d6:82:b0:c6:72:e8:c9:03:3f:c9:4d:58:86:21:c7:9d:f6:
59:ee:9c:cd:f7:8c:c6:19:bc:03:5e:84:66:e6:80:5b:a4:e0:
ff:b6:3b:e5:cc:49:74:f7:be:7b:15:63:a2:e7:76:43:1b:97:
77:ba:d8:f5:d6:b1:e8:85:93:64:8b:c0:54:32:6d:b0:e7:e7:
8b:71:33:6a:59:33:f7:09:ae:4c:73:93:f8:b9:54:ac:a3:80:
ad:cb:6a:d8:b8:52:c8:8f:11:5a:63:00:38:ec:18:59:38:18:
1d:69:74:f3:f4:90:75:fb:ec:3d:12:d8:95:0e:66:74:74:25:
f7:75:dc:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8nbP8iUOffcVAapdA4qzfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNWNiOWFmYzhhODY3MGUxZjExNmNiZDIxNDk5YzlmNzEy
MTViYzAwHhcNMjYwNzAzMTAwMTIyWhcNMjYwNzA0MTAwMTIyWjAzMTEwLwYDVQQD
EyhjM2NjNzRhZDE3YzIyYThjMDJiNjZkZDc2MmM2MTQ3ZGIyODUxZmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ibLHkK/c/CAIFTmp90RLc8pEipf
lUamzvgZqmb/AifT1if0Xju6nCSspQkLP6KAp5pe+XWoMl7LvNu8wo1mXc4oxuM/
osSggt3ORF8UejgBRAsZJRrLxEucZYOyCak9EayLNdjvm867Z20vWG5T1NNBymT2
bFmi7fdX9KwEUNCq9/ZcoCYfpqXi0S9lz8ZECQeJLI4aEUfs9mCiLa8A19s+/cYW
W1Zltmo4QIkdY5eHPvB+TTlVydf2rOYLIxNn0d8zmCpIXXeR5PN3azY8MV2UxX+5
24lcNQmwCP4fkGqveF2WfVr3Iq7VCYV7mrb8+i2pRwMmGl6FvuIbb4/VfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPMdK0XwiqMArZt12LGFH2yhR/vMB8GA1UdIwQY
MBaAFPFcua/IqGcOHxFsvSFJnJ9xIVvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgt
MDI3YTc0M2JhNDYyLzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgtMDI3YTc0M2JhNDYy
LzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuqvLJZB
KsI0F4sVLtWFmMteKIKdJM057fjLxcE+8C7GFf0KQc90sbfSr89HJO3kUmMQMz/w
gjxK363kQEs+3Eu/PAh4q4A2gpp1h3TflHIW3SQFLIrqGDJdgcsjusSH0rZzHMoy
AtWmCjArFf6xTGXeTWoZ2AHCOv8hdaFvt9aCsMZy6MkDP8lNWIYhx532We6czfeM
xhm8A16EZuaAW6Tg/7Y75cxJdPe+exVjoud2QxuXd7rY9dax6IWTZIvAVDJtsOfn
i3Ezalkz9wmuTHOT+LlUrKOArctq2LhSyI8RWmMAOOwYWTgYHWl08/SQdfvsPRLY
lQ5mdHQl93XcEw==
-----END CERTIFICATE-----
Generated at Fri Jul 3 17:48:54 2026 by rpki-client