Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: kej0w5NTqCLPwh5mHg4ZUxws38qC5JwCJaC2CdE9c9M=
Subject key identifier: 26:43:22:D7:3E:09:64:A7:BF:39:2C:E7:33:44:94:FC:A4:E1:CD:3D
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 019F90FEA25655AD6115BF36C6A1A08D7CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 0A87
Signing time: Thu 23 Jul 2026 22:00:34 +0000
Manifest this update: Thu 23 Jul 2026 22:00:34 +0000
Manifest next update: Fri 24 Jul 2026 22:00:34 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: 3XglHKqHe77PnTa9adlTWh7PYJQo98E3Q40XKT+XWdI=)
2: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (hash: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ=)
3: iLu5B9aeu4NSBPHA9ivJ0i8Z4AA.roa (hash: acJKMRQ5Omks2WW0pWsL2TS7UwZ6+sYIZuHt+6L6NH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:a2:56:55:ad:61:15:bf:36:c6:a1:a0:8d:7c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Jul 23 22:00:34 2026 GMT
Not After : Jul 24 22:00:34 2026 GMT
Subject: CN=264322d73e0964a7bf392ce7334494fca4e1cd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:49:ae:96:70:6d:8b:5e:d4:75:78:62:50:
e5:c3:08:95:dd:0a:f7:8b:ea:a1:9e:23:c9:58:a6:
13:ad:a9:9a:0b:5c:56:45:b0:b6:22:ad:4b:20:65:
82:20:fb:ff:1c:ad:c3:fb:32:2b:11:18:79:9a:f4:
8d:ba:30:f5:de:57:31:3a:4b:cb:cf:a7:38:aa:7b:
6a:35:30:1e:5a:8b:fe:e7:15:de:d3:ff:21:cc:34:
4f:6e:e1:4c:8c:64:6d:ed:42:79:95:66:22:4f:e3:
d4:49:7f:07:1f:87:0a:a7:a5:a6:a0:c0:1e:17:93:
a8:1e:04:52:b4:02:41:17:f8:72:4c:39:32:c4:30:
62:4e:54:94:6f:c8:cd:dd:e9:9f:f0:c4:f9:f7:11:
f5:d0:9f:ef:46:58:3c:a0:f6:af:ff:b1:97:26:a6:
b0:ef:2b:1a:15:b6:a9:4b:b9:cf:e1:28:80:e0:66:
a8:5a:7c:d0:c5:81:9d:08:c6:bb:29:a9:19:98:bd:
12:1f:17:f5:af:1a:b7:dd:a4:a0:f0:15:0f:0e:99:
33:1c:53:7b:a6:d2:8a:65:8d:e2:7b:76:29:24:0a:
55:01:4e:e9:cc:a4:46:56:a0:0e:70:dc:78:ff:c5:
e3:4d:92:46:63:1e:ae:ca:71:e8:5a:cb:f9:55:5e:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:43:22:D7:3E:09:64:A7:BF:39:2C:E7:33:44:94:FC:A4:E1:CD:3D
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fb:ac:1e:36:6f:0f:db:bb:44:01:50:f4:e3:f6:e9:cc:f1:
cf:81:8c:5f:f4:0b:d4:65:77:87:f0:b3:db:14:4c:f6:ac:bd:
b0:90:74:a6:f6:0f:1c:be:fd:51:8d:a8:b0:31:b6:09:5f:70:
a4:4b:ae:60:e8:ce:76:bc:b0:53:01:51:9f:ab:49:c6:41:83:
cc:00:58:71:75:15:ea:a4:47:4b:aa:1a:5e:b4:e8:f6:ed:54:
8d:96:90:cb:36:aa:61:3c:b9:3c:5f:3b:02:76:b7:38:0b:2f:
09:38:04:1f:87:9f:84:77:29:46:cb:0b:2d:2c:a1:37:5c:c7:
4e:22:bf:e9:13:71:34:ee:b0:d5:b3:bc:b1:5b:26:7f:30:00:
eb:75:a1:8d:e4:94:e1:e3:9c:cd:b1:93:3f:11:77:a8:99:e7:
24:45:74:25:89:1c:23:8b:cb:2a:9d:76:29:ac:16:25:56:04:
01:d5:14:e7:04:d9:be:af:ef:9e:e4:f6:58:99:ee:6d:af:5f:
f8:16:de:e9:ab:30:65:3b:b3:9d:34:c7:ee:aa:93:53:cb:c7:
8e:f7:b6:b1:d4:5a:d4:de:b1:99:2c:0e:2a:c2:4d:d1:db:4e:
55:52:9c:65:ab:c7:b8:c7:16:d5:81:f5:6c:44:38:42:35:f1:
1f:13:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:31 2026 by rpki-client