Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json)
Hash identifier: 77GpewVJVJ7VqG1VMqgbtEhgPAxbbXvfn8J4+N4S8QA=
Subject key identifier: 04:22:64:1A:35:B0:B1:94:11:28:22:B7:80:AD:D6:72:23:AB:A1:AC
Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424
Certificate serial: 019F0B875D1CCE3C2E100EBBC3E05F4CD221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
Manifest number: 02D7
Signing time: Sun 28 Jun 2026 00:00:48 +0000
Manifest this update: Sun 28 Jun 2026 00:00:48 +0000
Manifest next update: Mon 29 Jun 2026 00:00:48 +0000
Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: tdhh4TmwwTE7hbVmOPfgRADR3vD5Qydhc3nSimVAQVE=)
2: LS1I0LR07OhJxEEUNJqhn1-nNT0.roa (hash: 05VWudDvTZxRagJ/ZMpYgYcO8jy0CMReHlty6IA1+UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0b:87:5d:1c:ce:3c:2e:10:0e:bb:c3:e0:5f:4c:d2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424
Validity
Not Before: Jun 28 00:00:48 2026 GMT
Not After : Jun 29 00:00:48 2026 GMT
Subject: CN=0422641a35b0b194112822b780add67223aba1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:af:70:04:61:0b:89:a2:7f:1d:60:c3:04:
50:e7:b5:36:b9:b2:bb:eb:1c:4b:37:10:e7:e5:59:
2c:d9:a4:0f:11:01:95:82:6e:4c:29:5a:d3:e8:a5:
f9:02:31:b8:cf:e2:98:04:95:bb:a5:62:f8:e4:65:
85:50:15:63:c2:36:c7:73:84:a3:be:92:46:a8:f9:
10:4a:76:9c:be:f0:0c:3e:ab:aa:65:bd:73:0b:24:
23:4f:76:16:2d:7d:b3:d8:f5:1b:c4:2b:10:97:c3:
0f:cc:d2:2a:bb:8e:46:23:a3:4e:85:c7:8e:91:5c:
70:d6:8d:06:c3:9c:ef:28:b0:8c:b1:b3:5b:49:5e:
2b:26:fc:c4:ce:40:7f:12:a5:34:dc:c9:81:80:d0:
0e:2d:2a:5e:87:34:64:6b:ee:c6:96:c0:86:fa:ac:
10:66:ac:cd:b6:40:04:ae:fb:00:50:82:bf:d2:76:
7b:90:d1:e5:dd:48:0b:f7:71:e0:d0:35:01:61:a0:
ad:79:05:63:19:43:2e:18:b9:a3:2b:2e:60:d8:22:
29:12:ea:9d:49:22:6a:e7:bd:48:d0:65:a1:7a:e5:
8d:a5:6a:4e:ac:e3:9f:99:91:09:b8:e1:de:b1:49:
fc:22:46:0e:24:37:d9:d6:2a:dc:86:7f:bd:21:8a:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:22:64:1A:35:B0:B1:94:11:28:22:B7:80:AD:D6:72:23:AB:A1:AC
X509v3 Authority Key Identifier:
keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0c:34:85:f1:cd:5c:6b:a8:43:75:fc:8d:1b:a4:fe:9e:ae:
8f:a7:94:52:1a:4b:b7:38:1e:ea:67:4a:d8:fb:1a:2e:2d:54:
59:5a:7e:ae:1e:a0:8a:24:5f:c4:7b:35:ce:37:b7:0c:1e:d4:
4c:65:77:57:d0:2c:32:86:7a:81:c1:eb:55:74:19:d7:71:c2:
83:19:c8:e6:e7:99:f9:6c:78:17:f8:1f:ac:c5:eb:f1:71:86:
31:ad:aa:a0:bd:63:83:9b:2f:8c:74:73:29:2b:8c:ee:fd:83:
7c:46:b7:61:9c:2a:02:ff:32:b2:97:6f:72:31:09:6b:9b:6d:
27:0b:ac:25:8e:52:97:d5:b8:aa:14:11:9f:10:fe:59:2f:fc:
0a:ea:37:07:75:4c:e9:78:59:d1:df:9b:41:1a:48:4d:b4:81:
a9:cf:74:05:ca:75:25:83:29:95:a1:6b:64:40:85:07:ac:df:
00:76:91:81:bb:95:aa:2f:21:f5:f2:f6:4a:dd:97:74:0d:df:
1a:52:27:47:92:2c:c7:1b:03:44:b8:64:57:c8:20:38:d8:fc:
0c:1c:c3:0a:25:2c:ad:8f:05:bd:c0:51:bc:81:85:85:b7:08:
99:a9:9c:b4:66:29:f5:f4:a6:c3:ea:f3:ba:6d:ac:5e:2a:69:
3c:23:07:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Lh10czjwuEA67w+BfTNIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjAwNzVjMDk0NGZiMTYzNGI2MjhiYjEwYjY3ZjEyYzg3
M2U0MjQwHhcNMjYwNjI4MDAwMDQ4WhcNMjYwNjI5MDAwMDQ4WjAzMTEwLwYDVQQD
EygwNDIyNjQxYTM1YjBiMTk0MTEyODIyYjc4MGFkZDY3MjIzYWJhMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsWvcARhC4mifx1gwwRQ57U2ubK7
6xxLNxDn5Vks2aQPEQGVgm5MKVrT6KX5AjG4z+KYBJW7pWL45GWFUBVjwjbHc4Sj
vpJGqPkQSnacvvAMPquqZb1zCyQjT3YWLX2z2PUbxCsQl8MPzNIqu45GI6NOhceO
kVxw1o0Gw5zvKLCMsbNbSV4rJvzEzkB/EqU03MmBgNAOLSpehzRka+7GlsCG+qwQ
ZqzNtkAErvsAUIK/0nZ7kNHl3UgL93Hg0DUBYaCteQVjGUMuGLmjKy5g2CIpEuqd
SSJq571I0GWheuWNpWpOrOOfmZEJuOHesUn8IkYOJDfZ1irchn+9IYrp9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQiZBo1sLGUESgit4Ct1nIjq6GsMB8GA1UdIwQY
MBaAFPJgB1wJRPsWNLYouxC2fxLIc+QkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEt
NmEzYmI5MjQ0M2ZjLzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEtNmEzYmI5MjQ0M2Zj
LzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYww0hfHN
XGuoQ3X8jRuk/p6uj6eUUhpLtzge6mdK2PsaLi1UWVp+rh6giiRfxHs1zje3DB7U
TGV3V9AsMoZ6gcHrVXQZ13HCgxnI5ueZ+Wx4F/gfrMXr8XGGMa2qoL1jg5svjHRz
KSuM7v2DfEa3YZwqAv8yspdvcjEJa5ttJwusJY5Sl9W4qhQRnxD+WS/8Cuo3B3VM
6XhZ0d+bQRpITbSBqc90Bcp1JYMplaFrZECFB6zfAHaRgbuVqi8h9fL2St2XdA3f
GlInR5IsxxsDRLhkV8ggONj8DBzDCiUsrY8FvcBRvIGFhbcImamctGYp9fSmw+rz
um2sXippPCMH0A==
-----END CERTIFICATE-----
Generated at Sun Jun 28 08:10:16 2026 by rpki-client