Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
File: 8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json)
Hash identifier: Td2MvSwp8PEua63nBldE1YfBfMgYDPXCUJ+fVdmQNWU=
Subject key identifier: 49:21:4B:2B:E2:94:C1:B1:D9:55:36:E0:38:C1:55:9D:21:D6:52:4A
Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76
Certificate serial: 019F8FB5B9E5AACCF46298AAC2B538460F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
Manifest number: 09A9
Signing time: Thu 23 Jul 2026 16:01:19 +0000
Manifest this update: Thu 23 Jul 2026 16:01:19 +0000
Manifest next update: Fri 24 Jul 2026 16:01:19 +0000
Files and hashes: 1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: UzbFry7MOqpkNVxndpgZAqjSvIg8oTG1VVl7g1EesvE=)
2: MOE6KwN-epUQMdljICsn17Njfbg.roa (hash: iNc+kg2dbOxkcfPRJ+ToFioDzAzKbLX2bomVYrhE+a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:b9:e5:aa:cc:f4:62:98:aa:c2:b5:38:46:0f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76
Validity
Not Before: Jul 23 16:01:19 2026 GMT
Not After : Jul 24 16:01:19 2026 GMT
Subject: CN=49214b2be294c1b1d95536e038c1559d21d6524a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:81:31:0f:98:2f:b9:c6:9b:5e:e4:5e:b0:
79:ce:3b:27:ab:0e:89:63:24:9e:d2:40:1f:3c:eb:
bd:53:c1:e5:05:b2:4f:c7:22:2f:a5:06:ec:07:5c:
ec:3d:21:21:66:82:25:37:b0:c5:04:1f:3a:7a:1d:
9e:6c:25:52:28:ed:30:b3:c5:54:23:0c:af:32:3e:
d4:6b:00:39:ba:29:b4:4c:c3:ab:c4:b5:50:8d:28:
8e:9a:f7:ce:98:b0:a6:82:4f:50:f4:b7:98:33:e2:
f7:94:fa:1c:68:da:52:0e:a9:f5:8a:54:db:2c:0c:
dc:c3:8c:f2:e9:23:c8:89:b6:44:b6:ef:bd:38:6c:
98:9c:c6:75:1e:32:94:5f:59:d0:48:79:2d:02:a6:
1c:55:eb:7a:4d:14:03:fa:34:8b:4a:c1:c2:9b:c8:
39:2b:ad:7f:a7:64:b8:c3:8b:1b:f5:ef:c4:bb:80:
06:9c:82:60:ab:68:d6:87:9a:cb:28:ff:55:49:a9:
0a:86:4b:25:68:1f:2d:1d:85:12:67:c5:6b:44:7c:
f3:80:ba:13:de:d1:a9:5a:47:a1:14:43:d7:e1:94:
c1:89:d3:b2:77:1c:f5:5a:ad:24:57:fa:8a:8c:23:
c5:d8:38:d5:ce:ab:c5:d6:67:e8:93:b6:45:f0:4b:
d3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:21:4B:2B:E2:94:C1:B1:D9:55:36:E0:38:C1:55:9D:21:D6:52:4A
X509v3 Authority Key Identifier:
keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:52:dc:05:85:4e:05:90:6a:ab:a1:5a:bc:85:b8:de:bd:3e:
bc:86:42:40:ba:9d:7a:f9:ba:1f:f7:92:98:9c:8e:f6:21:23:
57:17:eb:59:2f:73:30:15:3a:17:9e:03:63:6f:19:d1:eb:3f:
6d:2f:33:94:32:8f:07:ae:24:c3:c5:ae:fa:cd:35:7a:4a:a2:
d1:bf:af:1a:48:23:b6:60:a9:87:16:59:ec:58:98:23:46:11:
da:e0:ea:6e:8e:d0:e5:0a:d4:67:4c:ab:3a:ba:ff:e0:d1:87:
0e:1b:93:ff:a3:40:bc:d4:36:02:29:a3:da:05:ab:56:f5:0a:
73:dc:b3:6d:64:03:a2:88:31:d7:23:24:39:b1:54:e2:89:cb:
9b:e7:c4:f3:a4:52:9b:5f:88:3f:68:0e:be:17:6a:08:0c:84:
08:1b:7e:41:76:c4:47:cf:01:dc:70:4f:f4:e8:60:96:3c:f6:
f0:8d:98:05:8d:68:4c:52:f5:c4:c9:0d:85:89:c7:ea:7a:3a:
fd:b3:b3:3f:cb:4a:d1:77:8a:2a:1f:b9:c1:e8:4c:26:2d:0d:
6d:5f:65:fc:05:17:32:1d:cb:95:a4:a8:4e:7f:a2:23:c7:6e:
1c:78:c9:4a:75:35:e9:3e:73:28:96:b4:25:45:51:9c:5e:bd:
ff:cf:da:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:38 2026 by rpki-client