Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier: AhnDXIkEYfPdFhBcgFO+TNBnVmazsV/x/jnGzqgfI1c=
Subject key identifier: 5F:7E:A6:0E:68:3A:50:4B:F6:E7:6B:EA:D2:C9:31:BC:07:BF:D1:DB
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial: 019F91DA3B0FD7026F0E64738ED86C66D5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number: 0CB9
Signing time: Fri 24 Jul 2026 02:00:25 +0000
Manifest this update: Fri 24 Jul 2026 02:00:25 +0000
Manifest next update: Sat 25 Jul 2026 02:00:25 +0000
Files and hashes: 1: dOj9E6FS6DEoaUcEFe4gpHgcFuo.roa (hash: dnfO9626LH91ChjEi8apYPGETS9gQAIqmrEgki3RmE4=)
2: s8k12EMWos9WpllXttebevgRpwc.crl (hash: 0AZH7+NPZ2hF1X26Vu1bEGe2tLCvzDAGRdCwDTOvm2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:3b:0f:d7:02:6f:0e:64:73:8e:d8:6c:66:d5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Validity
Not Before: Jul 24 02:00:25 2026 GMT
Not After : Jul 25 02:00:25 2026 GMT
Subject: CN=5f7ea60e683a504bf6e76bead2c931bc07bfd1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:13:79:49:5a:39:55:87:67:4f:0e:d0:21:
62:ab:26:e0:59:9b:29:fd:83:64:88:cd:5c:b0:79:
5b:3e:16:39:1b:53:9c:56:0e:2e:35:da:61:ff:2f:
a2:82:5f:8e:c3:02:d3:b3:f1:cd:b9:32:8c:cd:3a:
37:eb:c4:23:5a:8e:ae:75:bf:62:0b:29:ed:5f:9b:
79:7f:c6:cf:a2:d9:0d:f0:87:47:33:d9:8e:d4:dd:
72:92:f0:53:23:15:ef:f3:79:c9:3b:14:32:40:4e:
3b:5e:08:3d:d0:a3:14:dd:92:d5:b7:8b:ef:91:ee:
cb:8e:d5:dc:ee:61:8a:c8:5d:1b:bc:4e:75:65:d1:
5f:06:7e:03:74:3c:bf:dd:fd:67:c1:36:0e:ed:49:
43:5a:fa:5a:e1:06:33:7e:16:72:1d:da:a7:d5:3b:
5d:e4:88:28:6f:06:c6:0e:52:fc:d0:7f:b0:0d:ec:
41:b6:9b:e6:1f:3d:0b:fd:b7:82:8f:67:0c:05:f0:
51:90:2c:aa:7f:02:08:bb:ac:4a:84:23:48:96:08:
9b:79:7d:15:7f:2c:14:8f:6a:63:a3:62:34:b6:7e:
08:86:4a:8c:cc:0b:8d:a1:6b:cc:f5:c9:cf:b8:34:
e5:1f:af:01:ac:b9:09:45:45:ef:6e:11:37:a7:25:
84:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7E:A6:0E:68:3A:50:4B:F6:E7:6B:EA:D2:C9:31:BC:07:BF:D1:DB
X509v3 Authority Key Identifier:
keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:46:7a:f1:f0:3b:76:39:82:e2:35:41:02:df:ae:25:f5:b5:
ec:7a:7f:21:07:31:3c:97:0c:bf:c6:41:06:69:0e:91:e8:18:
f8:68:47:cb:9e:74:74:f0:bd:fc:21:42:7c:7b:52:f5:6b:5a:
96:93:f3:31:aa:16:72:61:f6:73:f8:10:9b:8b:40:62:e1:f3:
71:92:f9:0f:43:29:3b:d0:e7:69:09:36:81:6e:95:da:28:2c:
72:c8:b5:99:72:1b:d3:4c:22:28:e3:64:49:ab:80:d1:67:76:
c9:63:ed:4d:0b:54:d0:cc:44:24:1b:f7:c7:e0:3f:8c:bf:2f:
86:d5:6c:37:3c:63:51:d6:42:ac:0d:0a:23:76:36:39:c7:10:
27:66:9c:e0:86:5a:e3:05:72:96:54:2d:59:d1:bc:25:a9:f4:
19:d7:b5:7a:0b:e1:ba:bf:68:96:1d:82:c7:58:62:a0:e3:56:
5f:fa:fe:9f:0b:6a:7f:f3:1a:5f:64:05:9b:08:e7:8c:6a:ff:
86:56:3b:b8:65:d4:94:78:af:b2:3a:c7:74:65:1d:e8:86:f8:
59:5d:39:c4:ec:72:d7:c8:36:50:f0:64:80:e8:7d:86:e2:47:
4a:5a:4e:49:85:b7:79:ac:97:4f:59:17:f2:5a:e8:f5:53:20:
9a:9c:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:43 2026 by rpki-client