Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
File: 8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft (raw, json)
Hash identifier: 4CQahB0iz91TylKTnMgNTPy2Kd9IfAPNAH6tcHcUouQ=
Subject key identifier: CD:E6:E2:97:89:2E:C7:4E:BE:D2:8E:C4:52:1C:12:FE:F0:D1:51:5D
Authority key identifier: F0:CD:59:33:59:79:FC:36:0E:7C:BE:3C:27:7C:BF:99:8F:A9:36:10
Certificate issuer: /CN=f0cd59335979fc360e7cbe3c277cbf998fa93610
Certificate serial: 019F90C788F0085D23EB6B720E60C7C8A21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
Manifest number: 28
Signing time: Thu 23 Jul 2026 21:00:23 +0000
Manifest this update: Thu 23 Jul 2026 21:00:23 +0000
Manifest next update: Fri 24 Jul 2026 21:00:23 +0000
Files and hashes: 1: 8M1ZM1l5_DYOfL48J3y_mY-pNhA.crl (hash: 2d8LMFANOe0Ne9Lsvp5SlLwEYrL28/0RxMrNJjL6CUU=)
2: r42oR0C5g5SuflKWJ6GIOiVUO0U.roa (hash: Cm2S/1eJoWgRD00HMcE5iW9xvFGpF376Bo3aWrPUtvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:88:f0:08:5d:23:eb:6b:72:0e:60:c7:c8:a2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cd59335979fc360e7cbe3c277cbf998fa93610
Validity
Not Before: Jul 23 21:00:23 2026 GMT
Not After : Jul 24 21:00:23 2026 GMT
Subject: CN=cde6e297892ec74ebed28ec4521c12fef0d1515d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:b7:4d:a6:f4:e5:3f:02:c4:37:25:a2:f3:
2b:c2:40:59:cf:d2:82:9b:52:74:7d:c6:01:ca:60:
02:fa:09:74:97:c6:02:49:f4:8e:d7:3e:7f:34:5c:
14:3f:4b:b2:7b:4b:fe:d4:0b:56:71:ea:03:a7:96:
c8:6b:da:da:2b:d7:10:4a:68:b3:60:02:36:a1:fa:
87:fb:2b:3b:7d:da:44:8a:fe:9e:16:a2:e2:7a:49:
48:b0:b0:11:a3:d7:18:94:21:9a:4d:7f:04:4f:e8:
3a:12:c0:39:7d:17:c9:1d:f6:66:24:74:76:34:8e:
53:32:5b:78:be:21:20:b5:24:95:fc:51:b3:8c:46:
df:5c:7b:68:33:0f:d8:33:15:a2:37:32:e5:4b:b1:
d4:06:de:9f:85:69:80:77:7e:2f:6b:84:b8:c7:4c:
6f:eb:5f:f3:57:f3:d6:8c:9d:5e:b9:9c:1a:02:b9:
10:56:c0:9f:0f:e0:8a:90:65:ac:66:58:fe:e0:d8:
83:77:ae:5b:fb:3c:14:12:04:ee:0d:cd:a6:94:67:
2b:38:c2:4f:1f:17:61:8d:0e:44:34:95:c9:31:4e:
b7:cb:e9:db:e2:9f:d1:3b:31:a2:85:a4:3d:93:53:
5d:15:0b:3c:4b:04:61:15:38:41:cc:ff:f2:bc:f7:
c0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E6:E2:97:89:2E:C7:4E:BE:D2:8E:C4:52:1C:12:FE:F0:D1:51:5D
X509v3 Authority Key Identifier:
keyid:F0:CD:59:33:59:79:FC:36:0E:7C:BE:3C:27:7C:BF:99:8F:A9:36:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e8:96:19:22:6f:ae:82:55:c5:e5:54:4a:b8:36:b9:fb:a1:
a4:0b:3e:9e:f0:32:a5:55:7c:94:46:fe:dd:d4:a1:4a:3a:68:
d6:69:9b:87:39:e5:2b:a4:4b:76:53:d8:2b:9d:a5:49:5f:f9:
6b:7c:b1:a9:e7:6f:c0:4f:70:d2:6c:1c:2a:68:a9:4a:b0:96:
2f:cd:b7:95:59:98:b6:8b:f9:fc:88:6c:d7:1b:e5:13:a2:f3:
25:f1:16:78:33:b6:25:09:15:97:2e:6d:74:b1:e5:f3:a4:d4:
85:d3:cf:5b:92:a0:90:ec:ef:d9:79:9d:b3:7b:18:da:bd:83:
db:b0:bf:f1:1d:50:48:8b:7f:7a:30:f2:93:c8:e5:7a:e6:d1:
c2:58:37:65:a0:fa:ab:10:ba:10:ce:02:d0:da:46:25:46:28:
19:d7:cd:ba:f4:0d:f5:ae:53:93:67:45:88:bf:e4:a4:50:e3:
5c:47:69:44:fe:6f:c3:6d:e1:43:b8:02:f8:2e:9e:58:a6:91:
1d:db:c6:ed:66:a8:16:01:77:11:6b:3d:95:7f:b0:e4:3a:9d:
13:36:aa:77:71:fe:eb:fe:33:06:35:ae:79:26:df:e2:2d:4c:
1e:4b:25:d7:29:2e:5b:0c:75:ac:0e:cd:2c:d0:dc:f5:ed:12:
55:92:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:55:13 2026 by rpki-client