Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier: oReS5lTF/TbgVDwVYTUn1or8oH+LVb2U/10eoX3w2PQ=
Subject key identifier: 38:6B:3B:07:31:5D:F8:D1:78:8B:CC:F6:3A:44:F6:0F:E7:55:01:4B
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer: /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial: 019F9247FB5849291CCE87605BC644B3D9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number: 0947
Signing time: Fri 24 Jul 2026 04:00:18 +0000
Manifest this update: Fri 24 Jul 2026 04:00:18 +0000
Manifest next update: Sat 25 Jul 2026 04:00:18 +0000
Files and hashes: 1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: HYC142x6rvWmyVzzIXrmxdUsCKHcErwu2AoMRmUBms0=)
2: RG6yqiKkRhz8lYMy2eaNN51T1FA.roa (hash: lUsy6MxM/FnhLx9vJglsPl+zWcJ7Y2MIMoaSU4GgA5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:47:fb:58:49:29:1c:ce:87:60:5b:c6:44:b3:d9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Validity
Not Before: Jul 24 04:00:18 2026 GMT
Not After : Jul 25 04:00:18 2026 GMT
Subject: CN=386b3b07315df8d1788bccf63a44f60fe755014b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2d:72:5a:90:43:ba:de:97:b8:90:93:c6:a6:
6c:25:a8:cf:9a:c9:c5:0c:aa:90:da:9a:f4:89:d6:
3b:7c:44:28:e4:10:75:0e:6d:ce:18:b6:ee:83:43:
73:ba:9f:3e:89:33:f4:e6:be:10:63:cd:d8:01:c6:
d8:65:c4:d9:85:fd:be:ff:1a:62:64:43:43:c5:6a:
02:cd:d2:26:4d:1b:63:8f:30:03:06:8a:8e:a9:31:
c3:de:4d:01:8b:91:29:b0:4f:d9:6f:7e:39:bc:73:
c8:84:82:b4:ad:9c:41:19:11:78:8f:47:54:c5:76:
c6:75:23:2c:91:6f:fd:0f:6f:80:2b:71:df:4e:e7:
49:42:3f:d2:78:87:61:cc:c3:09:5f:14:7f:86:4a:
29:63:61:da:e0:49:27:33:46:79:76:05:52:d9:8a:
e3:9d:31:64:53:b6:27:4d:3e:59:94:b0:3a:a3:59:
46:85:c3:a2:43:63:24:51:b0:35:ca:76:dd:dc:f6:
40:3e:34:64:83:21:ef:27:f3:85:73:97:ad:cb:fe:
20:8b:bd:09:9d:71:9e:7b:65:b6:73:07:92:18:f6:
03:62:f5:01:8b:6e:69:c7:e9:94:53:86:8c:57:5b:
59:b8:4d:f7:4d:df:e4:81:ec:cb:c3:cd:91:19:6a:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6B:3B:07:31:5D:F8:D1:78:8B:CC:F6:3A:44:F6:0F:E7:55:01:4B
X509v3 Authority Key Identifier:
keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:dd:38:39:58:bb:95:3c:00:25:bb:65:69:b6:16:46:3e:db:
3b:76:56:46:70:18:83:50:ff:f7:e7:ab:77:5a:53:f9:7b:dd:
0c:61:cb:d2:d7:a1:9b:fd:cf:77:e4:dd:83:b5:58:80:cd:f9:
45:95:74:be:64:40:f8:e0:ad:e5:0e:a6:96:de:42:fa:47:69:
0a:a1:9a:44:cc:15:51:51:bb:49:41:b5:39:25:82:20:61:2d:
5b:2f:8a:01:37:89:74:20:b4:c7:be:12:f3:36:40:f9:51:e1:
5e:8c:02:78:7c:25:66:ff:74:be:e9:b9:f3:49:2b:eb:2b:4f:
82:eb:b9:66:46:dc:84:04:7f:a6:2d:0e:ea:ae:56:60:e1:a0:
3f:14:cc:85:b4:20:e9:0b:58:d4:81:33:f7:09:b5:56:7e:90:
a3:f2:25:1d:3c:27:47:67:00:f5:e6:8f:48:bf:a5:cb:91:ed:
43:89:91:ed:23:3c:33:11:3d:5f:ba:ed:fd:b7:b2:81:7c:98:
89:97:87:f6:e2:f5:a3:5b:be:c1:a3:97:93:6d:2b:c8:82:3e:
ba:8e:8e:12:09:eb:45:41:15:ca:fb:d8:83:c7:33:ba:03:b0:
0d:7e:07:ba:1e:cb:96:5c:ee:2e:13:61:b7:55:40:ea:2e:84:
14:ee:38:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:35:17 2026 by rpki-client