Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: L7No0hwbtVomLdglCO0SNgBkjnx/DtepCVZq72YNYTs=
Subject key identifier: 7A:C1:23:A0:7E:66:40:ED:43:3B:64:C1:50:B9:57:62:09:3A:14:82
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 019F916D3F640BAE19DCC18F2194C7D47217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 00:01:23 +0000
Manifest this update: Fri 24 Jul 2026 00:01:23 +0000
Manifest next update: Sat 25 Jul 2026 00:01:23 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: ioOc1XWGhgtP68I7vXJsrRtckkbsKQRUvGyX5CPOMck=)
2: ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa (hash: iGCdrPf4Ppnrs4dgUDy3DlxhNj0AHzaCi9s56mQZshU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:3f:64:0b:ae:19:dc:c1:8f:21:94:c7:d4:72:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Jul 24 00:01:23 2026 GMT
Not After : Jul 25 00:01:23 2026 GMT
Subject: CN=7ac123a07e6640ed433b64c150b95762093a1482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:7e:2f:f9:51:01:a7:b0:2d:47:7d:82:98:
4f:1b:e4:72:96:92:9c:67:3e:00:f3:b1:41:58:cf:
93:7b:15:57:47:56:ed:fe:b2:55:ed:1d:fa:21:7b:
71:23:b7:1b:a9:6c:ad:a4:75:8d:d8:3d:9b:bb:04:
eb:ee:76:cd:93:a7:55:0e:96:92:8a:b7:46:af:26:
55:00:77:29:51:b8:71:5b:cd:16:93:5d:6a:de:83:
df:d4:a3:9e:df:df:b1:15:07:aa:bd:fa:21:cf:14:
5f:0a:ca:4b:bc:c4:6e:57:e7:4a:c5:55:93:87:85:
cc:29:dc:ac:e3:c3:75:e9:54:95:b4:38:0a:4d:fc:
7e:cb:d9:98:60:e0:3a:24:3d:75:11:87:7b:4f:fe:
3e:06:7e:f1:79:d1:e7:27:8b:f6:31:31:5d:bf:02:
10:4c:8c:6a:21:dc:a5:18:19:80:2a:ba:81:aa:f9:
f7:e4:3c:b0:93:fe:f1:e4:81:71:3e:ba:44:a4:a3:
68:83:02:10:e3:6f:98:66:22:9b:c1:61:f4:29:09:
92:10:b1:bd:8d:e0:7a:1a:da:31:2e:3d:4c:20:21:
5e:2b:ce:98:bf:cb:6b:ee:47:77:32:9f:7f:e3:28:
29:66:7b:e4:c6:d4:70:64:f2:53:1a:73:4f:24:c1:
51:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C1:23:A0:7E:66:40:ED:43:3B:64:C1:50:B9:57:62:09:3A:14:82
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a6:33:a7:23:6b:06:f6:89:a6:11:90:c5:3f:3c:d0:98:e3:
a4:e4:83:6f:cb:56:56:09:85:de:4c:0b:5c:08:2e:e7:e2:8b:
41:d9:2e:85:05:b4:f1:fb:43:3e:64:73:cb:c2:03:70:72:8e:
13:d3:3d:9f:4f:ab:17:f3:ee:e4:7b:40:b8:e0:bb:ee:96:14:
04:55:11:a8:f4:75:bb:8a:50:8b:02:85:e7:a5:cb:08:62:57:
a3:3a:01:56:89:ed:bc:41:13:04:c1:7b:b7:2c:c7:79:32:2a:
53:07:59:9b:23:4e:e4:ab:4b:b0:3a:1d:de:fa:d7:90:f0:19:
0d:0a:07:dd:df:68:29:80:c3:a1:0f:20:53:83:67:7f:ff:d9:
8c:02:84:0f:18:62:ff:54:34:1e:da:97:ef:7b:6f:ad:93:35:
f1:9c:30:28:d6:23:14:13:90:04:b9:a6:23:c6:d0:1d:30:81:
39:21:9c:3f:51:74:fe:a5:16:e1:96:2d:54:01:12:31:9f:82:
38:1b:56:83:f8:9a:c6:da:39:22:64:7a:b7:ba:25:36:76:35:
22:99:1c:4f:9a:39:f0:fa:cd:a6:79:61:24:87:b3:ce:12:50:
7b:7c:07:8d:ea:d1:f9:b7:b0:00:a1:18:65:89:65:4b:82:e4:
1b:99:be:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:06:12 2026 by rpki-client