Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
File: 8oS7eVhYemBZneFztOhaDJSRoaQ.mft (raw, json)
Hash identifier: 4pcaCSsjv2GDhXrgVfGpTRTHNTshnZ/CbprKTvOkQ1Q=
Subject key identifier: 4C:B4:F0:83:74:DC:ED:86:9C:97:B8:FB:C5:0E:19:1D:9E:18:95:E9
Authority key identifier: F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
Certificate issuer: /CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Certificate serial: 019F8F7EDBE361345376677A086B90074FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:23 +0000
Manifest this update: Thu 23 Jul 2026 15:01:23 +0000
Manifest next update: Fri 24 Jul 2026 15:01:23 +0000
Files and hashes: 1: 8oS7eVhYemBZneFztOhaDJSRoaQ.crl (hash: oLAbBfSPkvT+M3A+lb7/dJ+ePl99Qbf8zyamaUJk5tA=)
2: IVY6iWcM0h4WNsuJ0C_dYZMPbEY.asa (hash: vJRxB/YA0VSs2+csKGJpplBLmMHFGaBIIWUMdGp+a7U=)
3: t3aKyQAZqp0JpNY9WkTBO5wmV88.roa (hash: 2JKrAMaSBOfAdSssyHnAfVhbKUiXcGPrBZgPHZSrc8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:db:e3:61:34:53:76:67:7a:08:6b:90:07:4f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Validity
Not Before: Jul 23 15:01:23 2026 GMT
Not After : Jul 24 15:01:23 2026 GMT
Subject: CN=4cb4f08374dced869c97b8fbc50e191d9e1895e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bb:db:79:51:2d:65:66:28:c1:6e:fd:3c:78:
2f:8c:94:58:0d:da:f2:1b:45:3a:ac:70:05:59:3d:
74:77:bc:f4:8b:6e:36:e7:d6:ac:d2:8e:20:bb:63:
50:5c:36:30:f3:23:29:5e:c0:7a:fd:44:1b:95:cb:
0a:2e:a4:f7:d0:a1:ee:fa:56:f6:3b:dc:bd:e6:78:
33:a6:97:76:a6:2e:06:77:71:d7:ea:13:0e:51:8a:
de:aa:a2:b2:98:12:03:30:1d:5c:f3:2a:f1:cd:c1:
a5:0c:08:f5:6f:f8:a8:f2:c4:46:e9:37:22:ff:aa:
9b:72:88:ca:41:53:11:1b:06:26:d6:10:e9:be:0e:
2b:87:13:e2:1c:32:e8:f1:ea:2e:b4:f9:88:96:7a:
08:3f:45:ab:ac:69:c8:29:fc:40:72:51:0a:b5:0b:
e1:9d:96:65:b1:81:af:4e:e4:d2:45:59:d8:c1:f9:
40:7a:23:7d:3d:a3:d7:b3:30:35:1f:4d:ab:2d:9b:
ba:98:e7:ad:47:c4:99:b6:ae:02:2a:8e:d0:be:f2:
7e:42:c6:b5:29:fc:ae:cb:8a:de:b9:9d:12:c7:9e:
0a:5a:87:21:e6:57:25:3b:80:69:30:2f:e7:34:58:
d8:51:cd:36:04:e6:ea:e9:d8:3a:f2:a8:81:f7:cb:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B4:F0:83:74:DC:ED:86:9C:97:B8:FB:C5:0E:19:1D:9E:18:95:E9
X509v3 Authority Key Identifier:
keyid:F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d8:c0:f3:44:fb:61:20:eb:51:f4:2f:c9:67:82:77:f9:5b:
38:53:db:53:86:33:98:10:3d:ea:6b:7e:4d:67:75:ab:46:79:
e2:5c:f0:81:26:70:83:97:f0:db:ca:0c:5c:7a:89:50:4c:4d:
30:4a:98:1b:b9:86:7f:e1:24:91:ac:33:5f:cf:89:49:3a:ce:
dd:43:2e:7d:eb:b4:81:50:8c:3f:36:a1:40:d7:91:bb:a7:50:
40:0f:5f:3d:27:45:8c:db:f5:72:57:bc:b6:32:f6:62:6e:c2:
dc:10:fe:ad:41:2a:f6:4e:f6:cf:3c:ae:44:86:28:bd:b2:63:
50:d5:bb:4a:a3:cf:8e:63:bb:00:9c:ef:d0:fa:79:63:cc:15:
b6:45:44:3d:7c:6a:8c:fc:0e:50:b3:36:a3:13:f7:da:10:46:
f7:b9:ca:90:2c:7a:40:45:54:aa:7d:4b:4f:4d:0a:67:df:53:
51:bf:3c:e2:90:bc:04:97:3e:15:d1:b9:ff:0b:b3:b6:b9:1f:
09:c5:42:5b:be:fe:c8:fe:a4:db:98:e0:28:9b:c6:92:a1:83:
fd:8a:d9:13:d5:be:55:a7:c3:fb:5d:5f:99:53:24:5e:c3:8f:
3c:24:72:36:5b:b8:55:8c:45:2e:80:7a:ab:e2:36:67:8b:00:
8a:94:57:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:54:51 2026 by rpki-client