Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
File: RPCGM8H1_XFU2I3h1syc17gEMK0.mft (raw, json)
Hash identifier: VSm1FB+asjcRmrx8pmNqHp749L8CAu4K0zXg2D2lGs0=
Subject key identifier: 33:0B:70:21:7B:DA:C7:AE:97:C3:13:55:7F:0B:1D:78:D7:C2:E8:D9
Authority key identifier: 44:F0:86:33:C1:F5:FD:71:54:D8:8D:E1:D6:CC:9C:D7:B8:04:30:AD
Certificate issuer: /CN=44f08633c1f5fd7154d88de1d6cc9cd7b80430ad
Certificate serial: 019F841F11E172B47E9FAFD952A299F26A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
Manifest number: 85
Signing time: Tue 21 Jul 2026 10:00:56 +0000
Manifest this update: Tue 21 Jul 2026 10:00:56 +0000
Manifest next update: Wed 22 Jul 2026 10:00:56 +0000
Files and hashes: 1: 5KctcxsYT_6CBJ2cdoYPOhQAGc4.roa (hash: +1bCb5V2QswAKGR65R9SngG1RC/2PS62IO4DT3u7w0w=)
2: MT7FDc3brVHPS51pC1TSYkG931E.roa (hash: OXmE7HUkMdWGmBsN2LVDSTT5wVdQkht8zETc4dCdqB4=)
3: RPCGM8H1_XFU2I3h1syc17gEMK0.crl (hash: 11hvEky9gMiBfUUOqbSpYCZF7VFShOzLZiAO4WgPWT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1f:11:e1:72:b4:7e:9f:af:d9:52:a2:99:f2:6a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f08633c1f5fd7154d88de1d6cc9cd7b80430ad
Validity
Not Before: Jul 21 10:00:56 2026 GMT
Not After : Jul 22 10:00:56 2026 GMT
Subject: CN=330b70217bdac7ae97c313557f0b1d78d7c2e8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:02:3c:80:b5:ca:98:0a:11:3c:b9:79:38:
2d:39:db:ef:74:d6:eb:aa:d8:59:b7:8a:6f:d6:40:
18:ca:bd:f4:2f:d3:15:3b:66:70:32:58:a5:a1:65:
ad:c4:18:2d:04:fe:96:f3:79:36:f9:df:64:19:10:
dd:0c:aa:7c:ec:6f:2b:36:da:ae:47:6e:dd:84:cd:
83:eb:f9:89:76:7b:19:6b:0f:2b:bd:56:39:37:2e:
19:d9:5f:15:a3:ce:61:b2:9f:ad:9b:e7:58:78:3b:
2c:25:7f:33:a3:86:25:d1:d1:3f:61:a8:bd:e9:4a:
be:4a:86:08:8c:e0:4a:46:ce:46:db:17:f2:80:19:
cd:f5:25:d9:99:35:01:bd:6f:9f:d5:30:de:91:cd:
79:34:dd:2b:6e:56:6a:30:e2:97:41:f3:93:e1:22:
50:9a:3a:3c:f4:ab:2b:b4:c3:a6:3b:1f:30:82:0b:
92:21:18:da:52:aa:f9:48:ca:a9:73:6c:df:74:16:
55:de:ef:28:86:32:f3:fc:46:d5:94:8e:36:5d:67:
36:bd:7f:96:28:b9:d2:22:9d:b2:43:01:e7:be:05:
e9:a5:60:34:27:1d:58:77:3f:dd:1b:1a:b6:53:8c:
62:12:81:ed:b1:7a:2b:e6:a9:d0:ed:2e:af:7e:6c:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0B:70:21:7B:DA:C7:AE:97:C3:13:55:7F:0B:1D:78:D7:C2:E8:D9
X509v3 Authority Key Identifier:
keyid:44:F0:86:33:C1:F5:FD:71:54:D8:8D:E1:D6:CC:9C:D7:B8:04:30:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPCGM8H1_XFU2I3h1syc17gEMK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/16aaf6-3f2b-4cc5-9bd4-f62d8c0b9f55/1/RPCGM8H1_XFU2I3h1syc17gEMK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:50:ec:75:75:24:dc:9f:26:74:ca:80:e6:fc:30:79:a2:e1:
