Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: 0pW5q78mJn3lhgV72NXH9E0FZUGytQD5ea0Tw1+FItM=
Subject key identifier: CA:40:E4:36:1F:27:25:09:58:D8:55:55:E6:40:20:BE:67:78:D4:D3
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 019F905AA1362F201AA67C81A6D5F876FD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 09C7
Signing time: Thu 23 Jul 2026 19:01:26 +0000
Manifest this update: Thu 23 Jul 2026 19:01:26 +0000
Manifest next update: Fri 24 Jul 2026 19:01:26 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: FW7QdDHwutYQCoAoJNj29ys3Bx2CDk4UFGCM2OsQGJQ=)
2: CJhFdSugh2xrtXcQtigps8wHu28.roa (hash: dLTf/Etn9ztfuP7WaPG+Vc9FZ4tRdTOgYexvxbXPjIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:a1:36:2f:20:1a:a6:7c:81:a6:d5:f8:76:fd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Jul 23 19:01:26 2026 GMT
Not After : Jul 24 19:01:26 2026 GMT
Subject: CN=ca40e4361f27250958d85555e64020be6778d4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e7:77:5e:d0:47:49:7a:3f:59:bb:c7:a2:79:
2b:97:bf:2c:f4:dc:86:14:ea:03:71:47:81:4a:1b:
22:6e:70:a9:b9:53:42:5f:5c:93:02:36:fd:97:5a:
77:0b:29:8d:78:9b:b8:a8:67:28:b8:25:8d:b6:16:
b1:ba:c9:20:71:b6:be:25:ef:c8:15:db:ab:71:a9:
f3:e3:88:fe:53:d3:5b:c5:2e:80:cf:7b:50:42:36:
7f:81:f3:e4:dd:ce:7b:00:59:6c:7b:6f:92:33:24:
09:c9:7d:8d:98:b6:f0:b1:3d:1f:cc:eb:5e:de:a0:
36:a5:57:29:b1:26:f4:b9:c8:22:90:61:84:a5:6e:
fb:07:a8:68:76:76:14:7b:82:67:03:77:1d:03:bd:
6d:e6:b4:ef:ed:3e:64:08:46:88:c7:3d:a2:04:87:
c7:b9:05:ca:70:67:4c:3b:48:1f:e7:77:bd:19:f8:
a0:c9:60:2b:60:9f:96:24:13:30:f3:42:a9:ae:34:
36:3d:77:07:56:3f:8d:aa:51:b3:16:45:24:35:3e:
71:f4:7f:d8:28:9c:54:64:82:61:06:d5:a8:07:e1:
ab:e8:c8:72:1e:88:24:f9:38:4a:6d:2e:a0:0c:c2:
16:7a:36:dc:37:44:3e:ad:1a:19:ec:27:57:83:03:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:40:E4:36:1F:27:25:09:58:D8:55:55:E6:40:20:BE:67:78:D4:D3
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:69:33:7a:ef:64:98:eb:8b:77:c4:ab:74:57:0f:a5:1e:0a:
d9:e1:a8:f9:2e:50:16:32:6f:0c:2c:48:40:2d:fc:67:cd:87:
32:fc:78:39:e6:c9:93:f3:65:fa:5b:e8:fc:8b:1d:f0:18:68:
21:d7:10:27:3e:c0:c2:e6:86:7e:15:f7:ca:43:5e:3c:63:42:
3d:62:aa:b9:d7:e7:78:2f:38:77:c3:c7:be:71:1d:b0:79:e3:
c6:dd:be:af:ae:e3:cf:dd:e2:48:25:a5:f1:4e:27:e5:2e:d1:
31:e1:55:83:5f:4a:03:55:be:23:c6:b2:57:5f:84:6a:c6:23:
46:73:d4:b6:3e:19:69:35:ca:89:e8:2d:4b:84:e5:83:95:5c:
a6:1c:5c:42:a9:91:32:0f:a3:38:ae:5b:0a:b2:11:68:33:21:
a4:61:75:5d:06:1a:61:36:ec:42:0e:34:5f:07:8e:61:17:3d:
5f:68:9f:09:51:f4:92:ad:af:7f:0f:da:61:cc:2c:e2:6f:ab:
5f:39:0a:22:37:cb:df:c5:0c:97:35:d7:d1:8a:74:60:77:f3:
4a:f7:e5:d1:bf:af:5d:70:0d:fc:8a:78:47:71:97:41:8a:6f:
3e:58:83:fe:44:cc:75:8f:38:56:cf:dc:65:ae:93:29:0e:1a:
29:41:43:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:20:50 2026 by rpki-client