Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: HezeGFieA6IapADobdZ9/BsN+HZmX7Y3KefYdeTZgh0=
Subject key identifier: EA:71:C1:3F:AA:05:8D:FC:97:A4:E8:7D:66:BC:18:01:1E:9D:78:3A
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 019F8F7EEBB86DA5C44A1DAD5FE2CA081829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 18B2
Signing time: Thu 23 Jul 2026 15:01:27 +0000
Manifest this update: Thu 23 Jul 2026 15:01:27 +0000
Manifest next update: Fri 24 Jul 2026 15:01:27 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: KcDUEaCPOF+hGtMfdbgybOdPV5g6ICQimTJOy/f1lmo=)
2: IxS3kvRzUMr-NtO3nifzXWWmSJk.roa (hash: qpDGvej7zkl86WzGIYhDDPadX2GYJjhi3gTeMhgBZQc=)
3: SFE5HwFeeJrezj4ibh1knL4-c9k.roa (hash: sbuJSFJ3P5x9iliJOK4C/RfPfo5sFVvKp2ueiDAMwxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:eb:b8:6d:a5:c4:4a:1d:ad:5f:e2:ca:08:18:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: Jul 23 15:01:27 2026 GMT
Not After : Jul 24 15:01:27 2026 GMT
Subject: CN=ea71c13faa058dfc97a4e87d66bc18011e9d783a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:d6:f9:d7:a2:36:2d:dc:55:e4:35:9c:d0:
40:85:1d:92:66:b9:de:41:0d:9c:a4:72:bd:54:3d:
b3:d2:73:c7:82:5c:89:36:f4:c0:39:d0:e5:c1:9f:
3c:57:1b:c1:88:46:cc:1b:c0:b7:53:d3:d7:9f:3c:
74:6a:52:5f:26:59:6e:26:cc:d0:ea:6c:ca:79:09:
6a:b9:0f:9c:7c:77:b3:33:14:6c:c8:08:73:52:7d:
97:77:8e:89:9b:08:11:e2:e8:a5:b2:c3:17:c7:81:
d3:e9:b8:57:87:5c:04:c2:77:32:72:26:2d:37:49:
41:82:ff:a1:3e:ed:5a:46:fb:2d:8e:b1:f3:2c:65:
67:09:4c:68:c5:b7:22:b3:1f:83:e4:68:d1:37:38:
04:f2:e5:7e:0d:b2:fe:64:a8:71:6c:9a:d4:38:c3:
c5:92:6f:3e:1d:76:22:53:39:a5:93:23:84:fb:9b:
7c:93:93:bf:a6:3f:7f:89:aa:36:1c:62:f4:47:88:
b0:03:50:18:ab:f2:6d:b6:78:cb:d6:f4:90:ce:e5:
ad:77:24:17:f0:ca:37:10:78:1c:2a:7d:9a:96:ac:
5b:0f:25:9a:fc:d6:18:06:60:a1:ea:79:15:3b:4b:
2c:35:fb:a3:b5:1d:41:9f:bd:28:89:a4:5a:a7:0a:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:71:C1:3F:AA:05:8D:FC:97:A4:E8:7D:66:BC:18:01:1E:9D:78:3A
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:68:73:e5:93:51:b3:0f:bf:d4:60:34:c9:cf:d8:97:d6:ff:
d8:68:4e:14:10:c0:75:10:63:90:19:f7:25:7a:57:69:11:97:
7c:50:08:1d:66:4e:48:6d:37:5e:c4:43:da:b7:60:89:71:4e:
d5:6c:2b:58:27:47:b4:2d:d2:22:c2:62:e7:b9:66:79:a6:ad:
c6:a5:ad:4d:59:61:e1:89:60:42:c0:c4:c5:27:5f:ba:6a:c6:
7a:2e:67:5c:b6:e8:09:29:6e:7f:c6:1a:8a:48:56:4b:bc:23:
83:57:e1:38:3f:35:73:2f:82:f3:44:11:c8:64:29:f2:8e:7b:
2b:eb:62:7a:40:4b:f8:3d:8a:65:12:cf:7f:b6:b3:01:ab:b9:
eb:8e:7f:de:6d:2d:33:89:86:ff:8f:55:d4:7b:bf:98:63:20:
6b:7c:9b:87:8b:b9:75:71:3f:00:ef:f5:c2:09:cb:f3:ac:05:
f1:5c:b5:4d:26:ba:c5:04:d1:92:0f:de:a5:bf:27:29:cf:82:
51:07:fe:1a:61:7f:15:c9:fe:88:d4:83:2c:7e:55:5c:24:c2:
94:b2:ca:1d:66:3a:04:b0:83:a9:1b:b0:9f:c6:e8:1c:a3:9c:
79:16:7d:f8:ab:ba:6a:59:0d:8c:36:df:bc:40:1a:f3:f2:1b:
a5:45:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:27 2026 by rpki-client