Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.mft
File: 8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.mft (raw, json)
Hash identifier: 6lMk3w3ceQRI9BP7qTG82LtdYhQuPbffLGzLo1xnTnk=
Subject key identifier: DA:6C:82:FF:6C:C6:B4:84:89:A8:F1:41:10:23:05:6D:38:38:76:8A
Authority key identifier: F2:5D:BD:1E:38:F3:A7:44:4D:75:25:2C:DC:5A:A0:FF:D4:9B:BB:92
Certificate issuer: /CN=f25dbd1e38f3a7444d75252cdc5aa0ffd49bbb92
Certificate serial: 019F8F7F9F9AA38CCC60CBF10BF1DADECFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:13 +0000
Manifest this update: Thu 23 Jul 2026 15:02:13 +0000
Manifest next update: Fri 24 Jul 2026 15:02:13 +0000
Files and hashes: 1: 8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.crl (hash: iUXnQOSe1fV7CnvyoS0a5Ohu6qg/2eF/xCeCB7bdgFQ=)
2: _txbFSrzyCUJI1jZHfeL7dao9vc.roa (hash: GA+XYdiNwNqkG/DOYzlsHoWRJ00DGH2U+sJnQ3YgffE=)
3: prn9SQ63UnoV3Ur4hqGqpgnszAw.roa (hash: pMdjHhBLBov7mJEoNsEbWNJt650Wj8ybDRhuyUulgyw=)
4: pyuYJO0JvQk4_lPVmwUIAiKdtzA.roa (hash: spVuUAlmbbx/0IommTdJLfUQZK543PbUAYnHl5p8iNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:9f:9a:a3:8c:cc:60:cb:f1:0b:f1:da:de:cf:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25dbd1e38f3a7444d75252cdc5aa0ffd49bbb92
Validity
Not Before: Jul 23 15:02:13 2026 GMT
Not After : Jul 24 15:02:13 2026 GMT
Subject: CN=da6c82ff6cc6b48489a8f1411023056d3838768a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:2e:18:e7:07:dc:58:fc:f3:de:bd:a4:a2:
f9:07:c5:89:23:d8:16:70:57:5b:78:5c:8b:01:47:
94:17:60:40:9d:3b:ef:a0:0f:d6:b3:b0:ba:4e:a7:
3d:07:d6:4a:6d:c6:38:91:b6:6f:c9:a9:a1:8b:7a:
12:d8:8b:5c:87:a3:c7:89:db:4d:0a:8d:db:d3:19:
ab:cd:aa:46:33:7a:cb:71:a0:48:28:2f:45:28:9a:
60:09:bd:ee:1f:6d:78:7f:af:35:ef:c1:b0:10:77:
8f:d5:a9:9d:23:11:86:e8:1f:3b:15:56:8c:3b:2c:
c4:a0:65:29:b7:3e:fa:c2:28:e7:24:0e:08:f0:72:
e2:5a:56:74:c4:4b:90:0a:a9:68:15:e0:5e:64:b7:
91:a5:f5:0a:98:c3:00:7a:0b:74:a5:9b:e8:3c:3c:
ba:6b:53:5d:90:46:27:5c:fa:b7:9c:32:2a:44:6b:
7c:6a:6e:db:50:94:d1:07:f3:a5:4b:7e:1a:8c:19:
4b:39:16:d6:4f:72:53:c6:49:0f:16:b9:45:91:f2:
6d:0d:42:e7:2c:46:ed:56:71:e3:aa:63:af:ff:63:
94:df:90:f0:9d:0a:c3:7d:e0:f4:2b:0e:73:7c:1b:
f1:1f:6b:2e:37:30:79:3d:90:1d:5d:b0:2d:af:79:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6C:82:FF:6C:C6:B4:84:89:A8:F1:41:10:23:05:6D:38:38:76:8A
X509v3 Authority Key Identifier:
keyid:F2:5D:BD:1E:38:F3:A7:44:4D:75:25:2C:DC:5A:A0:FF:D4:9B:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:65:52:47:81:de:6c:b8:ba:c8:9d:26:7f:78:14:a6:8e:39:
54:66:08:30:aa:6e:a2:93:4d:37:66:60:ad:66:2e:5a:b2:88:
d7:ba:8b:c5:95:3e:07:fb:cd:33:12:c8:51:06:00:33:ef:c7:
ee:d7:19:1b:ef:03:ae:b4:91:5a:b2:d6:75:f3:d4:1e:4b:3c:
81:d2:47:c6:6a:38:81:74:a7:6f:7d:59:d9:1b:87:50:aa:16:
d1:61:9a:e6:12:f2:27:7a:e1:d7:74:d9:2d:71:c0:2c:82:be:
82:d7:81:ed:02:1d:b3:57:02:b5:60:6a:74:18:c2:f3:35:c8:
c4:78:9b:44:52:97:60:1c:23:00:4a:53:8b:d0:f0:8d:6d:0e:
b9:2a:64:8e:03:35:3d:2c:3a:c1:c0:d2:24:c7:de:d0:f3:ec:
ab:d0:d7:b4:de:86:71:21:3a:0e:80:6c:31:0e:7a:4c:13:0a:
f6:ab:96:90:02:d8:22:f3:21:fa:cf:f4:7b:72:7f:fa:11:6d:
64:c5:56:99:9d:dc:48:c5:e8:fe:c8:74:d3:8f:26:07:29:e2:
24:58:c1:8b:f0:70:b8:f6:69:5e:22:be:2c:37:8c:1e:ea:3a:
91:81:8d:3e:52:df:13:24:d8:40:6b:58:18:8b:f5:00:13:61:
7a:07:0f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:13 2026 by rpki-client