Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: VYH+5zxhGLehz/sAFpdFoJonREuwvwhVxiRm+ol8Gcw=
Subject key identifier: 59:D1:80:7D:31:76:70:24:9F:8F:EC:A4:46:FE:BE:CA:3A:89:20:AA
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 019F9436E4B136A2DAB35DB97FA81E067A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 0948
Signing time: Fri 24 Jul 2026 13:00:53 +0000
Manifest this update: Fri 24 Jul 2026 13:00:53 +0000
Manifest next update: Sat 25 Jul 2026 13:00:53 +0000
Files and hashes: 1: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: XY9M13AqKuoEmTQc7EuyN6Q2EWgucnU9j6cat09tZXY=)
2: wn5elTtGmUxo3vgmfjZchTK_VTo.roa (hash: fkotHNjPjFd/IcwShz9KIRbGoJkmT3yrX5z9oh73hjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:e4:b1:36:a2:da:b3:5d:b9:7f:a8:1e:06:7a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Jul 24 13:00:53 2026 GMT
Not After : Jul 25 13:00:53 2026 GMT
Subject: CN=59d1807d317670249f8feca446febeca3a8920aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:ce:55:e4:44:85:10:a9:fd:57:29:1f:7f:
41:71:d6:b5:33:d6:8c:c2:40:1f:9c:0d:26:e3:e1:
94:71:12:7e:ab:30:38:ec:f7:42:90:66:dd:57:02:
e5:24:c6:af:ee:21:af:66:1b:82:aa:39:e1:d1:0d:
06:06:8f:a0:75:1f:1f:1d:04:ae:56:c6:b8:3e:ce:
e0:be:0e:77:ba:94:84:d7:73:4f:5e:8c:ec:70:9c:
1b:a4:1c:5f:a2:6a:dc:d6:8f:99:18:e1:de:6f:bc:
d6:6e:9d:79:f8:e9:58:7e:71:cc:72:ba:d4:0e:5b:
5a:e7:13:16:b9:86:c6:00:53:b5:f0:0c:fb:61:d4:
d4:40:2f:30:67:64:39:9c:af:30:72:d6:d8:17:a2:
82:03:b4:1a:ff:8e:9b:74:dd:a2:6f:ff:c9:98:72:
e5:8f:4e:ad:03:61:0f:75:a7:ce:f9:87:0d:a5:aa:
f8:6c:de:91:d1:c7:67:e1:37:54:3f:c4:1e:af:82:
98:20:6d:e3:6e:31:71:2f:1f:ab:29:1c:99:07:6d:
3c:fd:c6:7a:70:0c:eb:5b:77:8f:86:1b:1a:6e:38:
f0:ae:e6:29:70:98:8d:58:03:95:ae:b5:e1:3b:8d:
26:f4:6f:d7:25:9d:6c:f0:f8:21:57:e3:d4:67:1f:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D1:80:7D:31:76:70:24:9F:8F:EC:A4:46:FE:BE:CA:3A:89:20:AA
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c8:84:3e:ef:22:18:a5:d7:b0:94:56:0d:c4:18:2c:84:33:
90:66:8e:0b:48:56:04:8a:8c:2a:84:29:4c:92:e5:22:43:20:
d9:b0:36:41:96:4b:f3:78:d1:c7:fd:52:2c:40:bc:73:09:86:
21:00:c4:4c:72:cd:8e:02:25:b3:51:19:0e:fd:65:f9:51:30:
52:6f:87:42:2c:5b:44:39:9a:ea:de:67:10:77:21:22:7a:9d:
34:ff:3a:b6:54:e3:29:00:c9:3f:6b:d8:c3:8f:14:e0:4d:28:
78:fa:74:07:fe:48:ad:f2:ff:2e:34:8b:96:98:e9:b3:96:2c:
81:82:04:b8:92:6e:de:63:13:20:8e:9c:db:fb:bc:e9:ba:7a:
bb:6f:b0:79:59:2a:1e:e2:5e:1a:9f:da:df:c8:45:51:48:c6:
c2:4e:47:ee:fe:0f:02:4d:bc:e8:10:cb:56:92:18:97:77:2b:
cb:02:93:9a:da:e9:dd:cf:3a:a2:d8:8a:36:81:be:89:66:a9:
74:41:12:a0:90:4c:72:07:88:ed:be:d0:1a:e7:16:70:8d:18:
38:8f:82:e0:f2:5d:5e:9c:72:87:af:f3:8e:f1:c9:be:7d:20:
89:62:f0:d6:fc:ab:59:7d:4a:b5:e1:68:44:23:f5:ba:69:3a:
2c:ea:d9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:22:57 2026 by rpki-client