Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
File: 8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json)
Hash identifier: 6wOtP0WIomDMnYdNuAfY4ubNtIR9rHWOSyMJ92H0wZU=
Subject key identifier: 70:99:D4:63:42:13:DA:DA:A7:F9:5A:8A:51:CF:54:65:CA:C3:62:E0
Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
Certificate issuer: /CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Certificate serial: 019F92ECD8B3A3935D8C554D0E08AC8AF686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 07:00:23 +0000
Manifest this update: Fri 24 Jul 2026 07:00:23 +0000
Manifest next update: Sat 25 Jul 2026 07:00:23 +0000
Files and hashes: 1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: /Rx3VZ4u63LD5I36GLD9DAzsneUZmQJRehxDIGgkEDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:d8:b3:a3:93:5d:8c:55:4d:0e:08:ac:8a:f6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Validity
Not Before: Jul 24 07:00:23 2026 GMT
Not After : Jul 25 07:00:23 2026 GMT
Subject: CN=7099d4634213dadaa7f95a8a51cf5465cac362e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:e4:43:5c:78:67:5c:78:cf:6d:7a:4d:ec:
02:1b:39:e0:7e:ab:40:24:0a:cf:80:b5:49:9d:c5:
d1:37:83:61:b8:40:dc:41:0b:67:4b:71:69:dc:37:
91:ad:c5:84:d3:65:71:40:79:91:7a:cc:19:99:73:
4f:5a:04:f7:b8:f4:f1:f0:02:3c:24:6e:c7:e4:9a:
56:1e:6d:a4:ee:63:c3:80:a8:a4:36:33:05:1a:dc:
79:8e:8c:7d:0f:11:43:b3:1b:ef:73:4e:8b:75:16:
6f:e6:f6:f1:db:94:ed:62:35:f3:75:38:81:23:48:
b8:7c:18:80:7b:d3:a5:37:86:e6:c0:13:81:50:39:
02:85:6d:36:21:7d:f9:93:e8:eb:e5:81:9f:17:8f:
25:4d:05:c9:ac:35:26:a1:5c:82:fe:d7:25:91:5f:
47:36:a7:b6:0b:c9:6b:0b:fd:db:67:c7:b5:cb:1d:
59:7e:6f:22:aa:52:98:23:76:67:17:1d:a3:86:79:
c6:da:5b:75:88:c7:a2:8a:57:ae:ea:b7:85:4f:39:
6d:b4:e3:95:72:d1:f9:9e:a3:44:2f:ab:f3:fa:90:
ca:d2:54:46:c9:98:e4:d3:66:42:cd:0c:c3:a4:ff:
b4:12:56:66:a9:e0:7b:08:74:66:75:28:40:da:52:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:99:D4:63:42:13:DA:DA:A7:F9:5A:8A:51:CF:54:65:CA:C3:62:E0
X509v3 Authority Key Identifier:
keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f6:78:0a:5c:dc:92:81:e9:78:9c:1c:84:89:b0:ca:da:ce:
21:55:f3:31:77:38:ce:4c:d7:fb:50:81:07:e7:ee:28:02:22:
14:3f:7e:4c:95:10:86:a2:7c:45:00:f6:41:ff:8c:d6:8f:65:
5a:82:1b:9b:4d:29:c6:e8:e0:6d:88:d9:6e:8e:52:ff:02:cd:
63:d0:38:87:13:18:22:8a:d2:b6:87:78:4b:0d:90:a9:07:09:
b8:11:df:6d:cd:8c:58:cc:c0:0f:0b:e3:a7:50:d0:95:9e:fc:
ea:3c:2b:99:c6:dc:0a:2a:85:2f:1f:0d:5f:54:f5:90:ec:2f:
16:06:ae:52:b3:be:a2:e3:df:c9:fb:2e:29:0f:c5:04:4a:8d:
c3:23:a5:14:83:92:44:8c:a7:3a:77:0b:a6:3c:55:f6:49:b5:
e3:cb:4b:70:65:bd:80:a8:cf:2d:87:31:ec:4c:e3:99:56:1a:
1c:87:f5:27:98:9d:44:b6:06:8a:20:ec:71:ce:ce:ae:dd:4d:
d9:7a:79:0e:78:13:33:9c:7f:3b:18:9d:e5:25:1f:56:7d:81:
e6:83:e4:31:d7:11:d0:8d:bc:ca:24:31:2a:c8:e3:c0:2a:0c:
63:91:b5:d6:47:51:0b:32:34:a5:36:a5:36:d4:19:e8:bc:51:
79:61:6a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:44:53 2026 by rpki-client