Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
File: 8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft (raw, json)
Hash identifier: qdsalwpDGGSmdpQONUKNBAMhy4L+LArNJDuQzzk1o+w=
Subject key identifier: 9E:FA:DF:7C:05:AA:29:CF:74:D7:79:B0:88:D7:D4:86:49:B4:B0:D9
Authority key identifier: F0:19:8D:5F:BD:25:23:E2:2D:B8:2F:10:C3:DA:37:A9:43:5B:6C:BB
Certificate issuer: /CN=f0198d5fbd2523e22db82f10c3da37a9435b6cbb
Certificate serial: 019F8F7F5BC7D824A7FEA501AFAAB131FAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:55 +0000
Manifest this update: Thu 23 Jul 2026 15:01:55 +0000
Manifest next update: Fri 24 Jul 2026 15:01:55 +0000
Files and hashes: 1: 8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl (hash: ZsbBi+eyyj81kOw5ZkadJMtU6B3Gdy+X7pusPdKXxAs=)
2: f85ANWeKKEbi4pK19Z060OvY_XI.roa (hash: qV+HKaGs2anI4Q/Iy3DcGeZYfOs1cg3GI50On0iw4rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:5b:c7:d8:24:a7:fe:a5:01:af:aa:b1:31:fa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0198d5fbd2523e22db82f10c3da37a9435b6cbb
Validity
Not Before: Jul 23 15:01:55 2026 GMT
Not After : Jul 24 15:01:55 2026 GMT
Subject: CN=9efadf7c05aa29cf74d779b088d7d48649b4b0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:6d:a4:2c:c3:70:0b:53:fb:a5:d5:80:3f:
66:51:81:3b:ea:b0:40:8b:de:d5:fe:38:06:b2:9e:
e9:5b:1c:1e:a1:ab:01:2c:f3:f4:46:6b:20:22:a9:
de:56:11:0d:68:ec:d2:96:b0:a6:d2:f5:76:e5:ca:
6f:c7:16:19:c0:94:e1:11:05:1a:2d:19:2b:ba:e9:
2f:35:c8:17:77:f6:dd:48:38:c2:7e:6f:12:04:c7:
a5:9a:f5:54:b3:ea:aa:46:66:ed:23:9a:e6:20:21:
54:6e:5c:a9:7d:3b:55:f7:26:80:73:93:16:34:5e:
f1:9a:09:a4:4d:63:6b:a7:4a:e8:72:e5:84:fb:d0:
9b:a1:4a:d5:91:36:c1:c7:eb:0c:93:10:28:f5:95:
c1:aa:c2:95:48:9a:d3:02:8f:54:db:30:60:50:2f:
17:cc:a4:c8:1e:44:51:44:60:d1:36:a9:23:b0:a2:
4b:d9:12:1e:e7:d7:69:25:ac:32:66:c7:8c:6d:f6:
5a:f9:f1:f0:7e:8f:28:9a:7e:9d:d2:51:c4:80:b9:
ee:03:47:ab:b4:a2:04:10:b5:08:71:db:72:0c:c3:
3e:90:9a:ce:61:02:e6:a8:5c:cb:f3:3a:69:38:27:
6f:30:1f:e8:d4:f9:78:ed:31:65:eb:fd:4d:cf:a1:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FA:DF:7C:05:AA:29:CF:74:D7:79:B0:88:D7:D4:86:49:B4:B0:D9
X509v3 Authority Key Identifier:
keyid:F0:19:8D:5F:BD:25:23:E2:2D:B8:2F:10:C3:DA:37:A9:43:5B:6C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:af:9f:2f:d6:e2:70:4a:d3:35:d6:01:f5:b5:83:77:df:7a:
e3:77:9d:5c:3d:c5:d6:f1:e4:c6:7d:77:84:04:82:55:a0:d6:
01:a0:71:0e:58:1d:8f:2f:b5:d3:c6:a0:21:7a:48:d9:89:d5:
05:6c:ba:56:83:7d:f5:45:e3:fe:a7:92:c7:2c:cd:77:90:de:
58:e7:41:9d:e9:02:1f:7f:86:50:89:68:29:1a:9e:a2:d1:be:
83:6d:6b:60:0c:d9:66:69:6a:8e:c3:bd:4b:cc:02:19:5b:43:
20:56:6f:ae:a8:46:ef:f0:0c:02:7c:85:05:47:de:75:be:33:
fe:1f:0c:88:61:59:b2:b6:fc:90:d9:9f:64:30:20:54:0f:55:
c4:e3:6d:e7:55:a5:d6:9c:58:04:12:f1:1e:0b:d7:8b:30:6d:
cf:44:3a:07:65:69:2b:85:fd:7f:a3:0e:b5:f9:0f:91:c6:b0:
ab:5e:19:43:84:35:1f:e2:7d:08:98:35:52:b9:a9:f5:09:cf:
63:7e:03:e7:80:8e:31:a7:cb:08:16:d5:dc:60:09:02:e7:00:
d6:5a:69:1b:03:68:9b:67:70:d2:5f:13:b7:cb:83:77:ed:dc:
a1:22:f0:4a:cb:ad:19:bc:98:fc:b6:d2:1b:ee:87:89:1a:34:
16:93:65:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:34 2026 by rpki-client