Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: t7Xjxk8OhE484Qi/BSMpwstJRK3563HeUH2XBjC9Ei8=
Subject key identifier: 11:8B:61:46:E6:66:7C:3C:DD:41:D3:A2:CD:9F:56:7E:2C:97:CF:FF
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 019F90236CBD496ED553A94983407982731E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 1052
Signing time: Thu 23 Jul 2026 18:01:08 +0000
Manifest this update: Thu 23 Jul 2026 18:01:08 +0000
Manifest next update: Fri 24 Jul 2026 18:01:08 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: /fWS3GsyoHmAiZdkoA1cjOvZTzl7xFfgtA5rUT2wtuI=)
2: ofgcBJL5IkucI_t2Tbw87DuVUlg.roa (hash: 0n3F9loIDoRxXepxc9dufIeLMM9JHYgsIDsHjtK3JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:6c:bd:49:6e:d5:53:a9:49:83:40:79:82:73:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Jul 23 18:01:08 2026 GMT
Not After : Jul 24 18:01:08 2026 GMT
Subject: CN=118b6146e6667c3cdd41d3a2cd9f567e2c97cfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:e1:57:b6:10:35:b0:72:19:1d:2a:af:36:
f6:a7:43:1b:9a:bb:c9:4e:6e:91:1b:c1:d2:51:00:
27:4d:89:e9:4c:2e:8e:91:4b:96:33:29:8f:3c:92:
65:39:a4:bc:b4:fb:a8:6e:7b:a5:dc:4d:ab:91:02:
a1:88:0a:d3:dc:24:48:0a:c1:c6:ff:f6:77:4d:a4:
c6:80:1e:76:d2:d7:46:fa:e6:72:53:d7:3b:64:5a:
7f:60:ca:c4:22:12:ea:6a:e9:67:dd:bd:0c:da:7e:
40:ff:50:11:1a:68:27:a5:04:f0:e1:47:16:20:0c:
61:ac:28:c6:88:09:df:95:43:84:b6:61:ce:59:5b:
12:1c:c9:3e:ba:25:d6:9a:40:de:07:c6:7f:de:24:
b2:4c:9b:aa:55:59:03:48:1b:65:52:44:14:51:46:
f9:62:1a:87:3a:1a:04:a1:b0:8e:60:a6:fc:8b:58:
4e:72:38:6c:4d:d2:25:52:35:84:a7:16:45:b5:6b:
da:a5:f0:bc:95:23:b3:2d:c3:0f:52:c4:be:9f:c7:
ac:8d:76:fe:9d:92:78:33:9b:1d:aa:3c:d9:df:74:
65:9e:a8:ef:23:07:02:b3:a1:21:ab:20:06:7f:6d:
6e:48:9d:8b:17:62:d6:1c:66:a4:4a:b5:e1:e7:d5:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8B:61:46:E6:66:7C:3C:DD:41:D3:A2:CD:9F:56:7E:2C:97:CF:FF
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8a:f1:ea:4a:17:f4:89:68:e4:8e:65:6d:5c:b5:8f:8a:1a:
93:6c:dd:79:c7:cd:55:f1:80:4e:5a:05:55:2e:5e:6a:fc:5a:
8d:dd:aa:2d:b4:53:65:c3:1f:e0:11:77:78:d9:f6:ae:61:96:
f7:33:a2:02:7b:08:06:63:62:0b:77:b4:11:fe:00:05:a6:38:
43:e7:ab:01:e2:9f:19:61:15:2d:f8:02:1f:f4:e6:67:46:f1:
2b:66:f5:91:64:ed:21:0f:35:3b:dd:c1:27:ad:92:c7:d8:e6:
df:cf:49:75:0b:83:73:5f:9c:3c:dd:ab:47:a4:a6:fe:41:de:
98:7d:65:1d:78:97:0a:a5:d3:4e:91:6f:5c:60:64:b7:cd:a0:
94:2d:88:20:8f:fa:fb:8f:a7:ee:47:e9:a2:ae:4f:fe:2a:c8:
0a:10:bf:b7:95:a8:76:bd:60:08:ee:2b:1f:db:6a:23:86:56:
d7:f7:43:92:9a:5f:fb:8f:d8:7f:f2:d5:17:e0:0d:10:df:13:
8a:c4:42:37:14:d5:99:21:34:5d:70:09:8c:e8:15:39:80:1e:
da:c8:d5:2d:10:28:d4:96:a2:0f:50:67:9a:14:9e:78:10:4f:
7e:89:f2:4f:f5:08:4c:e1:d6:05:cb:e3:52:f2:cb:05:a5:3d:
4b:d7:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:54 2026 by rpki-client