Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.mft
File: 8UOb0DqCBvrN-S-zIOAlBUVivLc.mft (raw, json)
Hash identifier: 8XYC1zCbXo+9WJfPuJ+FmgAVRHKTHE92iFtdAM94DX0=
Subject key identifier: 9A:F5:CC:94:7F:F6:BA:E7:11:BA:9F:B7:16:2E:71:1C:9E:C0:99:04
Authority key identifier: F1:43:9B:D0:3A:82:06:FA:CD:F9:2F:B3:20:E0:25:05:45:62:BC:B7
Certificate issuer: /CN=f1439bd03a8206facdf92fb320e025054562bcb7
Certificate serial: 019F8FEBE36C32DD2A0CB6FD4B0C40831077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UOb0DqCBvrN-S-zIOAlBUVivLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.mft
Manifest number: 98
Signing time: Thu 23 Jul 2026 17:00:28 +0000
Manifest this update: Thu 23 Jul 2026 17:00:28 +0000
Manifest next update: Fri 24 Jul 2026 17:00:28 +0000
Files and hashes: 1: 8UOb0DqCBvrN-S-zIOAlBUVivLc.crl (hash: BiNuSqwSaO1Cr7c1vGhyWcDe8njYcV36XUdD1EU2S0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UOb0DqCBvrN-S-zIOAlBUVivLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:e3:6c:32:dd:2a:0c:b6:fd:4b:0c:40:83:10:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1439bd03a8206facdf92fb320e025054562bcb7
Validity
Not Before: Jul 23 17:00:28 2026 GMT
Not After : Jul 24 17:00:28 2026 GMT
Subject: CN=9af5cc947ff6bae711ba9fb7162e711c9ec09904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:d5:70:39:53:29:4d:7a:aa:4c:8c:8d:17:
cb:ba:83:67:e7:db:8d:1e:86:69:71:43:98:d5:d9:
00:e3:0a:3e:29:fd:e9:3d:82:10:4b:87:77:72:75:
64:35:de:49:e1:d1:4a:54:4c:77:bb:ba:f5:10:e8:
de:93:4d:72:67:94:a8:f8:b2:15:3c:4c:fa:f2:fb:
28:5d:e1:22:5f:19:98:b9:72:bd:52:ee:05:33:83:
58:59:0d:1a:af:ef:1a:91:07:d0:6d:4f:ee:dd:34:
d0:2f:a0:0a:cd:d5:fa:cf:9a:85:ce:05:ad:df:98:
5d:cd:65:19:59:23:36:ab:f7:24:fc:3f:2f:20:5b:
49:52:14:10:67:9c:3d:80:f8:40:80:41:4d:29:46:
db:76:f5:73:f9:0a:67:59:c8:4b:43:1e:49:5a:c3:
fb:8e:e6:4c:de:de:36:9d:44:90:39:08:b5:a5:cf:
ae:13:f4:70:3d:85:dc:46:8e:6b:a3:ac:dc:4b:32:
84:fb:5b:b1:e1:65:16:47:71:1f:fd:2e:84:bb:b0:
bd:e1:ed:58:ba:d8:2d:b1:0d:59:f3:77:ea:c2:81:
bc:a9:7e:da:3f:9b:20:aa:68:a6:1e:0b:ed:fa:09:
d9:3b:76:9c:fe:17:9e:86:14:a2:c3:a1:0e:b7:cc:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F5:CC:94:7F:F6:BA:E7:11:BA:9F:B7:16:2E:71:1C:9E:C0:99:04
X509v3 Authority Key Identifier:
keyid:F1:43:9B:D0:3A:82:06:FA:CD:F9:2F:B3:20:E0:25:05:45:62:BC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UOb0DqCBvrN-S-zIOAlBUVivLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:05:3b:f9:b8:ce:b0:c1:1d:73:b7:bf:0b:11:d0:2e:23:6f:
40:8b:04:df:50:58:83:22:cb:f6:9f:d6:39:02:78:91:d1:01:
9c:44:96:03:fa:75:47:56:30:f6:72:b6:47:dd:7c:a8:d9:04:
bc:32:5d:4d:f5:c2:05:2b:48:dc:6b:b8:9c:24:01:6a:88:6c:
e8:bb:c6:65:0c:76:18:95:22:64:99:ff:c5:a9:e2:d4:2e:da:
98:b1:6f:b2:ac:cc:ee:20:8e:72:af:a8:3b:cc:20:a0:97:bc:
34:b8:e9:2b:87:8f:ab:9d:bb:61:6f:94:53:d4:2f:26:8b:7f:
dd:e9:b4:59:38:16:31:ac:19:7f:27:01:fb:2d:96:9c:20:22:
63:f3:a8:01:52:13:24:be:d9:ce:2e:a4:71:c2:0a:d7:16:e1:
63:23:45:0a:51:bd:1f:df:db:de:ab:f4:0d:04:51:c4:98:2f:
e4:95:e4:0b:b9:4c:7b:79:fc:46:a3:93:d1:c7:2f:a8:b1:33:
5e:59:be:fe:2c:90:df:ac:88:e4:cb:cc:e6:0e:0b:02:27:07:
cc:b6:4b:1c:bc:38:ce:e9:8e:52:02:03:b3:c3:4d:83:05:e4:
85:7a:34:a4:47:99:27:72:e9:2b:7a:71:ab:a4:7a:67:50:20:
88:bd:69:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:39 2026 by rpki-client