Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
File: 8AI84rpaHU_QpeIn3nTLxB0rucg.mft (raw, json)
Hash identifier: 7rvk04TNlKWvoQL9baX30K42EDVei+T6yS+USrG8kjE=
Subject key identifier: 67:16:89:6D:8F:52:3D:DD:9D:D5:5B:58:ED:8B:6B:24:48:FD:96:9D
Authority key identifier: F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
Certificate issuer: /CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Certificate serial: 019F9059EEA8E66EE0520419F70532C42A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
Manifest number: 1711
Signing time: Thu 23 Jul 2026 19:00:40 +0000
Manifest this update: Thu 23 Jul 2026 19:00:40 +0000
Manifest next update: Fri 24 Jul 2026 19:00:40 +0000
Files and hashes: 1: 8AI84rpaHU_QpeIn3nTLxB0rucg.crl (hash: /KPQaR/hvZKc/G4woncwSAvFfkUfJpP2Uey/dimpnAU=)
2: w2Ta-rPPbmIQNKq-ipxVWX-8dg4.roa (hash: gcIiCCsS3PcYcJA4aDFua+5XE66yaXHV16D0VY59VUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:ee:a8:e6:6e:e0:52:04:19:f7:05:32:c4:2a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Validity
Not Before: Jul 23 19:00:40 2026 GMT
Not After : Jul 24 19:00:40 2026 GMT
Subject: CN=6716896d8f523ddd9dd55b58ed8b6b2448fd969d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:af:b2:cb:08:0b:79:e0:e8:df:56:ab:15:
f8:6a:24:31:10:8e:a5:fa:66:32:9b:30:ca:b6:48:
4e:4c:1a:3b:3f:7f:a3:b2:99:43:c3:50:43:59:b9:
89:99:d8:ef:9e:52:d4:b6:b8:5b:40:75:33:21:a2:
11:10:81:51:50:5b:95:c6:78:69:11:f2:21:27:9b:
03:fb:01:41:01:79:09:4a:a5:b8:ee:e6:f4:ee:af:
e0:3a:8e:e6:55:d6:3f:4a:2d:a2:3e:ee:e8:a3:01:
1c:4e:20:3f:6e:80:6d:87:44:65:17:7b:e1:24:b2:
c4:7c:04:e4:d4:1b:3b:db:5f:ef:4a:32:c3:7f:1c:
3b:9a:30:2c:07:56:dc:78:bc:a9:47:83:b7:1a:50:
62:0c:60:69:a3:38:57:56:23:70:c0:18:bb:01:3e:
7e:61:78:72:b3:d0:5b:25:1a:a9:40:fd:87:bb:0f:
5f:93:bb:dc:62:6e:bf:09:59:53:03:cc:75:bb:8a:
8f:8e:d1:90:f3:31:85:e2:22:fd:b3:82:e6:11:0a:
cd:c9:31:80:60:25:f1:2e:d7:e0:5d:78:0c:d3:6f:
46:07:e6:32:df:a6:bd:0b:56:68:f1:91:53:71:8d:
bb:9d:fe:18:ff:ca:10:52:7f:0c:7d:7f:dc:39:0d:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:16:89:6D:8F:52:3D:DD:9D:D5:5B:58:ED:8B:6B:24:48:FD:96:9D
X509v3 Authority Key Identifier:
keyid:F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1f:57:2f:d4:69:6a:2e:3c:d5:cf:05:c9:74:6c:7c:03:b8:
09:11:8a:29:dd:f1:27:07:9d:b4:c8:26:f3:76:54:b4:45:8e:
bd:18:ad:83:e1:1f:98:15:dd:41:84:85:ce:2e:e6:6f:d0:c6:
96:00:05:12:e6:ff:71:0f:04:6a:68:86:e4:87:b3:e1:b2:1d:
de:cb:f5:de:32:dc:75:31:db:9a:ca:cd:09:45:24:83:55:d6:
57:54:ba:68:bc:cb:44:43:d7:49:99:c8:70:69:cf:74:cd:1d:
81:36:e9:c3:c0:6b:e1:3d:fe:48:c2:6e:dd:1c:4e:c5:df:83:
c4:8c:eb:5d:e1:0f:26:90:36:44:f3:bd:96:78:4c:1f:e4:57:
6c:57:bc:37:f1:0c:69:15:b5:bd:01:6b:e6:a0:35:83:48:08:
54:29:fe:d6:49:93:d0:9c:aa:4a:23:67:6b:aa:e7:79:20:8f:
da:06:0d:04:b4:01:ef:63:c9:fc:0f:03:49:48:d6:ab:2a:ef:
d4:df:a9:df:7c:35:20:6f:98:51:71:fd:8f:37:6f:d1:2f:45:
be:93:66:63:ab:49:86:61:1d:be:1e:5b:06:e9:55:4d:74:e3:
2e:5c:bb:74:e4:51:9b:6c:6d:23:f7:3a:e0:ab:e8:ae:ff:51:
9b:ac:da:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:47:35 2026 by rpki-client