Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
File: 8457gT6aM4MKE7jBiDhMLcTHXJc.mft (raw, json)
Hash identifier: DzbkKikz9DDdmct3MOvWotxm1uWwWjnvN4cjAY0Bghw=
Subject key identifier: 6A:7C:55:FF:8F:BC:DE:7C:BB:84:A5:5C:67:FB:3C:17:0A:C3:1D:17
Authority key identifier: F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
Certificate issuer: /CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Certificate serial: 019F8F7E5CCE08485D32FC6C9662E4D8EA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:50 +0000
Manifest this update: Thu 23 Jul 2026 15:00:50 +0000
Manifest next update: Fri 24 Jul 2026 15:00:50 +0000
Files and hashes: 1: 1lHC3eEb4JgrWUhgQdZGe237xNE.roa (hash: tiibMI6HO4qP8jmiKq9SAdjkuilfWtaVHKPxHUTz4wg=)
2: 8457gT6aM4MKE7jBiDhMLcTHXJc.crl (hash: bHjY+HbQ1feJiaqRjmcFEz6awv0goKq01zR6r74dQo8=)
3: PYTmdV0F9SG-733WM6hd2UxmEKQ.roa (hash: C/kjeN97nB1/VJQ7m/rVNOnzP/hxeC+2PpOB/KvRfaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:5c:ce:08:48:5d:32:fc:6c:96:62:e4:d8:ea:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Validity
Not Before: Jul 23 15:00:50 2026 GMT
Not After : Jul 24 15:00:50 2026 GMT
Subject: CN=6a7c55ff8fbcde7cbb84a55c67fb3c170ac31d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:c7:79:c1:bf:0f:6b:e8:ba:43:52:3d:a8:
74:cb:a8:48:aa:78:ad:22:99:2e:3c:78:a3:65:b5:
a8:9d:f8:62:00:cd:ad:63:39:7f:a0:bb:07:4d:b8:
06:52:27:e2:f7:ea:36:a6:36:71:35:c0:1d:eb:61:
72:ae:7c:16:dd:4d:50:ee:82:ef:4c:a6:86:fc:e2:
01:41:1b:15:b2:35:81:e2:5a:24:a9:8b:3f:16:bd:
17:62:11:5e:ab:4d:ad:1b:ae:ad:99:1f:fa:3b:f4:
73:e6:82:8b:f9:d7:4c:10:a3:f0:68:bc:34:60:45:
1f:94:9e:a0:ca:01:0e:3f:7a:f5:42:c0:f8:b2:2b:
b3:ba:38:23:3a:71:f4:bb:79:f9:87:a0:f7:8f:bc:
db:b8:c2:5b:1e:95:a8:d5:a7:3d:b6:f8:8f:8a:5a:
71:23:ea:8a:06:e9:61:1f:dc:e7:ac:77:7a:5c:1a:
75:de:ca:37:9e:2f:49:e5:87:ac:24:7e:9f:36:93:
d7:ff:41:1f:99:43:7e:fc:8a:28:4b:24:88:60:f2:
df:72:01:2b:f6:07:10:fb:c6:73:1c:d1:a7:60:5c:
30:2f:b7:5c:17:2a:d8:51:ca:ce:df:d1:eb:84:71:
75:4a:03:aa:dd:d6:aa:34:c1:a7:23:ee:44:e1:9b:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7C:55:FF:8F:BC:DE:7C:BB:84:A5:5C:67:FB:3C:17:0A:C3:1D:17
X509v3 Authority Key Identifier:
keyid:F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:15:27:f5:b7:72:8e:fc:23:43:81:b7:bf:51:fa:dd:e8:17:
2b:bf:a4:69:db:a0:9d:0e:11:38:b2:51:3b:91:7f:eb:d6:dc:
4d:03:32:7a:4c:68:8f:ac:98:38:34:85:fe:05:5b:cc:06:93:
dd:15:33:33:54:74:b5:8a:64:f5:47:2e:18:90:1b:77:76:d2:
18:f5:b6:f2:7c:ec:14:37:e9:a4:83:a9:e4:b0:29:c0:73:b9:
a6:95:7a:bb:e8:9a:8a:b1:6f:09:1b:80:b2:15:03:9c:d2:a9:
76:97:d3:7c:3f:6f:3a:78:3c:81:4d:e3:d6:a5:dd:ed:29:9c:
88:31:78:f0:db:7c:ee:d1:9a:da:15:4f:82:e1:06:53:53:9c:
fb:8e:46:ee:ca:5f:42:ee:d4:ed:f4:8d:1d:0d:73:4b:bf:c9:
59:8c:55:ab:8a:c1:64:f0:e3:ca:dc:aa:b2:a8:eb:22:97:50:
50:6f:7e:8e:c5:0c:c4:b1:c3:1a:c5:52:3d:f9:7c:28:b6:33:
4d:5b:35:e2:43:da:c5:ca:08:0e:52:e6:03:43:08:a7:31:bc:
c4:8c:94:07:ea:d8:3b:59:98:42:45:a0:e5:6e:01:78:ec:86:
d8:b4:bc:89:ff:15:16:69:f1:e6:af:ab:8e:34:a3:84:0e:7a:
84:9a:28:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:57 2026 by rpki-client