
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: 4ythdT1Du9bHC6ajoiuUG64jmoLCLkxEDjSPPOn8Px0=
Subject key identifier: 60:27:3C:C2:A1:5D:6E:4F:A8:35:54:20:60:6F:56:21:5D:17:A4:CC
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 019F8FEBCD0A2263DBE6EC8A9695064D53E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 10BD
Signing time: Thu 23 Jul 2026 17:00:23 +0000
Manifest this update: Thu 23 Jul 2026 17:00:23 +0000
Manifest next update: Fri 24 Jul 2026 17:00:23 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: Vl0NVvKT+7PR3NRvu176Dioh0Q20qM3YowFp+uqMd3A=)
2: cnrJlx8I7NXdM3vCOpIC2LhJ_Y8.roa (hash: PEnciQKvDww0pGR7AqTRA4YTGpE9TeNFX/n52nV6jQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:cd:0a:22:63:db:e6:ec:8a:96:95:06:4d:53:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Jul 23 17:00:23 2026 GMT
Not After : Jul 24 17:00:23 2026 GMT
Subject: CN=60273cc2a15d6e4fa8355420606f56215d17a4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:e0:7d:b6:d2:e8:dd:77:11:80:38:ff:a9:
e9:22:0a:23:d6:df:7a:7e:e2:6f:f8:af:c3:90:fe:
0a:bc:21:69:d7:12:4f:aa:72:4d:1c:0c:cf:f9:a4:
dc:cc:3b:1e:e6:4e:53:df:4f:60:78:59:5d:df:25:
e1:c0:a1:60:5e:eb:9c:2b:a8:43:5e:70:a4:31:ee:
39:1f:1f:2b:3a:da:8c:cb:03:ae:17:f8:fb:e4:14:
e8:75:c9:48:7e:c0:5c:aa:d0:f6:18:03:13:cc:cb:
fc:1f:33:e1:11:f5:a0:f9:96:c1:a0:8b:85:ed:17:
a6:68:d2:18:ef:b8:ec:28:08:e4:ed:71:a2:c2:bf:
6f:e2:e7:5b:eb:14:47:e3:42:18:bb:89:51:27:34:
e7:4f:96:90:af:4d:6e:ca:59:b8:12:cd:2c:20:6b:
1e:a3:a0:10:09:81:4a:f6:73:1d:c5:b4:17:f8:50:
3a:0a:0a:14:cc:e6:60:e9:fe:71:b0:ac:bb:19:cc:
47:14:99:ef:4a:52:a3:2a:69:fa:8d:6e:fc:61:f5:
58:d8:bc:72:fe:23:60:af:53:b2:d0:45:eb:f6:78:
89:79:60:14:13:92:13:c1:5a:0f:7c:bd:e7:43:d3:
a6:1d:d9:65:5c:70:50:b4:21:6f:bc:5d:bd:40:3a:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:27:3C:C2:A1:5D:6E:4F:A8:35:54:20:60:6F:56:21:5D:17:A4:CC
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fd:e4:18:e0:7d:19:82:18:86:fe:1d:93:35:8a:f3:80:a8:
be:61:06:93:8d:63:1d:f5:b2:79:fb:46:8c:0b:0a:03:7d:98:
6b:aa:cc:4f:d3:c8:88:ca:f2:0f:39:2a:8c:9f:7a:89:ab:e0:
8d:c2:a7:50:7c:a6:68:01:ef:dd:1b:11:92:7e:03:54:21:cb:
a0:bc:39:c1:44:9b:e5:12:ac:1f:b3:82:5e:3c:4f:ce:ec:fc:
3d:53:03:e3:6f:85:32:9b:0a:6f:32:97:ce:e9:3f:5e:14:a4:
c9:b9:92:94:16:cb:ea:30:01:8a:28:30:a5:3f:a1:c7:ef:49:
ca:9f:13:d8:43:78:d0:66:41:46:c7:37:3a:da:a2:ad:91:2c:
2e:7e:3f:52:e7:6b:3d:9b:a4:85:1b:62:01:30:a4:9a:6d:f2:
b1:13:17:ee:82:68:fb:51:bc:31:fc:29:9e:d4:15:f5:cd:03:
39:54:05:0d:e3:b2:0b:60:be:72:2f:f2:df:9b:c9:f9:f4:6a:
cb:71:1c:99:70:4d:5d:43:21:5f:11:78:1d:b5:b5:2b:15:e1:
ef:3f:e5:50:17:5a:21:1b:c0:6b:fb:93:5b:bf:00:db:62:57:
18:96:e9:1e:23:e7:94:57:98:c0:fd:2a:8b:ce:07:35:05:51:
42:d1:60:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:42:35 2026 by rpki-client