Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
File: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json)
Hash identifier: Hc7HYJGXt59jjtHfreCAztfHXxRac6ZxeafPv0f8U9s=
Subject key identifier: 35:06:BA:FF:BA:2B:1E:69:C9:11:94:E8:5F:BD:39:0D:D5:7D:2E:14
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial: 019F94366768D24D183EF938428979AEAE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
Manifest number: 0435
Signing time: Fri 24 Jul 2026 13:00:21 +0000
Manifest this update: Fri 24 Jul 2026 13:00:21 +0000
Manifest next update: Sat 25 Jul 2026 13:00:21 +0000
Files and hashes: 1: ZyTtGOArInkFDafP4V1-DLsGWGU.roa (hash: vMj3ZtUnjOx8jgIB+BphuJXzatDBfGIG/tGiLzS4Qpk=)
2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: 9gGTan39VYYr37TEBYPnhQKugm+Z+P+jccTblYOg9c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:67:68:d2:4d:18:3e:f9:38:42:89:79:ae:ae:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Validity
Not Before: Jul 24 13:00:21 2026 GMT
Not After : Jul 25 13:00:21 2026 GMT
Subject: CN=3506baffba2b1e69c91194e85fbd390dd57d2e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:e1:22:6f:20:c7:16:7d:88:b6:13:8c:55:
08:4a:f0:76:b2:73:d3:3c:c3:c3:4a:33:fc:b8:34:
59:3b:86:02:e7:f0:64:b2:88:82:f7:95:08:98:b6:
7a:6e:43:1e:09:9c:ea:a4:5a:65:7a:e3:d8:6d:e4:
14:b9:be:5e:0d:fc:18:d2:10:c7:43:fa:57:a1:40:
d9:d8:7f:84:cb:48:8a:74:01:b7:3e:e7:52:37:09:
1e:98:90:39:96:58:d0:ee:48:92:50:39:cd:16:97:
04:bf:8c:e6:cd:62:ab:b5:e0:7f:17:06:63:72:9b:
16:1f:dc:85:3e:87:99:84:19:cb:e4:ea:38:cc:ec:
3f:68:09:f4:c8:9e:e8:2b:1a:6f:2c:53:c7:4e:5f:
ee:7e:6b:20:f0:7f:d5:fc:4c:41:0c:a4:99:9a:97:
57:cc:d5:82:68:43:91:18:e2:29:d4:d8:0e:7e:9a:
6e:35:f4:05:35:91:7e:bc:ef:d7:8c:8d:09:d9:37:
4d:27:ef:b4:22:f0:e8:30:11:96:70:b1:87:d8:19:
51:18:08:c4:67:14:6e:95:74:c7:6b:66:b9:10:d7:
0e:0e:be:3c:de:bb:c3:d1:0f:93:ff:25:22:98:b5:
8e:9b:89:b3:a4:aa:5f:c1:98:35:aa:2a:23:b9:98:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:06:BA:FF:BA:2B:1E:69:C9:11:94:E8:5F:BD:39:0D:D5:7D:2E:14
X509v3 Authority Key Identifier:
keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:42:23:f5:b2:26:8b:fd:00:2b:e2:bb:5a:01:30:4c:e7:0a:
54:2d:0d:54:b5:ce:a6:c6:53:f0:0b:bb:6e:9c:21:e2:9e:49:
5a:97:85:6e:95:5a:9b:12:0a:30:77:d1:7f:fb:05:8d:84:af:
bc:1b:2f:f3:c5:82:6c:72:5a:24:69:f4:d5:20:c8:2a:b2:4b:
d0:77:c4:48:5e:2b:81:42:c0:a5:06:af:de:a7:3d:a5:50:9e:
21:56:c4:ef:b5:15:8b:f3:5c:fa:f9:8e:11:5f:f5:a0:68:5d:
12:91:20:d6:4d:51:ad:6c:4e:d7:5d:9e:6e:89:35:03:3e:1c:
26:a4:36:7b:d5:a3:e4:9c:73:5f:8e:6f:45:93:50:7c:60:8e:
ff:30:af:67:78:5b:b2:50:12:5b:c2:8a:7f:9c:03:43:5d:b8:
10:62:35:b1:5d:05:33:cd:b5:9c:90:53:fb:94:88:82:23:c2:
01:45:f2:3d:5c:df:24:4e:1c:09:0e:d8:e4:4d:50:38:be:7b:
60:d4:c1:01:04:34:ab:39:06:24:4e:c5:5d:8c:20:52:96:4d:
9b:1a:6a:d0:6e:7d:07:e9:96:47:03:61:67:98:45:45:ed:81:
03:6c:be:9b:a4:b4:60:2f:24:e6:eb:cf:4e:f7:2d:b8:ee:6a:
ef:9b:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:01 2026 by rpki-client