Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
File: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft (raw, json)
Hash identifier: 7bm7QC0L1kXrhVo2Dk5xHmUNicslVW8kKJtUKgEG/hQ=
Subject key identifier: 7F:F8:FD:BB:DE:16:43:10:44:B9:46:BD:82:35:39:B0:1C:28:22:2C
Authority key identifier: F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
Certificate issuer: /CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Certificate serial: 019F8F7DE1ECA3AAA9A5A390E06B9056706D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
Manifest number: 0EA5
Signing time: Thu 23 Jul 2026 15:00:19 +0000
Manifest this update: Thu 23 Jul 2026 15:00:19 +0000
Manifest next update: Fri 24 Jul 2026 15:00:19 +0000
Files and hashes: 1: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl (hash: o4pGDYaY5JueqsLWJktUJyPqJcNVu3GHrzD2YwmpMw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:e1:ec:a3:aa:a9:a5:a3:90:e0:6b:90:56:70:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Validity
Not Before: Jul 23 15:00:19 2026 GMT
Not After : Jul 24 15:00:19 2026 GMT
Subject: CN=7ff8fdbbde16431044b946bd823539b01c28222c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:84:c1:d9:b4:d8:b2:f0:2b:9e:28:2e:95:
04:ec:99:40:45:ff:d0:6d:68:34:ee:c0:87:55:2f:
e2:a0:b3:b6:ca:6e:a6:2f:e9:4a:1f:b6:10:f6:8c:
ac:ad:7e:db:2c:7b:f5:d8:f8:0b:93:69:fd:cd:0d:
10:ac:a4:3d:8e:80:49:24:49:85:22:b9:cd:cf:a8:
f2:46:1c:ff:0b:06:15:bb:06:d7:f7:28:ba:32:a0:
e7:1c:73:3e:b7:61:96:ea:c7:57:04:04:11:15:6c:
56:eb:4f:cf:4c:3b:28:88:1c:4d:49:56:db:34:0c:
da:bf:8a:55:90:35:b0:b8:6b:68:2d:b1:d7:61:c8:
3a:f5:5b:9b:2f:98:db:1f:61:bb:3b:3d:e3:87:20:
90:b1:8e:dd:0d:9e:95:6a:ee:eb:4a:fe:34:66:03:
79:5d:0d:60:b8:f2:5a:54:10:d1:e3:b0:06:9e:dd:
d9:e4:67:20:52:87:c2:1d:cb:38:99:98:96:11:ee:
44:e5:21:c1:88:8e:62:bb:47:13:3c:d3:49:0f:1f:
47:7c:c3:af:21:4b:f4:5f:7b:08:5d:85:02:dc:3b:
4f:9f:f1:72:d9:59:09:31:bd:63:0d:03:4f:09:75:
b3:94:e2:71:dd:95:6b:38:ca:72:6d:18:2a:56:4b:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F8:FD:BB:DE:16:43:10:44:B9:46:BD:82:35:39:B0:1C:28:22:2C
X509v3 Authority Key Identifier:
keyid:F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:38:31:98:5e:af:0f:24:13:74:5e:2a:b7:e2:86:58:7c:c9:
92:50:fc:69:fd:9c:d7:f7:cc:85:90:30:31:32:87:f6:67:aa:
b8:76:60:0b:27:f2:b2:d8:8b:23:ad:57:6d:d2:b4:57:ca:29:
d6:86:fe:38:61:bd:88:c6:03:27:9f:1d:95:85:ef:0e:b6:d1:
c9:af:b0:86:83:e6:ee:19:df:bf:50:17:1c:7d:fa:d3:50:90:
83:e8:d7:b7:ce:9b:57:ed:37:44:34:c3:58:72:48:13:18:1c:
36:7c:82:bb:53:d6:03:34:3f:48:aa:cc:61:5b:8b:d7:f6:26:
62:11:f0:8c:aa:21:ba:f6:56:ee:48:4f:6a:fa:5e:0d:16:bb:
56:35:a8:3b:58:8f:90:52:7b:cb:d0:42:8a:fe:03:5c:dc:3d:
68:09:19:67:67:6e:56:ca:02:45:89:65:d6:5c:f8:80:84:27:
be:e9:6c:a7:ae:43:bc:85:30:44:70:41:d4:18:fb:d4:ba:0a:
d1:59:3d:82:71:6f:61:0c:48:74:37:25:24:be:89:b3:3e:47:
82:ba:16:45:18:66:00:93:22:99:78:9a:74:b4:12:29:61:94:
f4:c5:6b:03:50:4c:e3:59:48:0c:cf:fb:4b:f7:e0:ed:e5:36:
2c:5f:da:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:59 2026 by rpki-client