Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: Ajr3fzeY/ebTW2738EfzWc31sCEqTx0idHJf1f+/42s=
Subject key identifier: 64:88:55:4A:5F:8D:7F:8B:F5:A5:A1:9B:16:C1:D1:20:05:41:D6:30
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 019F90910D95743FC67CFC634C180247F280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 20:00:52 +0000
Manifest this update: Thu 23 Jul 2026 20:00:52 +0000
Manifest next update: Fri 24 Jul 2026 20:00:52 +0000
Files and hashes: 1: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: 8WpkWUMI6DgqvMZXy2fwcsNn28WFIeVscePjzljbTm4=)
2: Rm3DWdCGv6N3AGtlgwwUaBhNvo8.roa (hash: mKMA8v5enBshub8zpH+FWCvpU25kENVUShbbazleOWE=)
3: U_rat5lH-1OBTjZW3Kpv35l2bnY.roa (hash: RWS/4jTw+B9QckGKnUwmlAnGx+MDkdaAdkO4bYQ9r8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:0d:95:74:3f:c6:7c:fc:63:4c:18:02:47:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Jul 23 20:00:52 2026 GMT
Not After : Jul 24 20:00:52 2026 GMT
Subject: CN=6488554a5f8d7f8bf5a5a19b16c1d1200541d630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3a:43:38:ea:26:03:52:f8:97:39:3a:86:cc:
e1:4b:e9:54:66:c8:a9:cb:ef:46:1b:db:d7:08:92:
94:77:cb:ff:f8:76:eb:4a:81:bf:8f:f5:7e:d1:7e:
c5:2f:6c:61:e8:b5:4d:d4:39:f7:a2:74:d1:de:0f:
11:df:9e:98:b6:eb:27:fa:f3:a5:a4:93:71:87:f9:
51:b0:0f:a8:5d:6f:21:02:18:a8:db:97:05:35:a6:
80:b7:cd:40:bc:df:06:ba:fc:88:33:75:74:8f:c2:
1d:3e:02:ce:e3:bd:3b:cd:4f:54:d1:d2:cd:c3:5d:
65:e4:d8:44:e2:21:24:40:f4:4b:eb:46:0a:1d:65:
6d:43:de:de:ca:5d:ee:62:4c:c8:04:f0:2a:51:d9:
19:69:45:89:a1:61:b7:bc:55:7b:a6:12:d9:13:df:
1f:25:4d:76:ba:7e:c7:68:ad:4b:d0:bf:91:47:0c:
f6:66:de:36:d9:88:91:65:55:29:21:31:bc:ae:6c:
00:4a:68:a8:24:1e:c1:b9:78:d6:a4:65:3d:07:73:
55:e5:37:5d:6a:55:2c:3d:12:2a:ce:2a:74:f0:1b:
e1:b3:b5:bc:54:00:ba:98:7c:29:5e:d9:e7:a8:10:
6c:ac:bc:b2:45:8c:ad:2e:7b:3b:d0:fb:d5:af:98:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:88:55:4A:5F:8D:7F:8B:F5:A5:A1:9B:16:C1:D1:20:05:41:D6:30
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:44:ce:96:26:90:ff:96:59:2e:a5:ee:9e:4c:a3:3e:b7:bb:
7b:bb:4d:44:5c:94:3d:ef:de:80:a3:cc:7e:46:96:90:dc:c1:
db:1b:95:24:5b:b8:cc:89:6f:31:54:1b:c7:3d:e4:b0:f5:4b:
2b:29:57:1d:fc:9c:9f:2a:c4:29:be:e1:cf:a9:7b:e4:28:05:
8f:d7:73:09:31:54:1f:8a:b8:57:bd:6f:e3:60:d1:86:0e:d6:
23:81:3e:4e:40:0c:ed:f9:64:c2:df:72:b2:3f:f4:ef:62:fa:
22:39:54:64:81:0f:bc:ee:c3:96:66:ca:a7:9d:ae:68:07:08:
fb:bd:ae:1d:19:53:25:f3:23:6c:ed:49:3d:e8:84:3c:7a:ed:
b3:fb:4a:52:df:54:67:63:c3:cf:58:77:3c:98:ff:55:a8:ec:
f0:47:66:f6:1d:b8:32:15:85:69:b9:72:e3:4a:5c:09:eb:e3:
8c:53:97:a0:95:4e:67:c4:00:7b:0d:ce:d3:7c:12:48:36:6d:
5b:63:9a:c1:e9:72:0f:b6:54:c3:27:7c:21:50:dd:5b:4f:a5:
af:84:0d:a7:82:b8:f5:07:33:5e:cf:ad:f6:02:fd:aa:48:55:
c8:95:2b:78:90:e4:e5:39:ca:02:3d:0a:ca:f1:11:66:13:95:
d9:04:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:35 2026 by rpki-client