Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json)
Hash identifier: d4h6PQAcvI/Wh3UHeLNrfMC9G+Wa/8D0VROgMsFAVeU=
Subject key identifier: 7C:F1:6C:64:40:DD:66:7F:1F:93:6F:2C:7C:BA:1E:E9:0B:01:05:89
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial: 019F95B735B898D07202598FC9EC0019FC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 20:00:39 +0000
Manifest this update: Fri 24 Jul 2026 20:00:39 +0000
Manifest next update: Sat 25 Jul 2026 20:00:39 +0000
Files and hashes: 1: J2vsYiO_j7zPiKzW4JGDK-XoS3M.roa (hash: CDGBFZZXjqUOo82TFc4xaYNNSk3nq1xi7rB9+MvdQeA=)
2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: 1lTn6SYGidecXVKYBeRMrxgskqgqj6W7wvy4GcnEj7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:35:b8:98:d0:72:02:59:8f:c9:ec:00:19:fc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Validity
Not Before: Jul 24 20:00:39 2026 GMT
Not After : Jul 25 20:00:39 2026 GMT
Subject: CN=7cf16c6440dd667f1f936f2c7cba1ee90b010589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:b5:ce:92:18:2b:75:9d:10:eb:98:70:ca:
2b:62:ad:48:c2:06:19:53:70:35:4a:15:c4:e1:8a:
ce:cf:38:12:34:e4:75:cb:5a:31:e5:45:7d:fb:d6:
3f:53:db:58:d5:e2:f4:2b:8e:aa:66:66:3a:71:87:
94:94:29:e3:ea:d1:46:54:1f:50:fe:a6:9e:2f:41:
f1:e4:42:e8:13:2d:c0:5d:14:c2:15:27:01:79:7f:
6b:90:4b:11:08:22:8d:f9:49:e8:8c:45:3d:28:8c:
a8:7f:77:0f:18:ee:0c:93:cf:8d:93:40:49:4e:21:
be:10:75:b3:3b:b1:01:44:57:2e:f1:8f:31:eb:5b:
b4:01:f8:1a:0c:16:ee:57:76:cf:12:67:30:c7:45:
ca:cf:ce:f1:cd:02:0a:a6:41:63:bc:58:8d:ba:28:
d7:b0:28:9c:68:55:f2:ff:cf:dc:8a:a4:df:e4:cc:
22:2a:7b:58:6e:b2:6e:8f:f6:8a:43:e5:e0:1f:47:
32:d9:33:ba:55:d4:21:fb:41:a7:56:7d:06:a6:b8:
89:c9:a6:53:d5:fe:06:be:5b:ca:df:00:8b:85:bf:
96:66:9f:d1:f9:12:5d:b2:a1:8d:02:86:c6:f8:04:
73:99:13:27:86:35:3b:8f:69:2b:ab:ed:a9:24:9b:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F1:6C:64:40:DD:66:7F:1F:93:6F:2C:7C:BA:1E:E9:0B:01:05:89
X509v3 Authority Key Identifier:
keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f1:67:0b:9c:b9:bc:6b:fc:0a:6e:c1:54:2a:4f:a4:e6:e5:
8f:a5:63:8e:ce:df:13:22:e2:6e:37:2b:e5:b0:aa:95:1f:5b:
a0:b1:3b:f8:e3:8f:78:3b:8a:36:96:b6:26:68:0f:08:d2:6d:
3a:31:28:c3:02:a8:82:4a:50:3e:60:46:9e:27:ce:47:ea:9b:
56:fd:cb:90:b1:90:14:fb:a3:f8:06:59:00:2a:b0:72:8e:37:
c8:48:7c:33:15:8a:a1:ca:11:c5:9f:f2:51:df:ab:9b:13:af:
d1:24:da:ad:a7:14:7d:fe:c2:23:d7:18:52:5c:f6:c7:d7:0a:
5d:76:31:cb:b1:69:70:df:52:9e:da:07:3b:54:dc:9f:e7:cf:
bb:68:c9:a8:f0:dd:3a:e2:3e:a9:f5:3e:3f:2f:b3:5b:6f:00:
12:a6:be:ff:51:4a:d0:bb:28:5b:fe:cc:25:bf:3b:87:99:7e:
03:49:af:34:80:fd:a3:9b:36:cb:e4:a6:7d:3c:03:b4:73:aa:
f0:bb:67:38:ec:6d:8f:87:f0:ec:73:b5:9d:03:78:10:fa:4a:
67:d9:86:0d:aa:66:3e:66:7a:e8:6b:57:57:e0:ce:8c:c7:e3:
48:15:0b:50:2b:a0:7b:65:b5:a7:fd:ff:e8:d7:14:28:02:45:
d4:0a:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:13 2026 by rpki-client