
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
File: d27ATX5nmIYhbQe8cijbUo88hv0.mft (raw, json)
Hash identifier: UhD0UgOoa/MDsyxXCLx6h8dB2V53blUeGxxtNnaSzeU=
Subject key identifier: 24:7F:32:E3:00:2F:30:F6:68:38:6C:39:B8:46:79:DB:40:AA:9A:7D
Authority key identifier: 77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
Certificate issuer: /CN=776ec04d7e679886216d07bc7228db528f3c86fd
Certificate serial: 019F94379B0E3712E2945388F49F7593588F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
Manifest number: F8
Signing time: Fri 24 Jul 2026 13:01:39 +0000
Manifest this update: Fri 24 Jul 2026 13:01:39 +0000
Manifest next update: Sat 25 Jul 2026 13:01:39 +0000
Files and hashes: 1: Gesfsa1mPZDnaCG5I-S24-ylDHM.roa (hash: 2IV3q7ceTfOxNOfoF+NvFTTxBpL0Fe+G/gUYs6fQZiU=)
2: d27ATX5nmIYhbQe8cijbUo88hv0.crl (hash: atpD8/l0+tsgFrk4b3iPfFup0cZ3qDPTnt+BHwdjCM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:9b:0e:37:12:e2:94:53:88:f4:9f:75:93:58:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776ec04d7e679886216d07bc7228db528f3c86fd
Validity
Not Before: Jul 24 13:01:39 2026 GMT
Not After : Jul 25 13:01:39 2026 GMT
Subject: CN=247f32e3002f30f668386c39b84679db40aa9a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:8a:3c:20:c9:a1:81:56:fc:63:a4:63:24:
12:2d:12:a2:86:41:a0:af:ea:23:3b:51:2d:1a:dc:
5a:5b:0a:5f:fd:ce:ac:83:78:08:2f:52:da:f8:8f:
8e:84:d2:4e:d0:2f:df:2f:91:ca:97:76:12:8f:2b:
47:f3:cb:09:1a:d0:b0:ec:0e:de:d6:81:39:99:1f:
cb:fd:a5:7a:34:6e:3f:2e:7a:5c:8b:3e:22:f3:72:
15:b0:6e:ed:6a:1b:6a:c2:5f:d6:87:c3:29:26:2e:
b4:54:76:5b:b4:8b:08:55:8e:3e:9f:d6:15:7b:e7:
dc:ab:3d:41:4f:22:17:89:2b:95:5b:8f:1c:aa:1c:
33:95:9c:36:43:77:56:2a:1a:93:df:a4:92:d5:44:
80:b3:0e:17:ed:12:4e:24:3d:01:5e:27:a1:51:af:
c9:a9:81:2e:53:7f:de:86:17:d1:c2:b8:c2:d6:ab:
0b:1a:73:e8:fc:91:67:4e:12:13:fa:98:72:9a:6d:
b0:cb:f6:b4:5c:e9:47:90:62:16:ad:d7:fb:4d:fe:
94:4d:3b:51:ed:9a:66:81:e5:b8:ac:15:c9:0c:de:
ad:dc:4b:e4:ae:41:c4:fe:5c:4d:d1:ba:34:91:7a:
19:3b:d2:b1:c0:18:94:f4:95:d4:98:0f:0e:f9:8c:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7F:32:E3:00:2F:30:F6:68:38:6C:39:B8:46:79:DB:40:AA:9A:7D
X509v3 Authority Key Identifier:
keyid:77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3a:fe:65:ab:ab:e4:fc:46:0b:46:03:e5:1c:8d:f2:48:15:
29:cb:0b:1d:f1:7e:92:48:8b:7a:99:35:52:77:56:c9:fc:25:
fb:3f:cc:eb:b1:2c:26:00:59:3f:14:d8:8e:cf:be:a2:35:6c:
dd:87:10:61:78:d2:60:3a:9d:bf:67:9e:b7:4f:03:bd:24:9c:
77:7e:ab:fd:3f:22:8e:8e:b2:34:93:4f:c4:b9:d3:42:4a:2a:
18:d6:1f:6f:35:fb:dc:06:14:4b:c6:b1:8f:21:f8:21:d8:2a:
19:03:88:73:40:4f:4e:b6:de:10:a6:78:e4:64:9b:81:f4:75:
08:c1:1c:bf:75:e1:54:69:64:c6:fb:ec:be:db:9f:27:7d:61:
c6:1c:25:cf:44:38:1f:ac:42:58:b7:98:b9:3b:03:4e:9f:8e:
73:90:7d:d9:f4:27:7c:52:34:93:82:8b:de:d3:01:df:8f:75:
32:5d:bc:63:99:ea:5d:95:b3:c5:70:7e:2b:c5:29:50:62:9b:
d6:62:a7:9a:15:41:29:f7:2e:42:22:75:e7:59:81:64:97:0a:
dd:1c:e8:c7:e8:54:e9:06:ae:f0:d5:3b:44:c4:58:98:6d:9f:
85:0b:f2:98:61:fd:6a:bd:35:2f:b4:5a:5a:07:ea:bb:14:d0:
5f:95:a3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:26:32 2026 by rpki-client