Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.mft
File: 8y9z8kbvlI4fyqLREJmhHw25PLE.mft (raw, json)
Hash identifier: X4o3Fxk9BAsIKz/eTMezMB26mDX4Nwz8T+vxvPSZuwQ=
Subject key identifier: 97:38:72:B4:89:D7:3A:70:13:14:5E:D2:82:AC:EA:AF:B9:FD:28:47
Authority key identifier: F3:2F:73:F2:46:EF:94:8E:1F:CA:A2:D1:10:99:A1:1F:0D:B9:3C:B1
Certificate issuer: /CN=f32f73f246ef948e1fcaa2d11099a11f0db93cb1
Certificate serial: 01A0412A69CB1B7E1C566B013607822F66B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8y9z8kbvlI4fyqLREJmhHw25PLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:01:33 +0000
Manifest this update: Thu 27 Aug 2026 03:01:33 +0000
Manifest next update: Fri 28 Aug 2026 03:01:33 +0000
Files and hashes: 1: 8y9z8kbvlI4fyqLREJmhHw25PLE.crl (hash: Wnu6W/Th9qwYvvhm2zG43QJX2Ab+WlFq71Xt9MNc3EY=)
2: N0qfhIoD2R78tt-S-0BE02w8qdI.roa (hash: BbytL5rDaSUla5jzbfMP2OrBKQbWEV4Nh133OWiJSgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8y9z8kbvlI4fyqLREJmhHw25PLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:69:cb:1b:7e:1c:56:6b:01:36:07:82:2f:66:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32f73f246ef948e1fcaa2d11099a11f0db93cb1
Validity
Not Before: Aug 27 03:01:33 2026 GMT
Not After : Aug 28 03:01:33 2026 GMT
Subject: CN=973872b489d73a7013145ed282aceaafb9fd2847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:10:55:1b:ca:81:8e:fc:7e:86:70:8d:9b:
b3:07:a4:17:29:a7:29:52:d1:26:db:1f:43:c9:c6:
e8:57:df:df:2a:22:0b:a1:f5:ca:6a:81:86:e8:1b:
a7:53:bb:4b:3a:04:84:61:fc:f3:cf:46:31:30:fb:
4d:38:9b:98:0d:45:b5:80:75:2a:ff:be:43:cd:1b:
f6:6a:8a:e9:56:cc:58:a5:06:a2:01:19:df:83:c6:
35:01:0b:e3:5f:17:c0:f5:7c:17:9b:b6:2c:ca:fe:
82:d0:09:9e:be:5e:0b:8b:9d:ad:e8:58:89:e2:22:
5f:4e:0c:ef:7a:0f:ea:c0:2b:2f:93:42:6a:b1:6e:
f0:39:ae:47:cb:6c:f1:bf:d8:d4:99:14:b6:2d:3a:
02:0d:8d:18:80:88:21:34:a0:1a:21:9b:aa:51:5d:
ca:66:8e:06:bd:37:bd:9d:a9:91:dc:33:a9:a6:a5:
6d:c5:a7:d2:39:48:0a:26:10:12:6b:10:57:c6:a7:
8d:a7:3a:f7:fc:cd:69:32:5c:8f:50:1b:34:5b:07:
57:7a:e5:77:ad:84:89:1c:35:1a:9f:4e:31:ac:61:
a7:a8:c9:fa:de:50:ce:aa:f8:10:ae:62:d8:62:f6:
81:87:52:7f:0d:04:bf:16:94:8b:75:a6:5b:a7:be:
98:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:38:72:B4:89:D7:3A:70:13:14:5E:D2:82:AC:EA:AF:B9:FD:28:47
X509v3 Authority Key Identifier:
keyid:F3:2F:73:F2:46:EF:94:8E:1F:CA:A2:D1:10:99:A1:1F:0D:B9:3C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8y9z8kbvlI4fyqLREJmhHw25PLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:41:42:d0:47:f4:a1:51:76:bd:41:8f:69:4e:41:66:7c:96:
