Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: /WioGaaeUfWrMdu9wgcIGD4lGjCFV8APkkRGh21F0aI=
Subject key identifier: 38:BD:FB:6F:26:9B:C5:EF:F0:FF:82:F5:78:ED:60:8A:1F:1C:B5:DF
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 019F8FB527FB9B07D7D120D5F703B65CB909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 06BC
Signing time: Thu 23 Jul 2026 16:00:41 +0000
Manifest this update: Thu 23 Jul 2026 16:00:41 +0000
Manifest next update: Fri 24 Jul 2026 16:00:41 +0000
Files and hashes: 1: NwXP9XjEV_tAQNFwDQBmSN78alU.roa (hash: I0Ts9gFxat3bJUV/IHoujUultkWM8WN3TtuoR0WHIVg=)
2: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: 19vneBzWZIHfb+OCoFysycbyD+cgzhzHzLwTPZsoRgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:27:fb:9b:07:d7:d1:20:d5:f7:03:b6:5c:b9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: Jul 23 16:00:41 2026 GMT
Not After : Jul 24 16:00:41 2026 GMT
Subject: CN=38bdfb6f269bc5eff0ff82f578ed608a1f1cb5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:27:3f:29:e0:02:31:d0:2f:a9:8d:2e:19:3f:
94:93:2d:82:0c:f3:27:d2:11:65:a7:82:0a:c9:8e:
a7:fe:01:de:76:f4:0c:63:f4:04:90:3c:8c:c4:38:
d7:cb:39:8d:c3:96:25:90:3c:a3:4c:73:f9:c8:16:
c3:0b:28:ac:26:e2:11:47:10:ed:ca:27:16:3b:31:
57:80:04:35:32:18:62:92:e2:8a:56:be:f3:09:a0:
21:68:75:0e:22:39:d5:de:a2:1b:a4:d1:d3:0e:09:
47:b4:ee:0a:33:12:4f:a7:92:b8:8b:79:ef:73:a8:
51:49:f2:1b:ef:5a:72:3b:da:f8:f2:72:ec:53:d7:
44:8a:d4:bd:e9:a8:10:40:f5:88:0d:02:3c:a4:d4:
40:75:9b:56:d5:7f:bc:bd:76:39:ec:88:9e:41:e8:
36:98:8d:ce:c6:1d:eb:54:aa:02:c9:2e:47:9a:40:
70:ed:9c:fc:ed:ab:86:13:f4:fc:69:9c:5e:fc:f5:
a4:98:5b:f3:a1:14:1c:e6:47:7d:9f:61:1d:35:fa:
73:ea:f0:f8:01:c8:3a:5e:2c:67:0a:39:5d:5e:7a:
91:c9:e6:3c:df:b9:e7:ea:fa:d8:a0:59:9b:43:be:
1f:2f:65:5b:97:d3:52:a5:c8:55:dd:1e:a8:cc:ea:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BD:FB:6F:26:9B:C5:EF:F0:FF:82:F5:78:ED:60:8A:1F:1C:B5:DF
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5d:ac:dd:d3:6e:e4:01:fe:b1:48:48:a4:f6:31:28:59:f0:
9e:e0:98:23:71:d0:ee:75:89:08:2e:48:38:4f:26:f5:18:c1:
7f:d8:45:93:bc:64:40:39:95:08:a8:a6:95:e2:cf:7a:ad:59:
36:7c:93:33:1b:ee:91:be:01:6d:40:85:f5:07:b3:01:fa:30:
6e:0c:84:ac:1c:c2:b6:f2:4d:9a:ba:d2:49:6b:ef:55:ed:d0:
6d:da:f1:14:59:42:65:72:ea:2e:8a:13:20:bf:5a:1c:5d:13:
fb:5a:b4:4d:b6:18:ee:59:a0:91:74:17:44:f0:d6:36:60:74:
36:8d:46:9a:bf:35:51:6d:36:e8:0e:07:4c:c9:70:9f:cf:3a:
da:1c:8d:3b:03:17:8e:0e:d9:99:05:8c:3b:cb:34:61:fa:45:
39:d5:37:1b:06:61:ac:7a:2d:e5:f6:98:09:75:b5:28:84:35:
70:6e:36:df:16:2a:15:06:80:15:01:9b:f1:60:18:1c:88:52:
ec:25:77:72:fa:dd:7a:69:35:9c:c1:79:c5:2d:df:10:f4:24:
1f:8c:d7:d9:05:37:d1:89:8c:c3:0b:2d:d7:44:4d:fb:2a:be:
96:f9:a2:38:83:f5:6e:13:5b:c9:1f:cc:c0:4d:42:b2:08:b9:
eb:54:be:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:20:32 2026 by rpki-client