Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: IXod9yrpmpPhtrk4Wjx6bN9gJAPNmqOt1mH55lJQoPY=
Subject key identifier: 81:39:3E:5C:BF:78:FD:A4:CD:E2:85:56:9A:97:EA:6B:DA:38:43:F0
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 019F935B2E64056546F5B08F9786D6F315AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 09:00:54 +0000
Manifest this update: Fri 24 Jul 2026 09:00:54 +0000
Manifest next update: Sat 25 Jul 2026 09:00:54 +0000
Files and hashes: 1: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (hash: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU=)
2: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: Ob1esdpPO5SoCDEJBqjbhI/A9kyde3NBgt5yCW8lBq4=)
3: oGOv0O1ixZRdG92zwrspojU0VwY.roa (hash: IjgFyfvL9U08ADh5P0ZxxkAaF6oStHyHq7QR+Yuo9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:2e:64:05:65:46:f5:b0:8f:97:86:d6:f3:15:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Jul 24 09:00:54 2026 GMT
Not After : Jul 25 09:00:54 2026 GMT
Subject: CN=81393e5cbf78fda4cde285569a97ea6bda3843f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ea:bb:a4:9d:e1:78:af:95:5f:91:a2:b7:0b:
7c:3b:00:c1:30:59:a6:6f:c2:4b:76:7e:6b:37:9e:
f9:64:7d:8e:e3:7b:e2:5e:a5:c9:f2:8e:18:1d:a7:
7b:c1:c0:02:e4:b7:96:21:8a:e5:06:bb:72:d0:f4:
70:bf:63:21:c7:a1:e1:5d:73:61:da:6b:3c:e4:07:
09:b8:ca:04:90:1d:c8:03:0f:c3:10:c6:2e:ba:62:
24:d2:75:1b:a1:dc:49:5e:c6:9b:0d:03:b9:4b:9e:
6a:21:0d:3e:f3:20:69:0c:fb:b2:41:c9:18:33:e1:
51:ea:07:79:c5:64:ee:27:c3:7b:c1:d9:d5:ff:1a:
5c:ed:d2:a2:56:4b:00:46:9f:7a:6f:20:20:c8:cc:
89:50:02:e7:55:e6:f0:31:76:01:85:7c:ec:fc:f4:
ba:30:c1:1c:cb:bc:f9:62:2f:95:2c:5b:45:db:24:
45:bf:7c:0b:d3:cc:64:28:c6:ef:74:10:9a:ee:5c:
f9:a6:cf:4b:a6:3d:8f:b0:e2:8b:fb:67:8f:93:9e:
fc:91:64:fb:7c:e9:fb:3a:39:56:4d:46:fb:de:6f:
a7:25:e5:99:d1:59:e8:3e:18:18:da:37:3c:6c:49:
d7:76:ad:be:8e:d3:85:28:6e:72:6a:71:4d:aa:4c:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:39:3E:5C:BF:78:FD:A4:CD:E2:85:56:9A:97:EA:6B:DA:38:43:F0
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:40:c8:e9:a9:05:f3:ce:8f:f9:78:bb:b3:67:80:1d:8d:13:
1a:d5:7e:d1:b1:c9:ec:f6:76:18:7a:22:7d:d8:94:3a:da:78:
46:19:f4:30:ab:a4:b2:83:3d:2e:3c:b2:39:ca:a8:b5:24:78:
ba:41:bb:c2:58:5f:5e:8f:2e:73:92:59:2a:54:36:3f:7c:9e:
e4:d3:46:ed:01:a9:2d:ea:9e:25:f0:25:2e:95:4d:75:bd:83:
ee:1d:32:ee:7d:ab:ff:55:96:60:87:15:d6:06:97:eb:37:60:
5b:b2:88:11:f2:bf:06:d6:be:01:49:c6:8c:c8:85:5b:d9:f0:
83:8a:66:c3:bb:1a:66:42:52:c2:cb:8c:24:ef:78:4b:20:a5:
43:e4:66:c7:c4:0a:e2:a2:97:58:75:76:b6:95:7c:16:be:74:
aa:fa:89:2d:dc:35:29:26:5a:49:7c:37:8b:cb:c3:50:e7:91:
bb:99:59:36:fb:27:a2:ea:1f:ba:70:cf:78:53:fa:0d:aa:52:
7f:eb:f9:6c:2a:9c:e9:5c:2a:b9:c7:10:2a:90:c0:cc:37:6d:
e9:f8:89:66:9c:90:d4:45:71:3d:5c:4e:cc:de:92:a9:bf:62:
f5:62:42:87:aa:e0:a5:7b:ec:df:98:53:91:7e:49:b1:3f:93:
c3:01:85:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:20 2026 by rpki-client