Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
File: 8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json)
Hash identifier: VhwQsQ2DU+0RE9rkVdRmFDlnvVO/IzIs5xK2Jppcfj0=
Subject key identifier: 8A:7F:0F:70:C1:C6:39:59:BA:04:79:E1:C7:6F:15:5D:62:8B:FB:15
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial: 019F902352BDAFA7D9909F0768F8E0D31558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
Manifest number: 0BD2
Signing time: Thu 23 Jul 2026 18:01:01 +0000
Manifest this update: Thu 23 Jul 2026 18:01:01 +0000
Manifest next update: Fri 24 Jul 2026 18:01:01 +0000
Files and hashes: 1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: CWrZhAyKyUBRsppKRNgK7bMxmDK1zD/fTceFUrPfUvQ=)
2: i2cZnlYGJSDWJ6GKJm4zBpOtiSE.roa (hash: yQNvuB3MUN74TcqegiLU8qLGixGGpPrYKgj9auUBTzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:52:bd:af:a7:d9:90:9f:07:68:f8:e0:d3:15:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Validity
Not Before: Jul 23 18:01:01 2026 GMT
Not After : Jul 24 18:01:01 2026 GMT
Subject: CN=8a7f0f70c1c63959ba0479e1c76f155d628bfb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:df:13:43:04:54:56:75:e6:16:85:67:9f:
d2:f6:a1:d8:23:41:0b:1c:89:93:55:b8:50:a1:1c:
39:7d:0b:a3:79:e9:d8:ff:f1:7c:95:12:34:a6:3f:
a1:8f:47:c2:72:27:10:2d:f5:e7:7f:f4:1e:91:47:
a4:03:33:04:32:87:5a:12:39:1f:3e:bb:8f:91:fd:
ee:94:7b:56:9a:d7:94:d2:8d:45:1e:28:f0:5c:7d:
f3:db:be:52:34:f2:84:b2:05:46:8e:c0:18:1b:b0:
3d:b3:8f:16:4e:24:ab:06:e5:5f:58:c8:92:80:82:
e7:5c:13:f7:95:b7:27:5d:e5:bd:ca:c1:fd:7c:65:
a5:9c:f1:34:0e:da:5f:e9:10:5b:22:6d:cc:23:cc:
f8:2c:3f:3c:bd:ed:a5:06:34:e0:95:b1:17:97:54:
8a:56:5c:78:63:bc:c6:ef:14:d8:51:4f:03:96:e4:
ec:ad:2f:0c:7f:6d:2b:4d:20:e1:3e:ef:a7:6e:2d:
e4:a5:b6:27:fa:3e:0f:3c:41:61:fb:5f:4a:62:1d:
2b:de:5a:f7:df:b5:29:d4:dd:98:27:1b:e9:be:c5:
46:14:4f:2c:fd:be:6e:54:49:88:4e:70:fc:10:ca:
41:c3:a4:49:8d:20:9e:dc:b7:69:30:6a:e2:53:4e:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7F:0F:70:C1:C6:39:59:BA:04:79:E1:C7:6F:15:5D:62:8B:FB:15
X509v3 Authority Key Identifier:
keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d5:14:c0:80:04:ce:48:86:eb:4d:e6:ce:34:08:5e:39:86:
0a:cf:a0:d6:ae:66:fb:0d:32:ad:9f:cd:d0:b4:a6:8b:90:64:
e8:ce:0b:52:f2:23:24:29:aa:38:5b:f3:7c:a9:b2:09:1d:7e:
06:20:31:b3:bf:79:b6:3b:20:8f:20:d5:fd:95:99:dc:70:fc:
9c:22:ad:15:10:1b:e3:c4:b3:79:04:98:e1:2c:16:fc:7a:da:
60:bd:b6:9b:ed:fd:e7:6f:30:65:43:fd:d5:91:07:ac:c9:79:
53:c9:45:35:5b:63:22:7b:01:30:a4:2f:93:f7:0c:4d:12:ed:
74:03:a2:7a:76:18:74:e7:20:09:11:dc:7f:1d:65:0b:33:44:
7d:6c:cb:71:a8:5f:ba:9a:29:8f:df:8f:40:44:27:b0:6b:96:
a2:e0:09:93:b9:d6:64:41:ae:5d:46:e3:b0:27:4e:8a:3f:38:
13:89:40:16:4a:85:53:06:b7:b9:a0:5c:88:db:18:38:2d:4e:
29:ff:9e:0a:30:17:7a:78:79:5e:20:fa:2e:5d:79:55:b7:c3:
19:95:ec:a7:1f:00:d2:7f:02:0e:38:2e:63:ef:ff:4b:98:7e:
50:2b:5e:f3:cb:09:0e:9c:f5:68:e0:22:cd:ec:b4:5c:79:53:
a4:31:46:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:15 2026 by rpki-client