Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: Lf3mNBTbP+hqYkoaGGYoB4MC/OtKSAczp4LlYhYOLeE=
Subject key identifier: AA:45:DE:40:21:3B:EE:D8:6F:0B:81:87:7F:D7:E7:92:DD:0D:F4:3B
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 019F90909061D668BD0F18FBB195516B1B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 1022
Signing time: Thu 23 Jul 2026 20:00:20 +0000
Manifest this update: Thu 23 Jul 2026 20:00:20 +0000
Manifest next update: Fri 24 Jul 2026 20:00:20 +0000
Files and hashes: 1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: xCGcn78FTVySzaus1R8/k20wJ8nsESLUlktuBLuHYcQ=)
2: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (hash: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A=)
3: LwxlxO59sLpFilR69YBzUan2hpk.roa (hash: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:90:61:d6:68:bd:0f:18:fb:b1:95:51:6b:1b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Jul 23 20:00:20 2026 GMT
Not After : Jul 24 20:00:20 2026 GMT
Subject: CN=aa45de40213beed86f0b81877fd7e792dd0df43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:1b:fc:65:61:82:32:41:c0:58:46:ae:42:
26:36:c3:fe:cc:c3:d1:be:3b:ec:c9:8c:6d:b9:4b:
de:78:e5:d9:43:91:9c:9c:bd:00:c5:20:33:d3:6c:
86:93:48:93:ff:b4:5b:ea:41:5d:62:d0:ad:82:23:
67:01:8f:56:b8:96:af:f8:e2:f4:ea:e3:92:78:c3:
fc:2f:38:7f:5e:7e:1b:2d:9f:cf:3c:6f:35:75:57:
44:b9:30:13:cc:04:5e:c9:bc:e6:f8:d6:29:d1:af:
00:e2:29:6f:2f:22:e9:43:06:21:d0:b7:25:09:bc:
87:cc:3e:c1:a0:1e:2c:f8:49:ee:6f:6e:ee:21:42:
94:2b:80:04:9f:0c:4e:38:57:ad:55:87:aa:10:7f:
e1:07:a3:15:13:8f:9c:1e:58:ef:bd:17:02:fd:ce:
4c:c0:af:7d:cf:bb:f8:33:73:13:84:f4:91:ff:ef:
9a:d8:92:59:dd:6e:3f:13:e5:f6:84:31:a7:bd:54:
c9:07:42:98:08:61:be:1c:37:69:93:c2:14:e0:e4:
85:e9:4e:f9:fa:ac:ee:36:a2:0f:01:68:12:9e:28:
73:db:2f:40:5b:4f:9a:d0:c7:2d:ee:c0:39:7e:df:
1c:4a:5e:1b:94:4d:c4:47:8a:72:b7:05:7b:12:7c:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:45:DE:40:21:3B:EE:D8:6F:0B:81:87:7F:D7:E7:92:DD:0D:F4:3B
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c5:2f:98:ac:dd:fb:b6:4f:5d:4d:3d:a8:92:66:16:e4:35:
14:22:4a:77:df:42:d6:bf:1a:bf:ad:f1:b7:3a:5e:b2:91:23:
a9:ab:f6:66:af:fb:44:46:07:d8:ad:93:b9:26:71:4d:ea:19:
ba:8f:1e:28:5f:83:c8:56:d5:06:09:ec:55:bd:a6:2e:f8:b3:
0f:e7:b8:59:68:94:81:6c:b7:ff:5c:15:2c:db:6a:7c:d3:bf:
08:b9:fb:c9:1a:76:6d:c0:a2:0a:dd:5b:ab:2f:92:83:df:f3:
f0:ac:af:51:62:1d:8c:f1:7a:47:76:3d:ad:fb:51:23:90:46:
2e:bc:83:d3:ae:bf:f8:00:63:b4:18:6f:a6:67:c3:35:f3:17:
c2:b8:65:56:ac:57:61:f9:e4:12:80:7d:a3:91:ab:7a:7a:fd:
05:bd:32:40:21:c7:88:aa:a5:20:42:61:71:71:03:f0:20:4f:
41:81:ff:e5:25:9f:b0:3a:ab:5f:99:d5:5f:bd:df:da:ae:8e:
a8:79:f5:15:08:ba:94:3a:80:22:62:2e:5e:67:74:5f:3a:d1:
b9:1c:f9:59:22:66:c3:c3:96:0f:0c:4f:93:a6:80:ba:46:5d:
cf:5a:7c:40:1f:c0:77:cb:a4:12:71:91:65:ad:cc:a0:44:85:
c5:5f:a5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:15 2026 by rpki-client