Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: ugQnNMuLoNHr7bOGNw/u7B5VdPWII7N+4Ec1TfKWo98=
Subject key identifier: CB:C5:95:04:31:F5:9B:86:98:88:B3:3E:C4:A6:F5:E4:6B:0E:E3:73
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 01A001020C0B8A33B6A92F1776D2A985D2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 1740
Signing time: Fri 14 Aug 2026 16:01:46 +0000
Manifest this update: Fri 14 Aug 2026 16:01:46 +0000
Manifest next update: Sat 15 Aug 2026 16:01:46 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: cx8CI8483hfqtx20SIfBW731g5VZXyXmJ50T90aCjEE=)
2: PJPU7ysSy48KY3v04GBphQUl2cs.roa (hash: UgUr0rmqR8NIV8vRR5fHckXI734PB2OXvnwqj5r5M0o=)
3: SStaFDrquc-B5erBK4enz2R2C3M.roa (hash: 2/Xo6Lo2ADW2+LmXH2Vl0mWiUWVxOxz/3Zd6qRgZGbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:02:0c:0b:8a:33:b6:a9:2f:17:76:d2:a9:85:d2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Aug 14 16:01:46 2026 GMT
Not After : Aug 15 16:01:46 2026 GMT
Subject: CN=cbc5950431f59b869888b33ec4a6f5e46b0ee373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:9a:00:0e:f6:16:71:a6:45:b6:d7:f4:d9:
47:5d:ca:a7:eb:fc:fe:7e:ee:fa:e9:7d:95:df:ee:
32:9d:38:34:bc:81:8e:1e:37:53:32:bc:03:5b:bd:
0e:32:2b:4d:1c:dc:8e:ab:3c:d1:62:6a:3c:70:79:
5c:61:be:51:18:15:7d:a9:a0:ed:b0:82:02:0b:3e:
a8:c3:df:73:b5:34:2c:14:d9:45:ea:57:da:24:f2:
cc:c7:6c:b5:dd:e8:e9:4e:cf:e7:b6:0f:c7:82:58:
cd:5d:6e:a7:e9:50:e7:2e:ee:73:f6:47:fd:7b:4f:
f5:10:bd:6f:6f:24:65:c1:32:7a:4f:91:3a:a0:a9:
8f:31:8f:f3:7c:9d:a1:7e:f8:3a:e1:c1:95:3e:6f:
e3:c0:52:11:84:84:07:72:a1:77:fc:71:06:64:78:
41:c3:0a:3a:bf:15:ea:f2:bd:af:54:d4:c4:a1:b6:
af:9a:fb:54:18:a7:eb:62:09:13:4d:38:55:13:99:
3c:9c:d7:49:ec:89:f0:9f:1c:88:41:dd:bb:d8:dd:
ea:c6:ff:9e:96:62:0d:0c:a6:83:f7:44:f4:54:56:
14:de:ce:88:9c:fa:b3:fe:2a:0d:26:e9:d6:68:23:
4b:ea:4e:d8:1d:11:74:fc:9f:9a:0f:7f:17:d4:b3:
43:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C5:95:04:31:F5:9B:86:98:88:B3:3E:C4:A6:F5:E4:6B:0E:E3:73
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:82:aa:e5:29:b9:c2:07:c8:d1:dc:02:a2:f2:0d:7d:c3:47:
5a:34:a7:28:bf:b4:b7:91:27:4f:eb:32:e0:e7:ce:3c:ca:e9:
67:e7:31:38:4a:0f:b1:32:f8:de:8c:12:56:94:c9:59:45:26:
27:4f:48:9b:c8:3a:da:66:43:6b:c9:b8:b5:8b:cd:13:10:09:
fb:d3:f6:eb:4f:13:24:f6:7b:91:47:35:ef:52:c7:4b:fe:c1:
a2:d2:67:c1:69:a5:2c:34:ec:55:8b:95:06:ae:71:ef:e1:a5:
7c:a2:24:20:27:96:e0:3e:cb:1e:d9:a0:7e:5b:63:3f:8f:66:
b4:14:05:0e:f2:92:69:4a:03:15:bd:f6:be:db:78:ae:07:3f:
f1:8a:69:b6:b0:13:9f:a7:e8:10:75:cc:44:ee:a8:f3:1d:b5:
cc:ca:f8:58:f2:5a:75:0e:83:a3:19:b0:5c:70:7f:1d:e6:d0:
95:a8:83:c1:d1:5e:a6:e9:b9:98:28:41:8c:b2:24:63:e5:d1:
84:09:d7:bc:b4:49:95:5a:37:50:f2:60:81:fc:8c:e1:07:f1:
8a:98:7a:a6:93:4a:99:bf:70:61:26:88:4e:c1:9e:09:e1:47:
23:b2:a9:c9:37:76:12:6c:cb:3a:48:79:ce:43:a9:87:bc:2e:
45:34:f3:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAgwLijO2qS8XdtKphdLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZmNmYzM0NWEwNjQ2YTdjZjIyNTkwNTQ3N2UyMTgzNTc0
ODg2ZTAwHhcNMjYwODE0MTYwMTQ2WhcNMjYwODE1MTYwMTQ2WjAzMTEwLwYDVQQD
EyhjYmM1OTUwNDMxZjU5Yjg2OTg4OGIzM2VjNGE2ZjVlNDZiMGVlMzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxeaAA72FnGmRbbX9NlHXcqn6/z+
fu766X2V3+4ynTg0vIGOHjdTMrwDW70OMitNHNyOqzzRYmo8cHlcYb5RGBV9qaDt
sIICCz6ow99ztTQsFNlF6lfaJPLMx2y13ejpTs/ntg/HgljNXW6n6VDnLu5z9kf9
e0/1EL1vbyRlwTJ6T5E6oKmPMY/zfJ2hfvg64cGVPm/jwFIRhIQHcqF3/HEGZHhB
wwo6vxXq8r2vVNTEobavmvtUGKfrYgkTTThVE5k8nNdJ7InwnxyIQd272N3qxv+e
lmINDKaD90T0VFYU3s6InPqz/ioNJunWaCNL6k7YHRF0/J+aD38X1LNDhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvFlQQx9ZuGmIizPsSm9eRrDuNzMB8GA1UdIwQY
MBaAFA/8/DRaBkanzyJZBUd+IYNXSIbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUt
MTMyZjk5Y2ZhYTUzLzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUtMTMyZjk5Y2ZhYTUz
LzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIKq5Sm5
wgfI0dwCovINfcNHWjSnKL+0t5EnT+sy4OfOPMrpZ+cxOEoPsTL43owSVpTJWUUm
J09Im8g62mZDa8m4tYvNExAJ+9P2608TJPZ7kUc171LHS/7BotJnwWmlLDTsVYuV
Bq5x7+GlfKIkICeW4D7LHtmgfltjP49mtBQFDvKSaUoDFb32vtt4rgc/8YpptrAT
n6foEHXMRO6o8x21zMr4WPJadQ6DoxmwXHB/HebQlaiDwdFepum5mChBjLIkY+XR
hAnXvLRJlVo3UPJggfyM4Qfxiph6ppNKmb9wYSaITsGeCeFHI7KpyTd2EmzLOkh5
zkOph7wuRTTz8Q==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:09 2026 by rpki-client