Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: Io6Llz+BGQZsNocUmN/QkmuwQSNwRNTY0JQc6EAZ3qQ=
Subject key identifier: 2A:FB:DA:69:1F:9E:1B:D5:A6:0E:F8:F0:09:36:31:B9:91:F1:9D:A5
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 019F935B49A8493638EA87CB732323AE420E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 0AB5
Signing time: Fri 24 Jul 2026 09:01:01 +0000
Manifest this update: Fri 24 Jul 2026 09:01:01 +0000
Manifest next update: Sat 25 Jul 2026 09:01:01 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: PUXazpRSHxr2ZYnUI8xSo/B3YjdcFAMIZDLQ9/W72Jw=)
2: L2SGUtmn8iVoAZusJiJO0lWPz-c.roa (hash: tzCEkWtWLJDnUs8JcskBJsxe43rrrZgahQVNHwJxPJs=)
3: _p7le5gIIWbAoXoedbYiYmj5NdE.roa (hash: CNMW3XBWI+i2aIdqqxnzyTpertxlov4CAJZZ/pSHhYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:49:a8:49:36:38:ea:87:cb:73:23:23:ae:42:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Jul 24 09:01:01 2026 GMT
Not After : Jul 25 09:01:01 2026 GMT
Subject: CN=2afbda691f9e1bd5a60ef8f0093631b991f19da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ef:2a:70:e0:ef:01:60:be:36:dc:e9:be:2b:
d6:c0:d7:e1:3e:4d:5f:af:c9:08:1b:66:aa:20:46:
51:fd:ce:fd:eb:2a:c5:1d:12:c2:fa:ac:1f:aa:80:
43:c7:05:0e:65:80:c5:79:5c:ec:f3:48:cc:7b:4a:
51:30:50:4e:18:b5:af:5b:89:5e:06:d6:a2:10:dd:
3b:d5:00:81:34:e1:55:7c:c9:02:a7:04:8d:49:02:
94:19:26:97:43:e7:98:d9:f5:7c:61:03:68:aa:9e:
20:39:94:62:ba:99:b2:2d:3e:05:2e:30:09:36:9a:
ed:43:40:72:00:23:95:a9:04:a2:1f:37:6e:df:42:
4d:20:3e:94:27:df:b5:8f:aa:29:70:5a:34:dd:21:
f8:2c:b8:ab:d5:98:03:a0:0e:28:72:db:82:1d:0d:
1c:1e:4a:eb:06:06:b7:89:4c:80:8a:fb:15:03:ad:
f3:dc:f8:dd:0b:48:78:94:f1:16:29:33:a8:49:3d:
46:00:fc:69:99:0d:e8:90:9c:fa:f6:c1:d7:84:48:
0f:85:b4:15:aa:0c:c8:a3:90:5b:28:05:a9:d3:3d:
21:88:43:fb:5c:bc:a7:cb:3b:04:98:f0:5a:3a:80:
46:5e:ec:37:b2:0e:3f:25:91:d2:1c:d5:42:32:ff:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FB:DA:69:1F:9E:1B:D5:A6:0E:F8:F0:09:36:31:B9:91:F1:9D:A5
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0f:64:ef:b3:05:8e:27:48:20:a2:f2:f2:88:42:52:4c:14:
12:6d:39:ba:a1:e7:e8:a1:bd:08:12:a0:c2:29:ad:ad:42:06:
24:16:15:32:fd:52:0d:f1:cd:77:6e:42:bf:88:66:07:5d:f9:
3f:75:9e:93:11:d4:dd:62:d2:3e:0a:21:d8:f6:4e:f0:46:53:
57:dc:fa:a1:0f:6c:62:6b:21:17:02:8e:06:85:43:8a:b3:2c:
26:a0:eb:86:43:7c:66:2a:26:ea:83:9e:26:a0:5f:f6:f6:a9:
c3:93:a3:57:98:1a:51:93:13:fc:e0:90:70:2c:cc:2e:f4:ae:
ff:28:c7:4f:05:65:55:22:98:17:94:78:2e:97:18:cd:56:34:
34:cf:07:79:46:71:01:bc:3b:c1:f9:6e:20:9d:80:f8:cf:b4:
41:0b:92:fb:26:13:05:4d:f8:64:01:30:97:40:8b:d8:7f:c4:
6a:45:88:b6:bf:8e:46:db:dc:3b:0a:a9:01:f8:c1:36:34:99:
78:f3:09:72:bf:2e:c2:61:fd:cc:1b:8c:bb:b4:05:d8:0c:a3:
e0:ff:de:e7:69:43:75:c6:6f:73:51:70:c1:1c:68:83:bc:f3:
8a:c4:83:39:40:95:2f:27:ec:7c:8a:73:13:62:0e:25:5c:cf:
3f:51:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:18:39 2026 by rpki-client