Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
File: 8TM6Z1TACO27rF8y69AZ6mRzrqg.mft (raw, json)
Hash identifier: MvrdgkKju0tVAC7734S+rwnZXKTU2rYdwnYBWtb9ysA=
Subject key identifier: 02:20:A4:E7:81:9D:58:98:75:16:E8:B5:C8:46:42:EF:D7:2A:D0:34
Authority key identifier: F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
Certificate issuer: /CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Certificate serial: 019F8FB5644C305B16B1ADBB853D70BABA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
Manifest number: 123B
Signing time: Thu 23 Jul 2026 16:00:57 +0000
Manifest this update: Thu 23 Jul 2026 16:00:57 +0000
Manifest next update: Fri 24 Jul 2026 16:00:57 +0000
Files and hashes: 1: 6NYtEiibF-yousCSi6VFoyS3y1I.roa (hash: xGA3dOW6Az0OSEvmbCfoTjPs27cGbDj/TXvCGvlcPXg=)
2: 8TM6Z1TACO27rF8y69AZ6mRzrqg.crl (hash: tlTm7J+vOqrL7fAUKAxIKZjNk6yhhdsow98E1n+nnRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:64:4c:30:5b:16:b1:ad:bb:85:3d:70:ba:ba:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Validity
Not Before: Jul 23 16:00:57 2026 GMT
Not After : Jul 24 16:00:57 2026 GMT
Subject: CN=0220a4e7819d58987516e8b5c84642efd72ad034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:ff:2d:1d:38:b0:4b:18:60:d9:07:78:0b:
2f:dc:14:61:fb:8e:73:d6:38:68:99:de:db:31:12:
e3:46:f8:4b:11:44:7f:9d:57:61:a1:f4:50:dd:e0:
1d:b1:15:71:ce:b2:d0:af:47:cb:3f:f5:9a:f4:2c:
ff:93:92:b3:bd:89:a3:bc:de:2c:fd:95:81:ab:32:
d7:9d:1d:1d:19:7e:a4:be:4c:21:d3:63:73:a7:31:
b2:6c:a5:be:91:68:a3:a7:32:cb:12:48:d7:d7:13:
7a:4d:ed:17:f8:ae:cb:47:14:6d:9a:db:dd:77:5b:
f5:7d:43:9e:50:8d:01:e1:5b:e2:ac:65:ec:ff:1a:
e6:aa:6b:1c:cb:e4:2c:53:7f:7d:a3:83:52:d6:fb:
af:75:e2:a3:10:42:d8:fa:5b:30:bd:35:4f:b4:59:
41:cf:5b:49:9f:48:b5:b1:3f:89:d2:9b:32:22:dc:
a2:2c:4a:58:52:b7:43:0c:7c:0d:0f:38:7f:63:a4:
e0:ca:99:d6:ad:9d:e5:ec:6a:42:97:64:37:5e:ea:
8f:31:b8:1f:c2:b6:e0:c0:6b:90:d0:f7:d6:b6:b3:
3e:e0:1b:13:8a:9c:1c:fc:08:8b:d2:32:85:83:35:
11:0a:d2:e9:fa:9b:6f:9f:c6:3a:f0:e2:48:f4:3f:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:20:A4:E7:81:9D:58:98:75:16:E8:B5:C8:46:42:EF:D7:2A:D0:34
X509v3 Authority Key Identifier:
keyid:F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:75:e0:37:75:7f:31:00:74:32:5b:2c:6a:21:4c:ac:ab:1a:
07:4f:81:14:12:c3:37:c3:68:eb:9b:fc:d2:84:1a:0d:65:37:
46:e5:e8:f3:4a:7e:97:97:df:2a:ed:d3:48:b6:d1:82:01:80:
15:34:1d:ff:76:0a:c2:5a:b8:12:a7:f7:a9:1e:bd:49:80:6e:
f2:32:c9:d1:84:0e:4d:36:92:d6:f6:c5:36:79:de:c8:7c:53:
8f:c8:ab:8e:ad:9c:87:43:5d:48:cd:0d:e1:27:96:69:7e:c2:
ef:e6:cd:19:0f:4e:d1:68:5b:9d:2c:32:92:4e:eb:1f:10:f0:
e2:5e:f0:b3:a1:a7:49:a0:ae:85:f7:60:e9:fb:03:f9:d0:69:
f7:67:37:4d:eb:1d:54:15:7a:8b:e0:21:68:19:c5:e4:ca:bd:
ac:de:ed:27:c7:41:4b:09:b1:6f:98:27:55:d0:ee:46:76:ae:
10:4e:86:ac:b6:3e:55:9f:99:4c:e9:16:07:f5:9e:e6:30:3e:
05:ab:4c:3b:3e:2a:50:a1:c9:b5:46:a7:7e:6d:3a:01:5b:1a:
6c:a6:c2:7e:dc:00:7e:d8:52:11:19:61:e9:99:0e:2f:a5:4c:
41:09:55:01:c6:59:1b:b3:0e:9a:27:28:ea:f3:99:a1:29:36:
5f:7b:9c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:23 2026 by rpki-client