Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: /c9G8cj+Iz4krHAq2IXIbAzBYeHJgRcwr+t8cC+h1Eg=
Subject key identifier: 83:A7:D6:7C:FD:03:FB:0A:3A:67:9B:08:67:1D:AE:D4:7A:3B:40:C6
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 019F921149D8D2D6E00CAD803D292BAA3CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0E20
Signing time: Fri 24 Jul 2026 03:00:34 +0000
Manifest this update: Fri 24 Jul 2026 03:00:34 +0000
Manifest next update: Sat 25 Jul 2026 03:00:34 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: 34L0BI6F0K+bP1Re+SKc9qlSINrFMhj7ZmbkTbpTsnM=)
2: ke5BBmP9uJ5If3ItewQloGu8EQA.roa (hash: sg4mup0G5eaNuuse6GfgbbBnUv1YkDhld8yTzOiPKE4=)
3: wmiyGteEO918b1PMxNCpgfoVaDs.roa (hash: ZPhGNaDbDb+DbDzUXj55AFIPAg+DVhgaYwBguflVQCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:49:d8:d2:d6:e0:0c:ad:80:3d:29:2b:aa:3c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Jul 24 03:00:34 2026 GMT
Not After : Jul 25 03:00:34 2026 GMT
Subject: CN=83a7d67cfd03fb0a3a679b08671daed47a3b40c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:5d:db:0e:6d:85:67:84:51:8b:d1:7b:aa:
74:d4:57:6a:5a:f7:14:b4:af:c7:7c:1c:2f:e5:38:
5b:7b:17:d8:ff:da:90:e7:02:34:b3:3c:78:b1:e9:
7b:90:a7:ac:18:ff:2f:62:fd:6f:51:c4:57:b0:87:
34:73:50:66:8f:8c:1a:8c:75:d2:73:f3:2a:47:0a:
f3:0f:e0:fe:f6:0c:09:f6:7c:f2:af:9d:13:ae:26:
d8:11:ae:4e:c5:3a:db:8f:17:9d:57:87:89:95:cf:
5d:41:76:03:3f:bc:1d:b8:05:66:9a:09:63:e2:ef:
d9:e6:de:65:a6:3e:ad:fb:97:9b:98:43:25:b3:c6:
f7:29:e7:67:0e:78:26:aa:06:8f:cc:17:64:96:40:
4b:12:7b:9f:aa:ed:de:1f:05:a2:bb:63:d3:7c:4d:
a4:b9:89:d5:af:7d:66:67:e9:79:e8:bf:e7:f8:fa:
16:f6:d3:cd:4e:64:d8:f2:5d:20:c8:94:60:a1:7c:
f3:94:38:e0:50:c6:67:16:87:e7:17:cc:8e:5c:22:
9f:ef:c8:ff:c7:d0:b1:16:72:04:b8:b8:42:4a:bc:
d1:de:3e:7d:a2:08:cb:90:44:25:56:93:11:52:89:
b4:58:64:b4:07:53:3d:06:7f:bb:2a:8b:e2:c6:40:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A7:D6:7C:FD:03:FB:0A:3A:67:9B:08:67:1D:AE:D4:7A:3B:40:C6
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8c:7d:cd:40:25:93:7c:ae:85:92:f4:58:4b:c5:d3:f7:a8:
fd:91:13:47:60:39:d1:71:3a:71:97:b8:ac:4c:4a:8c:5c:89:
a2:f6:63:bd:be:5e:ec:08:bc:9e:c7:0f:1f:84:92:fb:30:6b:
48:46:b6:7d:4e:b3:2c:18:53:fa:a1:d0:32:4a:49:7d:34:2d:
80:be:2c:e9:55:b3:ba:6b:ee:50:09:99:16:40:80:85:57:58:
e9:bb:4a:27:4d:3f:61:15:a3:db:a4:a9:c6:6e:0b:ce:da:31:
3c:87:d9:7e:91:3b:73:9b:3c:1a:61:28:4f:f0:7f:d1:90:a3:
f6:61:51:f3:bf:20:26:a1:c6:52:ca:40:06:e7:d0:4a:c1:5a:
1b:7d:1d:3b:51:ca:55:6e:6e:a3:6e:22:e4:25:c6:3e:12:57:
78:61:b6:90:45:00:ac:c0:c4:a8:e4:3d:c3:64:ae:cf:c1:9e:
38:ba:0c:12:71:ec:d0:6d:35:8a:13:87:7b:9e:11:f4:94:08:
f6:ff:e3:80:1b:76:71:d2:85:b7:4e:a9:aa:38:c2:a2:aa:bc:
33:f9:cd:1f:0a:4f:8e:2d:b8:c7:2a:7e:fd:47:ce:86:0f:c1:
c2:b1:87:9f:84:16:c7:02:2e:91:b2:7b:28:94:b3:e7:1e:a1:
69:ed:0b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:59 2026 by rpki-client