Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
File: 8R8omgChsRW386TRuAEb-Q0aL3I.mft (raw, json)
Hash identifier: mWcRhWwE1Tx3m+J9QqaOZvhkEszIgF0d/Fat+EZyw1Q=
Subject key identifier: 22:26:FB:36:C0:42:D8:98:41:9A:F2:AC:D1:74:B4:DE:A7:DB:6B:54
Authority key identifier: F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
Certificate issuer: /CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Certificate serial: 019F91A3CEDC45F703B0223A71E699CDD88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
Manifest number: 0D96
Signing time: Fri 24 Jul 2026 01:00:59 +0000
Manifest this update: Fri 24 Jul 2026 01:00:59 +0000
Manifest next update: Sat 25 Jul 2026 01:00:59 +0000
Files and hashes: 1: 8R8omgChsRW386TRuAEb-Q0aL3I.crl (hash: Y095xwE1SuSmlStHQlQxfvossbd9UgHuHW4VRNh9fpI=)
2: n0kXXQBuQDCSgjPwmN3Gr_8c6qI.roa (hash: yccqhpLjnyFJP4HXHx8COGOAuzdsePkEiMVFsxk8r48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:ce:dc:45:f7:03:b0:22:3a:71:e6:99:cd:d8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Validity
Not Before: Jul 24 01:00:59 2026 GMT
Not After : Jul 25 01:00:59 2026 GMT
Subject: CN=2226fb36c042d898419af2acd174b4dea7db6b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:04:34:8b:23:69:3b:4e:61:a8:cc:de:a7:c5:
d3:96:8b:22:a5:0b:5e:13:04:e1:8d:41:b6:3d:cf:
56:86:cb:a9:c5:fc:20:1d:b4:bc:50:7a:ef:1d:d4:
32:19:7a:06:82:dc:8a:7e:b7:d4:56:45:c1:5b:e1:
0e:53:05:c9:9d:68:7f:f6:b6:c6:d1:a1:a9:64:7a:
65:5b:53:a0:db:7f:ad:20:61:c1:3c:a4:5c:4c:ca:
9b:7c:f1:31:d8:a7:a3:1f:ff:16:52:2b:cb:38:c3:
57:28:2d:9a:ff:a4:56:3e:29:56:ef:14:5b:62:1b:
1d:3d:3e:37:ca:cb:8c:f9:74:59:7d:df:c4:05:33:
e5:03:15:f7:71:70:73:13:a7:2b:6c:87:e6:57:b8:
04:14:bc:94:f1:75:7a:b7:d6:e7:28:74:5c:14:48:
0f:18:d1:1c:86:a5:cc:75:14:42:1e:f3:ba:ea:bc:
af:37:63:45:c9:6d:35:ac:cf:a5:84:ae:c5:75:6a:
94:3f:5b:ac:53:f0:3b:dd:07:55:06:d6:2b:f0:3e:
d8:36:f1:d0:19:70:b5:07:8e:f4:60:21:06:81:ca:
89:34:34:5e:bf:3e:e1:a3:65:69:eb:20:f2:81:a3:
f4:96:b3:d0:77:b6:a3:f5:d5:03:3f:fd:c5:91:7c:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:26:FB:36:C0:42:D8:98:41:9A:F2:AC:D1:74:B4:DE:A7:DB:6B:54
X509v3 Authority Key Identifier:
keyid:F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:41:3d:1c:16:04:02:22:9c:5c:34:96:7b:09:ff:6f:e1:0d:
36:86:8e:61:86:7b:67:c6:39:eb:4c:48:59:5e:56:36:ff:79:
5b:81:a5:be:42:25:c5:8b:db:bf:01:58:74:d8:4d:e8:cd:9a:
8b:ee:ff:b6:56:52:74:9d:5a:ff:f8:8c:5b:5a:18:3b:4e:d5:
c8:1e:59:a0:89:95:53:98:eb:ff:0a:8a:a2:70:cd:fe:d9:ba:
84:c2:36:d1:94:09:78:e2:cf:a3:ca:61:1c:38:94:91:08:2e:
68:87:a0:79:d3:c8:f1:f5:3a:cc:fd:05:b0:64:05:83:1b:69:
26:72:7e:f2:5c:fa:50:16:40:dd:c7:03:94:c5:20:fc:8a:ef:
f5:a7:46:70:32:1d:17:11:73:cb:fd:64:d2:07:38:2c:c8:3b:
c5:00:95:ea:aa:7f:2d:44:87:7e:3b:c7:e3:71:1c:5a:2a:0a:
6f:be:bf:42:3b:59:0f:a0:06:98:19:d5:38:11:80:b3:f3:f2:
d3:c1:6b:74:9d:bd:94:0e:2d:5a:90:9e:ca:27:94:fe:1f:38:
05:4f:c9:14:de:d9:38:fc:30:7e:7d:56:60:43:0f:b6:cf:69:
77:23:ce:4b:11:06:bd:04:e9:cd:d6:b7:e8:50:e6:c5:01:ef:
ff:e9:ed:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:57 2026 by rpki-client