Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
File: 8zk0PMbVHduONjgpmhu0lfRYCSE.mft (raw, json)
Hash identifier: z7AoacBas8SDB5b4q//902z0mfL3dtgTYcwBzfJYWhY=
Subject key identifier: F5:2A:DB:25:02:A4:B4:0A:C9:E9:70:9D:CB:BF:32:DF:DE:7C:60:8A
Authority key identifier: F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
Certificate issuer: /CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Certificate serial: 019F9023483DFFCEAB7F5DB354E1E8C8CB22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 18:00:58 +0000
Manifest this update: Thu 23 Jul 2026 18:00:58 +0000
Manifest next update: Fri 24 Jul 2026 18:00:58 +0000
Files and hashes: 1: 3ZbP8D4oyhCe4u5mlugxkhUP_G4.roa (hash: mYQ4ggMgVLrFbz01ZBuOhgHTwYfwTmz0/Kv0k+37TBo=)
2: 8zk0PMbVHduONjgpmhu0lfRYCSE.crl (hash: ABpvgKno8Iu2KDG9fFYM7xYlHAMlj2ZstaajdZ131pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:48:3d:ff:ce:ab:7f:5d:b3:54:e1:e8:c8:cb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Validity
Not Before: Jul 23 18:00:58 2026 GMT
Not After : Jul 24 18:00:58 2026 GMT
Subject: CN=f52adb2502a4b40ac9e9709dcbbf32dfde7c608a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:09:4f:42:88:47:45:c2:73:0f:44:35:83:
7e:d5:59:79:cd:12:41:21:f4:29:2f:31:b0:2d:0d:
c9:8c:41:c7:e5:63:b1:ba:80:8f:c2:99:2d:74:ed:
23:fe:71:bf:48:68:bb:e8:5c:c6:50:5d:1c:5c:a0:
32:37:3e:e1:f4:60:5b:8f:3d:c6:e2:be:d5:a3:52:
e5:c0:fc:0a:0d:c2:4b:57:32:41:98:e9:c2:7f:fe:
26:90:e5:d2:7d:b7:55:4c:46:b0:2b:89:98:58:65:
02:97:93:18:44:e2:ba:4d:a1:ab:36:4a:ce:fd:ae:
69:e4:46:c6:d5:32:e4:90:8d:ef:37:0b:1c:ed:55:
fa:be:50:82:15:05:f3:be:48:16:1f:b8:30:46:24:
83:43:ae:8e:1e:03:9e:c6:fd:3e:99:8b:f0:7f:5b:
b5:00:14:1a:e6:95:07:5b:0d:ea:0e:34:8d:b2:7a:
3e:35:b9:b8:88:c0:70:d5:62:be:ff:d6:8a:c9:2e:
ec:55:3a:ee:58:37:e4:c3:79:d4:42:71:de:d6:1f:
fe:2b:f6:6e:55:66:f8:77:b5:1f:b5:3f:b6:58:14:
69:4e:5d:80:d8:ec:a9:27:a7:3d:b0:f2:f3:84:b7:
cb:d8:50:8d:a0:65:48:75:6a:0f:ed:eb:bf:c9:ee:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2A:DB:25:02:A4:B4:0A:C9:E9:70:9D:CB:BF:32:DF:DE:7C:60:8A
X509v3 Authority Key Identifier:
keyid:F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:fb:41:d8:39:64:dc:68:02:f8:5c:48:0d:4d:77:3b:40:95:
1a:ac:2c:9f:55:eb:c4:76:07:8f:48:fb:1a:76:d5:06:f2:f4:
4d:05:8c:eb:06:bf:a2:82:f5:d3:f1:78:4e:b7:0e:ae:c4:92:
67:f0:c7:52:a3:3c:a5:4c:ae:95:33:a7:ee:88:cf:88:1c:ec:
5a:2a:b1:09:6e:72:a1:0c:53:7e:9c:96:7d:69:40:5a:b4:23:
7e:b3:b0:55:7c:ac:a1:7e:21:3d:b1:60:ce:9f:e3:0d:bd:6c:
bc:89:3a:0a:0d:f0:44:8d:2b:56:ba:83:06:a6:9a:50:ec:33:
77:66:1c:f6:87:2c:80:2d:c2:cb:dc:8f:61:a3:c5:fa:1c:af:
46:40:39:30:5b:3d:5f:98:ef:42:9d:48:cd:0b:89:b0:2f:9e:
aa:68:1b:e9:6c:43:d8:ab:a5:59:43:4b:1a:02:3b:10:c1:32:
c7:4a:c3:a6:b8:f6:a4:42:9d:6f:17:f7:f9:b4:a2:9f:76:6b:
70:4f:a7:c5:b2:ee:7d:91:e0:0e:22:8e:dd:2f:63:79:c5:6f:
28:f5:bc:f4:e4:ab:1e:46:0d:c9:7e:1f:04:e8:a4:42:c0:ff:
bb:d1:1a:74:30:15:45:cd:58:66:51:3b:4c:ec:91:6b:ff:51:
f5:2f:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:25 2026 by rpki-client