Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: zs/zBjt2o9ll+KOttgJwKizD8vQygxDk0080xy9pfS0=
Subject key identifier: 76:23:9C:BD:C7:9C:01:54:A1:56:06:19:FF:27:C7:AE:83:AF:C7:EC
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 01A000CA12D6472357B0CAF8C7A787E5ED70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 1292
Signing time: Fri 14 Aug 2026 15:00:37 +0000
Manifest this update: Fri 14 Aug 2026 15:00:37 +0000
Manifest next update: Sat 15 Aug 2026 15:00:37 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: +IDYUW5siWOrhvDX81GbTYo1eDtlwp9+lZPuyncy9OI=)
2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:12:d6:47:23:57:b0:ca:f8:c7:a7:87:e5:ed:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Aug 14 15:00:37 2026 GMT
Not After : Aug 15 15:00:37 2026 GMT
Subject: CN=76239cbdc79c0154a1560619ff27c7ae83afc7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:cf:ae:f7:1c:46:3e:ed:e8:1c:27:fd:65:
97:8c:c4:2a:a9:1c:4d:d6:9a:eb:93:b8:c2:59:6e:
aa:50:90:c1:e5:44:2e:61:87:72:fa:15:0f:de:f1:
c1:fe:04:f4:a5:a5:f2:e1:ea:20:b0:a8:24:7b:d1:
02:56:8f:77:d4:08:cf:3a:75:f9:96:99:f4:22:e6:
c4:b0:92:8c:56:32:04:c8:c6:04:72:fe:83:8b:87:
46:f4:ef:3c:4e:b9:8a:86:d5:ac:37:06:53:e8:d4:
c5:69:5c:e4:6b:8e:ce:1a:c2:57:9d:0f:5e:53:ff:
38:9d:bb:79:f7:e0:df:2a:e4:8b:bc:3a:f0:15:97:
9c:ff:41:2a:b4:65:7f:4f:9d:20:94:45:5b:53:49:
9c:da:23:50:7d:33:ce:0d:92:f9:ab:25:d5:32:e0:
ea:e3:11:16:8a:4a:76:cd:74:bc:ea:64:4c:be:79:
ee:52:04:b4:5f:5f:a2:0a:9a:46:d9:0f:29:97:5d:
c8:76:b6:49:a2:7c:0c:61:76:d2:f3:5c:17:7a:8a:
47:2c:35:33:f2:02:87:fd:dd:99:7f:16:50:3a:ee:
28:8b:af:87:b9:78:bc:be:36:d1:32:72:f4:e7:87:
31:9f:b0:1c:27:5e:5c:35:0c:fa:26:3a:3d:55:7a:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:23:9C:BD:C7:9C:01:54:A1:56:06:19:FF:27:C7:AE:83:AF:C7:EC
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9e:b5:67:e5:e9:54:12:6b:1d:3b:90:40:49:3f:ec:c9:f3:
2f:98:d0:b6:9e:2e:b0:b6:c0:e7:a1:8c:34:84:7e:eb:85:71:
b9:36:09:e6:c8:1d:36:c4:07:71:74:a9:66:9a:30:43:e9:17:
14:ba:32:f5:32:20:3f:59:5d:86:73:3c:16:8d:e7:85:92:76:
b7:c6:b3:66:14:6a:d2:29:7f:4a:24:64:c9:b9:89:6b:f1:cb:
b7:35:3f:44:73:f7:fb:62:c4:9a:a1:9e:ec:27:53:83:20:0a:
4e:e1:7e:8e:ed:c1:21:e1:c2:c2:c3:58:fc:0c:7a:03:ba:ab:
42:23:65:a1:f0:ca:f6:41:ab:c0:85:da:1d:83:70:d5:3e:73:
29:84:4b:ab:bb:9d:87:4d:60:57:60:e7:20:2d:90:96:49:be:
ba:e1:27:47:ac:1b:95:0e:bb:a2:99:9f:23:c1:87:23:2a:31:
90:f4:ec:9b:35:a8:5a:d9:98:c4:50:71:b0:1c:9e:e7:58:f4:
69:0a:bb:42:f6:13:98:8f:54:cb:af:be:d7:7a:98:6a:22:e0:
1d:1f:e4:e4:5c:95:3c:54:a4:3c:a7:ce:97:a2:13:b0:83:df:
9c:64:ea:cf:3f:c9:15:dd:56:6a:06:fc:07:7c:43:44:f5:35:
72:ef:84:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyhLWRyNXsMr4x6eH5e1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjkzMGUyM2IwOGExNWNjZDRkYzlhYjE4MjljNjA3ZmVk
ZGU4YTUwHhcNMjYwODE0MTUwMDM3WhcNMjYwODE1MTUwMDM3WjAzMTEwLwYDVQQD
Eyg3NjIzOWNiZGM3OWMwMTU0YTE1NjA2MTlmZjI3YzdhZTgzYWZjN2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3jPrvccRj7t6Bwn/WWXjMQqqRxN
1prrk7jCWW6qUJDB5UQuYYdy+hUP3vHB/gT0paXy4eogsKgke9ECVo931AjPOnX5
lpn0IubEsJKMVjIEyMYEcv6Di4dG9O88TrmKhtWsNwZT6NTFaVzka47OGsJXnQ9e
U/84nbt59+DfKuSLvDrwFZec/0EqtGV/T50glEVbU0mc2iNQfTPODZL5qyXVMuDq
4xEWikp2zXS86mRMvnnuUgS0X1+iCppG2Q8pl13IdrZJonwMYXbS81wXeopHLDUz
8gKH/d2ZfxZQOu4oi6+HuXi8vjbRMnL054cxn7AcJ15cNQz6Jjo9VXp9gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYjnL3HnAFUoVYGGf8nx66Dr8fsMB8GA1UdIwQY
MBaAFPH5MOI7CKFczU3Jqxgpxgf+3eilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEt
YWVhNzE0ZWM1MTEzLzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEtYWVhNzE0ZWM1MTEz
LzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL561Z+Xp
VBJrHTuQQEk/7MnzL5jQtp4usLbA56GMNIR+64VxuTYJ5sgdNsQHcXSpZpowQ+kX
FLoy9TIgP1ldhnM8Fo3nhZJ2t8azZhRq0il/SiRkybmJa/HLtzU/RHP3+2LEmqGe
7CdTgyAKTuF+ju3BIeHCwsNY/Ax6A7qrQiNlofDK9kGrwIXaHYNw1T5zKYRLq7ud
h01gV2DnIC2Qlkm+uuEnR6wblQ67opmfI8GHIyoxkPTsmzWoWtmYxFBxsBye51j0
aQq7QvYTmI9Uy6++13qYaiLgHR/k5FyVPFSkPKfOl6ITsIPfnGTqzz/JFd1Wagb8
B3xDRPU1cu+E9w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:26 2026 by rpki-client