a9:7e:61:75:f4:04:b2:dc:e9:dc:af:06:c7:33:95:ed:63:54:
df:cc:02:3d:38:88:c2:71:34:f2:8c:28:60:46:86:df:dd:53:
aa:ee:d7:4f:01:bf:ad:46:e1:8c:e6:55:fb:f5:d2:99:30:59:
e0:5b:ba:26:a4:fc:f5:49:49:4a:5a:bb:c2:29:9d:e1:3e:4a:
51:80:61:3f:ce:64:5e:5b:c6:35:7d:c1:6d:97:7d:7b:c1:c4:
99:8e:06:db:68:1a:22:46:5d:ac:46:c1:84:0c:7a:38:42:9e:
aa:51:5b:4e:19:0d:64:2d:47:55:3a:89:72:d7:da:cd:55:16:
2f:01:dc:81:da:aa:c0:42:74:cd:99:95:2a:b9:34:52:4d:62:
eb:a9:71:d5:b5:ee:05:db:7c:57:89:a2:f0:a4:6b:53:91:6e:
9d:6e:17:8b:71:d6:cf:36:8b:3f:16:9a:7b:d8:d6:aa:9f:4f:
4b:45:61:04:38:b9:4e:eb:54:28:e9:ea:93:92:07:e5:10:cc:
1d:a9:4d:eb:37:3a:42:92:d8:08:1c:e2:f3:f3:c9:7a:53:fe:
49:6a:e3:39:1e:40:01:3b:cd:fe:ba:b9:36:c8:79:80:af:51:
e3:4a:e7:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBKmnLG34cVmsBNgeCL2ayMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMmY3M2YyNDZlZjk0OGUxZmNhYTJkMTEwOTlhMTFmMGRi
OTNjYjEwHhcNMjYwODI3MDMwMTMzWhcNMjYwODI4MDMwMTMzWjAzMTEwLwYDVQQD
Eyg5NzM4NzJiNDg5ZDczYTcwMTMxNDVlZDI4MmFjZWFhZmI5ZmQyODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2oQVRvKgY78foZwjZuzB6QXKacp
UtEm2x9DycboV9/fKiILofXKaoGG6BunU7tLOgSEYfzzz0YxMPtNOJuYDUW1gHUq
/75DzRv2aorpVsxYpQaiARnfg8Y1AQvjXxfA9XwXm7Ysyv6C0Amevl4Li52t6FiJ
4iJfTgzveg/qwCsvk0JqsW7wOa5Hy2zxv9jUmRS2LToCDY0YgIghNKAaIZuqUV3K
Zo4GvTe9namR3DOppqVtxafSOUgKJhASaxBXxqeNpzr3/M1pMlyPUBs0WwdXeuV3
rYSJHDUan04xrGGnqMn63lDOqvgQrmLYYvaBh1J/DQS/FpSLdaZbp76YxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc4crSJ1zpwExRe0oKs6q+5/ShHMB8GA1UdIwQY
MBaAFPMvc/JG75SOH8qi0RCZoR8NuTyxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHk5ejhrYnZsSTRmeXFMUkVKbWhIdzI1UExFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYt
MzdhNDQyZTY1ZjE4LzEvOHk5ejhrYnZsSTRmeXFMUkVKbWhIdzI1UExFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYtMzdhNDQyZTY1ZjE4
LzEvOHk5ejhrYnZsSTRmeXFMUkVKbWhIdzI1UExFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0FC0Ef0
oVF2vUGPaU5BZnyWqX5hdfQEstzp3K8GxzOV7WNU38wCPTiIwnE08owoYEaG391T
qu7XTwG/rUbhjOZV+/XSmTBZ4Fu6JqT89UlJSlq7wimd4T5KUYBhP85kXlvGNX3B
bZd9e8HEmY4G22gaIkZdrEbBhAx6OEKeqlFbThkNZC1HVTqJctfazVUWLwHcgdqq
wEJ0zZmVKrk0Uk1i66lx1bXuBdt8V4mi8KRrU5FunW4Xi3HWzzaLPxaae9jWqp9P
S0VhBDi5TutUKOnqk5IH5RDMHalN6zc6QpLYCBzi8/PJelP+SWrjOR5AATvN/rq5
Nsh5gK9R40rnCA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:09:50 2026 by rpki-client