Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: 57YH9woDoV+yKmnxz5ezIkPE+nRhTxe70mnxHtBIaHg=
Subject key identifier: 30:A0:D5:F2:30:9C:3C:A6:E2:70:E1:56:CE:1A:1B:22:12:21:47:E6
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 019F8EA21EBBCA272772B22F21C5787DFDAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 10BE
Signing time: Thu 23 Jul 2026 11:00:17 +0000
Manifest this update: Thu 23 Jul 2026 11:00:17 +0000
Manifest next update: Fri 24 Jul 2026 11:00:17 +0000
Files and hashes: 1: 7o87e6t6rCHZCTctqNbeIGrB924.asa (hash: gPHZRrAJDyxpEWcymQSdvWZAGGUKmIVDKFbHH3RVcGE=)
2: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: 7PHFs7VTEjYdEkiyo2JrBX3+4dCXcK0bK9RGYgXatnU=)
3: 8aaF_ED1YXjZ6qQ3NJHXz5B9BUY.roa (hash: mTseP7q6/nR/9V/iIGk93m++hqbKLlMKnztgon+RN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:1e:bb:ca:27:27:72:b2:2f:21:c5:78:7d:fd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Jul 23 11:00:17 2026 GMT
Not After : Jul 24 11:00:17 2026 GMT
Subject: CN=30a0d5f2309c3ca6e270e156ce1a1b22122147e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1a:e1:76:90:87:f1:73:54:05:56:db:c9:43:
0d:77:58:d4:83:a6:36:91:e3:45:dd:2b:4a:d3:d2:
5d:31:35:03:e7:64:4d:b0:f1:f5:33:3e:22:73:71:
10:ff:fb:5c:ec:d5:0c:dc:0e:dd:80:27:58:e5:fe:
47:64:dd:01:ac:be:6b:15:39:e2:2c:a3:f7:3e:bc:
fc:f3:11:9f:ba:9c:90:c9:41:17:cf:b3:17:e0:c9:
9f:e2:f2:8e:32:a0:34:78:bf:98:79:43:57:b0:9d:
2b:3a:1b:f3:e9:ca:cc:f4:75:1a:4b:c4:f4:4b:db:
b8:50:2d:f5:8f:d1:0d:ff:92:02:b3:4d:b6:95:ac:
67:c2:b5:e9:a4:06:0c:3a:27:64:f6:84:fc:2e:b7:
f6:52:0a:94:b9:34:4a:88:18:4f:f5:0c:d5:0d:c8:
a0:ba:7e:77:b8:12:d6:8f:f1:58:3b:16:52:f8:b1:
c6:71:75:fc:cf:f8:75:8c:68:d2:59:69:85:75:a3:
a3:a8:a8:3d:6b:b4:52:f0:0c:ee:a0:e6:1b:f8:e6:
82:60:a2:17:3a:dc:0e:08:22:8a:df:a9:01:b4:27:
0a:7f:1a:13:57:39:91:4f:39:0e:1f:f0:ab:4e:86:
04:9d:b0:0e:3c:c9:e6:df:3a:fa:06:ef:bd:d8:15:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A0:D5:F2:30:9C:3C:A6:E2:70:E1:56:CE:1A:1B:22:12:21:47:E6
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4e:0c:9b:68:20:35:32:56:b4:47:95:84:39:9c:ea:8e:51:
16:82:e7:3e:42:ec:6a:5e:76:f6:27:ad:89:da:a5:1f:b4:8a:
37:98:56:af:83:70:b2:33:a7:60:3c:67:21:71:69:b0:2e:ca:
19:a5:77:50:0b:ed:09:20:f6:57:99:7b:56:b5:70:e9:4a:ec:
7a:ca:31:e4:22:9c:bb:6c:05:4e:1b:4d:f5:3d:f1:2e:c7:6f:
0a:22:94:b5:39:77:ff:94:70:ab:af:f1:18:26:a1:62:16:31:
dd:00:bd:bf:d3:cd:4f:d9:af:20:fa:1f:01:d0:6b:b8:dc:88:
ee:2a:d3:5b:b9:9f:0b:40:7f:7b:4f:a8:2e:5c:7f:1b:d2:2a:
fa:22:b6:d7:13:6a:f4:fa:c1:c6:1c:f4:3b:6a:36:cc:9a:c3:
69:07:e3:7f:59:51:70:98:bd:f9:88:ed:74:71:36:4e:7f:02:
31:9c:49:38:d1:d0:84:19:3b:00:07:61:e5:fb:da:54:0b:75:
d1:f4:8d:dd:6e:83:f0:bb:86:0c:77:1c:ed:02:66:00:e9:c7:
96:d7:b2:76:de:48:1e:54:fd:52:7a:43:f4:d2:1b:a7:13:55:
67:8e:f1:63:9c:22:b2:d6:ba:f9:8b:9c:24:24:72:b0:d4:e8:
65:fe:b6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:10:38 2026 by rpki-client