Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
File: 8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json)
Hash identifier: WYdzw5c1JL0J3pLwiOzxdUqlCcCKkpeFZaxB/PJir+4=
Subject key identifier: EA:9A:E8:6E:41:D7:81:AB:59:08:DF:16:DB:EE:FF:79:D6:A1:FF:8E
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial: 019F909173D158BEF356297ABCA1769725C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
Manifest number: 0A28
Signing time: Thu 23 Jul 2026 20:01:19 +0000
Manifest this update: Thu 23 Jul 2026 20:01:19 +0000
Manifest next update: Fri 24 Jul 2026 20:01:19 +0000
Files and hashes: 1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: NGbUcgDlAaqqyrJV6oQeUGTkAxqeDTX/oYyGJ6Servk=)
2: NSu3QEv-adix_Q5roohaGM-bpUY.roa (hash: VnW6Wcl5mZCO2kBW9kdAmVPadw5Gk+HyABLxpyWmKB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:73:d1:58:be:f3:56:29:7a:bc:a1:76:97:25:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Validity
Not Before: Jul 23 20:01:19 2026 GMT
Not After : Jul 24 20:01:19 2026 GMT
Subject: CN=ea9ae86e41d781ab5908df16dbeeff79d6a1ff8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:a0:45:be:10:9e:30:55:65:d0:19:30:ee:
c0:26:21:e9:14:3a:76:bb:eb:47:5e:2b:5b:f7:80:
29:07:e5:ae:f4:28:d2:8c:f0:da:a0:e7:3b:34:78:
2e:32:4b:a9:90:5b:f7:be:12:a2:94:45:0e:3c:42:
f8:95:d1:cb:84:db:1b:fd:ad:0f:ac:46:76:da:a6:
1f:31:18:68:c9:7f:63:71:ea:9f:5c:b9:bc:ac:d0:
44:37:7f:b8:71:21:a1:e1:e4:96:6f:0a:59:62:22:
7b:50:1f:09:bc:98:b4:69:f7:42:16:75:1b:4c:f7:
d3:6b:67:b6:37:7b:d4:3c:70:55:81:8a:16:0e:a0:
aa:29:3f:32:74:40:26:d0:e6:61:0c:83:ac:a5:7a:
10:dd:f4:09:62:17:a2:54:82:cf:13:12:9f:9b:d3:
18:91:5e:b5:56:a1:4a:1a:1a:58:84:e3:82:7e:99:
19:2f:25:a6:64:df:95:57:e1:81:f4:d2:55:dd:ab:
cc:9a:e0:25:b4:1e:4a:cf:46:78:98:4e:f0:a3:9b:
6f:8f:3c:fd:e4:14:e9:84:ce:d3:6d:65:b0:19:cd:
42:57:9e:dd:81:60:a2:62:18:a0:00:28:5a:bf:dc:
01:53:1c:95:36:91:10:f2:c7:5c:91:0c:0a:cc:97:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9A:E8:6E:41:D7:81:AB:59:08:DF:16:DB:EE:FF:79:D6:A1:FF:8E
X509v3 Authority Key Identifier:
keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f6:22:8f:53:8d:4a:7c:3e:99:8d:b6:7a:2f:a1:e2:5a:1a:
e6:af:cf:46:9a:56:28:94:68:98:62:61:5a:58:4f:26:75:9e:
b6:35:a6:f4:0b:13:5d:d5:5c:a4:44:36:9a:2a:0c:8e:0b:28:
df:62:aa:14:00:2b:de:85:2f:a8:ca:c6:34:4d:8c:67:44:69:
5e:36:72:57:3c:9e:0e:90:84:57:6a:9f:61:b6:4f:ef:12:7c:
4d:88:bb:bd:3c:91:82:a6:44:f1:e7:ba:a4:3f:b8:a2:c0:b3:
4a:b2:1f:a6:d5:bf:97:40:6c:0a:a7:13:58:db:9d:9d:18:ec:
ae:5a:c1:66:93:d4:4f:e0:7a:e8:a8:cb:3e:69:a6:3c:c7:b1:
7a:e9:7e:94:00:11:c6:4b:02:c2:6d:6b:d8:9f:15:a5:ca:49:
af:57:a1:9d:cf:10:57:8d:08:d7:bc:84:9f:e1:80:d2:82:5a:
0e:22:7e:1e:0a:e4:3b:11:c9:55:ec:50:24:dc:65:62:d5:0d:
7b:7f:a5:65:d3:48:d8:d6:52:02:7a:da:69:6a:a9:2f:16:a8:
27:fb:fe:cd:38:bc:07:2f:4a:54:ec:1e:3e:aa:8f:eb:4b:11:
8d:53:09:1f:4c:78:ad:63:db:11:c4:19:d4:5d:b7:98:1d:4a:
68:0e:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:38 2026 by rpki-client