Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: +4r5IgTG+cVjRJECibpC6YUwv60OENNwjZow4xvge/4=
Subject key identifier: DA:9E:4A:E6:C4:96:99:67:7C:31:88:3F:5D:9D:1B:10:14:69:3D:8A
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 019F92484DAF63B2D917A6C3C168A832BB63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 0622
Signing time: Fri 24 Jul 2026 04:00:39 +0000
Manifest this update: Fri 24 Jul 2026 04:00:39 +0000
Manifest next update: Sat 25 Jul 2026 04:00:39 +0000
Files and hashes: 1: UXWpgGFDnRE9Qd9B2_kQeDANeEU.roa (hash: 4rUA5GWn/3ql2gbHZLTVs1SZ20Xz3g2AjgFXRxPtMJw=)
2: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: qYY4isIAT08ho+SSJbvUlV3zZ2y/1Upq6IgOIkIjZ+Q=)
3: kkmKgi6g6HFL37DCnaadKvfK-YA.roa (hash: yjFJ1aHJiDzMEJQJojyjv8H/6rRO5DIEZ/IoW8c9H7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:4d:af:63:b2:d9:17:a6:c3:c1:68:a8:32:bb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Jul 24 04:00:39 2026 GMT
Not After : Jul 25 04:00:39 2026 GMT
Subject: CN=da9e4ae6c49699677c31883f5d9d1b1014693d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ab:8a:00:99:fa:b3:c3:c3:71:35:d3:dd:3d:
ab:de:95:44:62:53:a9:10:c7:32:0c:7e:20:7a:32:
86:b8:04:21:6c:55:13:71:b9:cd:fa:85:59:29:59:
87:e2:37:bc:e9:2e:6d:5a:48:2e:ad:17:30:55:8e:
70:be:95:56:b6:f5:eb:2e:05:d0:9c:0b:00:b5:ed:
7b:84:07:5c:1b:2f:d4:83:52:a3:e7:5c:a1:a9:08:
f3:f9:20:f4:f0:3f:86:a2:50:d2:df:01:ff:5a:5f:
60:c4:69:d6:30:c1:77:5d:d6:77:b4:0c:8b:ac:50:
1a:09:29:43:78:43:4b:10:86:3f:2f:26:90:59:0d:
81:ca:af:87:6f:e2:82:49:66:29:ae:28:28:d7:c5:
fd:35:d1:84:c2:55:80:2b:8e:42:91:99:e1:69:8b:
4f:96:e4:3b:d8:a0:33:e3:6f:13:05:5e:41:04:97:
74:cb:e6:db:1d:2f:9a:09:66:14:16:75:29:c4:5e:
ff:dd:f5:a3:3b:7f:19:a7:f1:d6:99:ce:5f:ab:15:
c7:34:99:3a:11:db:7c:a8:67:34:0f:cb:58:44:19:
8e:7e:1e:0e:de:55:41:62:a8:46:b8:aa:a7:c4:03:
b0:5e:e7:97:1e:dd:66:f3:e9:b4:12:b7:8b:28:41:
1f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9E:4A:E6:C4:96:99:67:7C:31:88:3F:5D:9D:1B:10:14:69:3D:8A
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:47:d3:ea:41:b5:8a:8a:cf:ef:86:00:e6:aa:2a:ef:63:ab:
41:b1:e2:ae:1d:4c:53:06:a8:7b:1a:13:78:70:f6:e9:1d:02:
09:7c:b2:f2:c1:70:82:25:08:39:1c:62:a0:fa:f2:52:21:ec:
17:34:2a:a7:60:e2:57:20:8d:c1:ef:98:28:d6:2f:fe:87:5b:
5a:ba:05:35:3c:10:e8:63:d0:a2:30:bc:3a:88:3c:92:c4:05:
2b:94:c0:8d:66:22:18:de:16:e9:82:88:33:c6:ef:6b:1f:34:
8e:38:b5:ca:22:2b:7b:fd:b8:99:3a:27:e8:5f:a0:cc:d4:26:
15:fd:53:60:6b:3f:80:de:b4:bc:74:ee:68:53:e2:54:fd:4b:
4f:ca:38:75:84:a1:d4:7b:e4:7e:da:48:6c:a4:41:12:11:8d:
97:f4:61:de:8b:8a:51:10:89:78:30:75:79:03:a1:b7:e6:38:
b8:22:56:f7:51:8a:c8:24:d0:c8:b0:90:f8:90:5e:40:cc:6c:
5d:34:b0:8c:91:e5:c8:8e:aa:b4:e5:45:dc:40:ec:ff:cc:f7:
63:15:24:e2:1f:de:2d:e6:b5:ca:bc:8f:81:27:50:0d:4f:7a:
8a:65:81:8a:25:07:d2:99:10:79:1e:f2:ed:41:e6:ee:1a:18:
fd:c5:57:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:10 2026 by rpki-client