Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json)
Hash identifier: iNPv/pMJzOQtG9jCpzRIszB7MvB2xm1HW4FNv/RUboU=
Subject key identifier: EA:27:56:FE:4A:8B:88:C8:16:6C:09:0A:C2:30:27:A5:15:EF:DB:3E
Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Certificate serial: 019F9135A1F4EADF58A06AA4BD66C722AE89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
Manifest number: 04C2
Signing time: Thu 23 Jul 2026 23:00:38 +0000
Manifest this update: Thu 23 Jul 2026 23:00:38 +0000
Manifest next update: Fri 24 Jul 2026 23:00:38 +0000
Files and hashes: 1: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: wUmI88JPn+J40Q8AWdFgBzETmG+2XNrfwl70+eXjf9k=)
2: w_cDoBQm48qO3UJDie6dGD-GT6A.roa (hash: 4d0oLWhWZ7o8XZ0xXiTGwVR/Fkht5a6EInFhOOT/M94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:a1:f4:ea:df:58:a0:6a:a4:bd:66:c7:22:ae:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Validity
Not Before: Jul 23 23:00:38 2026 GMT
Not After : Jul 24 23:00:38 2026 GMT
Subject: CN=ea2756fe4a8b88c8166c090ac23027a515efdb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:7d:cd:62:7b:c2:e5:35:f1:46:5e:8f:63:
c6:5c:cb:50:87:91:5e:aa:f3:e9:27:23:bb:d7:6b:
33:1d:0c:4d:f8:91:a0:24:a6:a3:bd:e6:5b:95:3c:
65:e2:56:b8:f5:d9:7d:6a:6c:91:24:a7:95:b1:95:
0d:9f:3b:a2:5d:2c:70:0f:01:be:9b:99:b0:0e:44:
f7:2b:85:47:d8:8d:94:e5:31:6d:19:87:40:ef:4f:
48:48:d9:d6:cb:48:b0:ee:41:97:57:34:34:b5:a7:
c4:e2:04:0e:15:05:ee:99:c3:5e:a8:66:fc:33:f5:
62:c2:87:75:b4:07:2e:18:51:21:ba:77:58:7b:bf:
de:85:66:d4:53:1b:23:88:f5:70:b9:2a:20:49:5b:
d0:ee:d3:b7:95:c6:6b:e4:ce:0f:7d:e2:9a:53:25:
99:c4:fd:78:f6:3f:6e:3a:9d:6b:1b:13:12:90:e6:
2c:4f:e2:03:b8:d5:78:89:31:b4:e2:c9:2d:8d:24:
a6:c6:40:6d:91:08:88:0e:6e:65:2f:4a:cf:46:5e:
79:4f:b9:98:fc:88:74:05:3d:3a:34:0e:e6:f5:fe:
ff:74:ed:f0:88:30:d1:cc:54:4e:10:18:0f:38:96:
1a:bd:18:95:e4:5f:91:39:60:f6:c0:00:d5:2e:ef:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:27:56:FE:4A:8B:88:C8:16:6C:09:0A:C2:30:27:A5:15:EF:DB:3E
X509v3 Authority Key Identifier:
keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:91:f1:2d:23:fb:9c:64:d0:df:19:f3:e6:25:87:e9:79:08:
3b:d6:1e:a0:a8:76:3a:6f:80:26:83:e3:a0:1e:a0:77:7a:69:
e0:e9:41:81:46:23:1f:69:01:44:29:9c:2f:be:92:65:47:da:
78:e2:ea:ed:80:c8:20:b7:3c:8a:c0:34:99:50:46:ad:d2:6b:
ec:d9:63:f8:7f:02:e8:2b:4a:0b:93:20:ad:2e:12:fd:3b:ba:
a6:3c:d9:63:5e:b4:3b:f2:cf:8a:4a:5c:5d:ae:72:fb:ae:d0:
29:70:1f:f0:df:64:d9:98:ff:ab:34:b3:ba:b9:de:d9:99:50:
2a:c4:4b:26:8e:b4:4f:2e:96:54:75:57:5c:1a:28:48:96:bd:
28:9d:f4:cd:ea:03:c7:dd:26:ef:9a:b9:dc:79:ff:96:b1:dd:
0b:56:25:0c:66:5e:5c:de:ff:3d:2c:fd:22:50:07:ca:8d:73:
e9:9b:4e:8c:41:91:d6:83:71:97:99:67:94:f5:3c:ec:84:f0:
d5:7b:34:10:37:4c:70:dd:e6:39:57:d4:46:3c:45:83:4a:0a:
25:f9:ec:77:8f:49:17:cc:e0:03:a3:e4:95:0b:89:bb:1a:51:
f9:fc:ed:b1:a8:58:d0:62:64:55:32:4f:1f:a9:47:fb:49:8c:
4b:59:d8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:54:09 2026 by rpki-client