Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: L86wl7yzRo37Ih3i/lTqVqvgAejSeczFNtWDLHVpa+w=
Subject key identifier: 69:8B:D9:1C:40:DA:DB:29:BC:A8:B8:28:E9:93:F0:85:1E:E8:7E:54
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 019F8FB58176617D7320AB8C54F39E838D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: 0470
Signing time: Thu 23 Jul 2026 16:01:04 +0000
Manifest this update: Thu 23 Jul 2026 16:01:04 +0000
Manifest next update: Fri 24 Jul 2026 16:01:04 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: ubFHsRHbuQEk7TTbPoGmo7NrTzLYwJ5HYnEf5T4dYbo=)
2: Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa (hash: KhcCVOzCZNjhliNrDxOy2a8F19I6yxCDsbXLuV/7DNo=)
3: nTgR9PLLMxj6DumejGUp3QxDic4.roa (hash: 6jyqKs+vhmdq7Zq8Pff708q5roK5Wwnu9eGjYqiN4qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:81:76:61:7d:73:20:ab:8c:54:f3:9e:83:8d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Jul 23 16:01:04 2026 GMT
Not After : Jul 24 16:01:04 2026 GMT
Subject: CN=698bd91c40dadb29bca8b828e993f0851ee87e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ba:7b:6d:4e:57:29:b3:18:35:ec:ce:8d:4b:
18:2d:be:b7:d6:e1:f8:ed:94:2e:b6:dd:46:41:16:
a8:e4:f0:fb:23:e2:43:68:df:f5:b8:79:16:ab:5d:
bf:c1:b6:4a:9d:75:f4:ec:95:ff:b2:98:ca:18:d1:
8d:67:9a:a2:e5:82:52:38:0f:90:37:72:dd:04:90:
e0:45:d9:ca:06:59:57:ae:9f:e1:0c:26:4b:17:8d:
30:d5:75:a2:99:c3:ea:25:7e:f9:4a:8b:36:4a:c0:
de:d1:90:c1:8e:67:52:cf:e0:69:f9:83:79:17:6b:
7d:e1:82:9d:08:4d:6d:64:6f:d8:65:be:fc:0e:cd:
c6:7a:7e:42:60:0e:7c:ac:bf:5d:71:5f:60:fc:06:
1e:35:86:af:cb:d9:47:d7:ff:18:4e:ff:7e:5c:d7:
65:cb:0c:27:f6:01:7c:05:bf:c0:d5:fc:65:9e:8d:
df:24:98:b6:63:53:92:56:13:29:0d:ee:15:4e:3c:
4b:9e:20:20:c6:20:2e:ec:58:32:65:d0:0d:d1:c7:
4a:9c:76:9b:55:16:8b:25:2c:65:60:da:cc:13:5e:
3e:48:a8:ab:a6:31:7e:9e:bc:e7:ad:15:93:2a:ef:
f5:b5:44:de:3d:d9:7a:85:5f:7c:91:ba:2a:e0:aa:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8B:D9:1C:40:DA:DB:29:BC:A8:B8:28:E9:93:F0:85:1E:E8:7E:54
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:48:d9:b0:ce:48:a5:c8:6d:40:5c:35:aa:89:34:8f:30:f8:
ce:47:6f:f4:ce:47:69:e8:1b:ac:99:01:84:da:df:f1:73:2a:
19:d5:d4:58:ac:88:72:80:fa:68:ee:de:23:43:2e:65:e5:16:
f6:ef:8d:13:d1:08:f8:59:27:88:7f:8d:8c:51:b8:65:3c:a3:
65:3f:61:40:5e:49:5f:c1:3b:f5:57:0e:de:ea:5b:7d:94:e7:
d4:54:88:27:30:42:85:79:3b:dd:34:2b:32:41:fd:90:da:68:
a8:8a:d8:b5:69:b1:ea:17:15:31:bd:a2:f5:f5:29:a7:72:ec:
a9:9c:ab:90:07:2b:c5:ef:2d:c7:8a:ba:11:a2:e5:d3:5c:a9:
e6:b4:b5:eb:31:96:04:18:e9:12:25:40:5d:de:0b:d4:f6:40:
6a:90:2d:af:c9:da:1c:b7:80:15:c1:ed:ff:ac:40:2f:7c:7f:
bf:cd:08:75:69:58:44:97:38:7f:66:ee:60:f7:51:1c:91:c9:
b1:52:d7:1c:74:9c:1f:b3:e0:9c:a0:1a:26:b4:ee:2c:ab:58:
0c:23:0f:99:71:97:6a:40:6a:74:c7:fc:98:49:12:b0:e2:74:
d8:24:0e:48:29:96:8d:2f:2f:ec:b0:87:da:3b:9a:2c:87:b2:
2d:19:36:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:37 2026 by rpki-client