Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: nrjKUALFgGVwpRNqLxALmK4Vyt5cWJCrr+JG7PQ1tWU=
Subject key identifier: 2E:19:A9:18:D5:4F:9B:62:D2:1B:21:06:80:E7:02:02:68:EE:4E:98
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 019F8F10F0DB6ECE3BC6BA7F0DCBE07D0AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 05BB
Signing time: Thu 23 Jul 2026 13:01:19 +0000
Manifest this update: Thu 23 Jul 2026 13:01:19 +0000
Manifest next update: Fri 24 Jul 2026 13:01:19 +0000
Files and hashes: 1: 26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa (hash: i3y/4e612Y8TxwRcGfb+jB6bsawJZiJXB+VOVsYv97E=)
2: 6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa (hash: wloeetK1rz73W5ni+d8ZKgGnFA6OBAZGbgtH0vyx3gM=)
3: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: n1Oq9Z+ewR0Ty2tSNDLOxEiI+mbZ7b3Gv+1p7wY6xGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:f0:db:6e:ce:3b:c6:ba:7f:0d:cb:e0:7d:0a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Jul 23 13:01:19 2026 GMT
Not After : Jul 24 13:01:19 2026 GMT
Subject: CN=2e19a918d54f9b62d21b210680e7020268ee4e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ad:0d:75:95:be:40:bf:b5:05:36:ed:fc:b1:
21:36:75:4b:34:54:54:82:47:4b:12:a1:a7:ca:73:
e9:a7:3c:3e:27:e4:93:8d:63:53:c1:a8:42:47:1e:
13:3e:77:b1:1a:60:14:5b:f3:8b:7f:7f:ae:36:e8:
45:d9:83:21:b7:00:a7:91:01:e8:b0:91:0d:c7:95:
ba:fa:32:5f:3e:da:3f:00:1a:7d:1e:db:6a:56:86:
ce:ff:5d:c6:01:fc:6a:9f:fd:ee:a2:15:71:ce:97:
bc:8d:f2:59:e9:15:a9:54:71:6b:43:14:6b:42:b3:
64:79:65:75:57:f5:ee:f8:9f:a0:45:c2:33:d4:57:
1d:90:b1:04:48:a0:c9:75:59:b2:52:8a:b2:9e:5b:
a5:3b:f1:a0:72:d7:09:8b:35:38:f8:65:33:22:43:
29:c3:e5:01:ae:28:83:92:03:fa:ce:f3:ae:9c:aa:
80:c1:bc:05:76:49:e6:14:84:af:21:36:30:09:5f:
58:b6:0f:7a:58:5f:58:09:c3:b8:59:51:5b:2e:44:
80:be:fd:bf:e9:d9:d1:f9:0d:ef:69:61:90:01:cb:
23:2f:75:03:57:53:1c:7c:c3:28:fc:08:10:22:84:
14:3e:68:e6:15:dd:88:49:15:86:88:77:94:f5:fd:
4f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:19:A9:18:D5:4F:9B:62:D2:1B:21:06:80:E7:02:02:68:EE:4E:98
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1b:61:cb:f3:8d:3f:6a:f0:75:95:42:f4:6d:ba:d1:1c:cd:
88:73:a0:34:b8:e1:29:a6:59:cf:57:bc:f5:ae:24:6f:36:9d:
27:2f:a6:32:d8:9c:11:7d:a6:ff:74:83:4f:c4:14:70:a7:f3:
27:18:24:b5:a7:44:8f:94:15:7d:ea:92:d4:e0:0b:d9:e5:e2:
30:b2:71:d1:06:df:17:6c:e0:fc:a9:cb:ab:e4:72:a0:93:29:
fe:66:f4:ba:cd:7b:0b:ae:ab:68:eb:aa:d5:5f:31:57:9a:68:
a1:30:25:75:08:4c:17:c6:d1:0b:06:5b:aa:4e:65:e7:71:de:
b3:48:05:94:85:59:e7:e4:f5:6d:a0:88:45:c6:2e:d7:55:4a:
ff:3e:3b:93:ca:2e:4e:8c:90:0d:ab:9a:e3:d7:6e:3b:35:28:
20:38:cc:e9:9f:0e:24:e2:97:8e:da:65:ab:26:82:f9:f1:fa:
55:26:20:2c:56:2d:94:6d:81:11:79:a4:41:50:df:f8:95:08:
5a:6e:c7:48:99:cc:ca:88:9f:f0:43:ed:b7:f7:07:e3:35:10:
4d:a0:0d:20:c8:b3:55:78:eb:84:88:1d:ec:66:51:05:3f:67:
61:cf:75:7b:67:7a:b4:40:0d:a0:9e:70:74:b1:e1:3f:d0:3b:
17:0d:0b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:11 2026 by rpki-client