Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
File: 8qrILhYayAqgqo7qnwiE43ONkn8.mft (raw, json)
Hash identifier: /U5QslVAmqcgfo4NOyjQYwoy/yG8eSJvIkRc1/GhxVM=
Subject key identifier: CE:3D:09:C0:BA:16:F4:35:3B:B7:6A:99:A6:00:8B:87:44:C8:2C:55
Authority key identifier: F2:AA:C8:2E:16:1A:C8:0A:A0:AA:8E:EA:9F:08:84:E3:73:8D:92:7F
Certificate issuer: /CN=f2aac82e161ac80aa0aa8eea9f0884e3738d927f
Certificate serial: 019F91A3D6A4669B932A6AC8367558D061B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qrILhYayAqgqo7qnwiE43ONkn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
Manifest number: 0148
Signing time: Fri 24 Jul 2026 01:01:01 +0000
Manifest this update: Fri 24 Jul 2026 01:01:01 +0000
Manifest next update: Sat 25 Jul 2026 01:01:01 +0000
Files and hashes: 1: 8qrILhYayAqgqo7qnwiE43ONkn8.crl (hash: F1yIALdCnuuSidVXOjx6iGbM47uIou8Sp4NVn+LThAU=)
2: p-im3QVnalbsusM3ZnGz60SJPow.roa (hash: Ldo09DRRNUU18hQdQ2aHYFadGWK1+VYL8twJrEqztGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qrILhYayAqgqo7qnwiE43ONkn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:d6:a4:66:9b:93:2a:6a:c8:36:75:58:d0:61:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aac82e161ac80aa0aa8eea9f0884e3738d927f
Validity
Not Before: Jul 24 01:01:01 2026 GMT
Not After : Jul 25 01:01:01 2026 GMT
Subject: CN=ce3d09c0ba16f4353bb76a99a6008b8744c82c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:34:a7:bf:df:df:c7:25:ce:40:1e:06:f6:
cb:17:ae:79:73:00:e3:10:85:82:d4:9c:ce:38:bb:
fd:85:9e:1b:04:65:c7:16:3a:60:09:74:bd:b8:27:
4b:f5:80:20:4b:f2:7d:89:da:5e:37:f1:48:4d:c4:
9a:fa:32:02:85:2a:02:c4:b1:9c:6d:b3:2d:5e:af:
12:b4:9a:d8:44:2e:12:a1:aa:6c:62:d6:37:ba:e4:
74:53:93:8d:6e:b4:52:ac:f8:bf:4a:bc:7d:00:aa:
25:03:ff:c0:2d:8d:61:17:27:f0:13:9f:c0:27:fb:
36:fb:07:e9:d6:54:b2:1f:7a:c6:58:6f:0e:b0:d4:
cc:14:ad:02:15:55:74:4e:0b:30:07:bb:40:08:05:
11:29:c8:74:4a:09:42:19:e7:b8:6f:f6:35:ba:23:
ca:4f:e5:f5:a1:1a:a1:b9:a5:26:f5:39:51:83:ab:
c7:96:90:52:0f:fe:f1:89:f4:48:93:bb:37:52:8c:
17:c8:2c:67:b9:b5:35:0a:12:2c:4d:8d:d9:ae:6b:
d1:be:48:10:0b:3d:2c:ac:7d:ef:c1:28:05:a5:a4:
4e:b6:96:1d:88:bf:0d:58:69:df:5f:94:41:4e:03:
25:8f:f5:b7:11:01:86:9d:72:f8:5b:fc:46:6f:37:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3D:09:C0:BA:16:F4:35:3B:B7:6A:99:A6:00:8B:87:44:C8:2C:55
X509v3 Authority Key Identifier:
keyid:F2:AA:C8:2E:16:1A:C8:0A:A0:AA:8E:EA:9F:08:84:E3:73:8D:92:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qrILhYayAqgqo7qnwiE43ONkn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9d:fa:e1:04:f2:4e:7c:f1:94:d1:b0:b1:e0:d7:3d:de:90:
d9:9f:b1:25:74:7f:fa:6e:d2:5a:7a:21:01:c7:3d:d8:b4:5f:
3e:a0:24:de:4e:d2:30:37:a3:de:75:33:66:52:df:91:25:dd:
3c:01:f9:bf:4a:6f:bf:b1:3a:0f:34:05:cf:f0:ff:3e:95:7b:
69:70:52:28:77:6d:bb:c3:5a:11:f6:73:09:77:cc:09:38:00:
05:e6:ed:b0:4d:59:25:89:be:cf:23:90:d9:56:01:fa:2b:d4:
cb:4f:c0:bd:4a:6b:7d:55:3c:4a:63:d3:e9:6e:a1:40:0a:05:
19:54:0d:70:98:e7:ca:24:fc:5d:c8:34:b6:53:e6:0a:58:17:
c3:8a:67:cf:5f:9b:1c:83:d2:80:62:0c:4e:71:87:cd:76:97:
5d:92:85:44:c2:d0:8e:04:0f:2a:b4:78:f7:45:d0:b3:5e:8d:
b7:c7:b9:f3:b8:6c:83:e8:c7:19:ac:cb:28:99:24:bf:7f:6b:
68:5b:33:bf:21:ae:bf:4d:27:5c:76:74:09:f9:50:9b:b9:c4:
77:5e:3b:83:0f:5d:5c:2d:68:3a:93:18:03:38:fe:fe:f2:b8:
d4:58:7f:93:9c:b5:fc:81:a8:0b:6e:a9:d0:f8:0f:ae:d1:3b:
26:2c:3e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:59 2026 by rpki-client