63:dc:52:f5:ce:e9:7d:75:4b:f1:b1:c4:bf:d5:cc:dc:d4:69:
32:6f:93:c6:75:c9:03:26:77:29:5c:5f:61:7f:34:ef:51:64:
8a:82:b5:0a:2c:03:38:2b:72:46:7e:cf:47:00:dc:7d:b1:8b:
f0:b9:f6:f7:fc:61:4c:63:7c:9f:b2:81:38:aa:d9:1c:77:c5:
c7:d9:93:fe:8a:cc:0c:dd:32:a0:6b:b9:38:45:d4:a6:dd:39:
5b:a8:83:24:37:c0:2b:39:40:1e:3b:ee:b2:09:26:f4:f3:ae:
19:04:d8:4f:6d:7c:03:72:2b:b2:86:d2:4f:c9:f1:07:5e:ff:
96:2e:ad:ac:03:a7:05:a9:9b:18:3b:11:6e:3a:9e:8e:75:a4:
e4:41:32:23:c4:10:28:a3:d1:22:8b:72:18:81:76:e3:7b:ef:
9e:c0:51:da:fb:17:74:31:24:00:40:0a:57:bb:54:c2:5e:6a:
1b:4d:ab:93:22:cf:c3:ab:e8:2c:df:44:e1:2e:49:e3:13:48:
03:0a:3b:06:a1:83:2a:7d:2d:d3:6e:2a:d9:a7:09:07:65:e7:
53:e3:3f:7c:ae:e1:7f:80:f0:44:80:81:6d:b6:83:85:a1:16:
fd:38:23:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EHxHhcrR+n6/ZUqKZ8mplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZjA4NjMzYzFmNWZkNzE1NGQ4OGRlMWQ2Y2M5Y2Q3Yjgw
NDMwYWQwHhcNMjYwNzIxMTAwMDU2WhcNMjYwNzIyMTAwMDU2WjAzMTEwLwYDVQQD
EygzMzBiNzAyMTdiZGFjN2FlOTdjMzEzNTU3ZjBiMWQ3OGQ3YzJlOGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfACPIC1ypgKETy5eTgtOdvvdNbr
qthZt4pv1kAYyr30L9MVO2ZwMliloWWtxBgtBP6W83k2+d9kGRDdDKp87G8rNtqu
R27dhM2D6/mJdnsZaw8rvVY5Ny4Z2V8Vo85hsp+tm+dYeDssJX8zo4Yl0dE/Yai9
6Uq+SoYIjOBKRs5G2xfygBnN9SXZmTUBvW+f1TDekc15NN0rblZqMOKXQfOT4SJQ
mjo89KsrtMOmOx8wgguSIRjaUqr5SMqpc2zfdBZV3u8ohjLz/EbVlI42XWc2vX+W
KLnSIp2yQwHnvgXppWA0Jx1Ydz/dGxq2U4xiEoHtsXor5qnQ7S6vfmwn/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMLcCF72seul8MTVX8LHXjXwujZMB8GA1UdIwQY
MBaAFETwhjPB9f1xVNiN4dbMnNe4BDCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlBDR004SDFfWEZVMkkzaDFzeWMxN2dFTUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xNmFhZjYtM2YyYi00Y2M1LTliZDQt
ZjYyZDhjMGI5ZjU1LzEvUlBDR004SDFfWEZVMkkzaDFzeWMxN2dFTUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xNmFhZjYtM2YyYi00Y2M1LTliZDQtZjYyZDhjMGI5ZjU1
LzEvUlBDR004SDFfWEZVMkkzaDFzeWMxN2dFTUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFDsdXUk
3J8mdMqA5vwweaLhY9xS9c7pfXVL8bHEv9XM3NRpMm+TxnXJAyZ3KVxfYX8071Fk
ioK1CiwDOCtyRn7PRwDcfbGL8Ln29/xhTGN8n7KBOKrZHHfFx9mT/orMDN0yoGu5
OEXUpt05W6iDJDfAKzlAHjvusgkm9POuGQTYT218A3IrsobST8nxB17/li6trAOn
BambGDsRbjqejnWk5EEyI8QQKKPRIotyGIF243vvnsBR2vsXdDEkAEAKV7tUwl5q
G02rkyLPw6voLN9E4S5J4xNIAwo7BqGDKn0t024q2acJB2XnU+M/fK7hf4DwRICB
bbaDhaEW/TgjCg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:33:43 2026 by rpki-client