Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: A9B9GRauON88yFYlvFVqBkg7WmA/UMBKcCeIMTiGfHk=
Subject key identifier: CE:8A:B2:09:A5:5B:5D:9B:55:28:EF:71:6E:9E:B3:11:A6:5C:1F:91
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 019F8EA2E41A87F0FB624FEF4C53C1F9E215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0FCC
Signing time: Thu 23 Jul 2026 11:01:07 +0000
Manifest this update: Thu 23 Jul 2026 11:01:07 +0000
Manifest next update: Fri 24 Jul 2026 11:01:07 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: zmcYo6IcgBSEWr8afFh/LVAYn9yqD9XXxLfq8YKe1lo=)
2: aW0GLfMs8RiqQkgroqb6Dpcu-TM.roa (hash: UsXuprIqiJrTmGsZFEzdkex7OcaYkNomgnQMK988aG0=)
3: x6466fQhbf0bvZhCEEjWRTSFjns.asa (hash: uPbZxtxNDUvoYFgrUv2BzHCtpuKoUHtdiB98m/GeDD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:e4:1a:87:f0:fb:62:4f:ef:4c:53:c1:f9:e2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Jul 23 11:01:07 2026 GMT
Not After : Jul 24 11:01:07 2026 GMT
Subject: CN=ce8ab209a55b5d9b5528ef716e9eb311a65c1f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:de:33:68:a5:b0:e8:8a:3d:75:b1:50:e4:
34:aa:a9:18:a2:fa:c7:38:6f:87:d0:58:71:f0:4e:
5e:55:8c:79:98:cd:1f:eb:7d:3a:88:b4:cb:39:20:
af:8b:ba:69:49:1d:9e:ae:7b:9a:f3:f1:fe:87:b3:
28:26:1d:0d:08:2c:e9:59:56:af:6f:58:3f:61:02:
f3:63:d0:13:ba:18:9e:c1:2f:78:8f:fa:b7:3d:f1:
67:20:be:e5:be:4c:b6:cf:95:49:26:00:58:41:c8:
06:0d:66:5a:e6:2a:49:6c:9d:c3:6d:77:26:c4:7c:
87:a6:bb:4a:d2:c6:02:4b:a5:34:20:ed:34:ed:83:
d9:6e:fe:88:83:0b:c7:ef:a4:22:79:31:3c:c2:e4:
c0:ad:76:82:50:93:c0:87:97:51:9d:0a:ef:50:c2:
d8:c8:08:52:7c:89:eb:f9:be:ce:df:f5:b7:55:94:
5b:23:3f:34:38:a8:5a:84:b6:c3:f3:bc:48:53:1f:
3c:46:76:0e:b1:24:f8:67:ee:1d:0a:d6:52:c5:02:
83:01:a4:54:fb:76:5a:2c:8d:9d:c5:43:f6:2f:d6:
57:e1:3c:a3:e9:dc:ca:f8:93:a8:48:88:68:0a:e4:
08:1d:13:51:19:c9:85:0a:c9:0d:5f:f8:b1:4b:cf:
d0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8A:B2:09:A5:5B:5D:9B:55:28:EF:71:6E:9E:B3:11:A6:5C:1F:91
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8f:b1:6e:27:3f:4b:74:34:6c:14:c4:0f:24:77:29:26:8e:
a3:d5:2e:42:d8:a5:af:97:f7:c0:3c:73:8b:e3:7c:c0:17:01:
4f:8c:ec:35:12:b0:db:a3:00:6a:ab:40:cd:f8:08:41:c1:7e:
b8:6b:13:1d:9f:62:60:75:45:40:fa:86:d3:31:64:d2:dd:13:
d1:98:5b:82:1d:ef:42:84:84:5c:43:d4:02:ae:b9:f8:fb:58:
1b:6c:50:70:8f:37:59:ed:2e:50:2a:28:82:d7:69:f8:5d:78:
52:bd:01:11:18:79:43:4c:ed:35:08:bb:f4:1c:d6:da:85:59:
33:2b:af:53:25:95:f7:1d:7d:82:7f:b9:1f:0f:0d:61:bc:e9:
17:c3:35:02:c6:df:c6:5f:61:59:1b:b4:39:bb:aa:b1:10:ec:
47:cc:f4:2d:e2:95:89:35:f4:d4:48:3b:5e:42:22:5c:84:5f:
59:9f:8e:5c:70:50:e5:55:7e:f4:c3:3d:47:eb:13:ab:53:a2:
33:33:2a:ea:ac:cf:95:3b:d7:43:b1:73:b2:cc:7f:3a:6a:01:
52:49:8c:85:86:04:6e:9b:b4:70:b2:f7:23:d4:07:ca:b9:f4:
02:4a:47:de:ec:ef:e6:9d:34:ac:7f:ea:ae:62:5c:f9:c1:3d:
cc:60:2b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:22 2026 by rpki-client