Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: zjO5OegqGeT7MQRTPG8WnPM81Y0tihDUEOjVs7C55QQ=
Subject key identifier: 51:28:B5:74:AA:47:69:C2:C9:E3:68:2B:49:95:ED:0F:7D:85:45:54
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 019F9090F7412CF814D033A5BEB8161A7D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0E5C
Signing time: Thu 23 Jul 2026 20:00:47 +0000
Manifest this update: Thu 23 Jul 2026 20:00:47 +0000
Manifest next update: Fri 24 Jul 2026 20:00:47 +0000
Files and hashes: 1: 8X-vY96aKKHfj_txGbHwT7KRdWc.roa (hash: 0WIWIIW0b9953A6VR0CU69w8OMoDd9V6tcRbkVExZv4=)
2: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: FPBjnzJuDOQGJwdbT0qx9soMytcCDDXfq0AyyPWeOeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:f7:41:2c:f8:14:d0:33:a5:be:b8:16:1a:7d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Jul 23 20:00:47 2026 GMT
Not After : Jul 24 20:00:47 2026 GMT
Subject: CN=5128b574aa4769c2c9e3682b4995ed0f7d854554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:c4:f5:f0:11:40:42:e3:40:4c:04:75:ec:
c5:50:07:1b:3e:4d:8d:b1:1e:bf:15:a5:82:6c:34:
5d:31:00:48:34:57:01:64:dd:b6:d8:04:dd:97:f7:
38:80:87:b0:a1:ef:ee:46:21:6b:26:12:b5:fe:e2:
ca:5c:6c:a6:4b:7d:d2:b7:8f:ba:c1:5e:7f:6a:a4:
f6:b3:01:7f:4d:a0:cd:e4:2f:c5:25:b8:2f:3f:11:
1d:72:0e:e1:73:a4:f7:67:23:ae:f7:7e:6c:78:99:
f9:74:81:42:49:7a:a0:d5:e9:cc:90:a3:ca:9b:31:
0e:e4:c2:29:de:4f:59:f4:cf:84:84:da:a6:f9:06:
c4:b5:fa:51:1a:77:27:b2:57:72:54:bb:f6:21:55:
80:08:75:b9:2e:33:a8:e0:44:a9:c2:6e:68:fa:c0:
3d:de:9a:93:94:d2:af:54:d1:77:fb:05:1a:60:6b:
db:b6:e7:20:65:3e:39:5b:fd:e4:2d:5f:95:b5:b0:
05:bb:51:15:4e:f6:f6:09:ea:9d:54:ad:66:4d:38:
5b:97:b2:4d:ba:75:62:77:6e:71:9d:cc:88:af:85:
f5:3c:08:c3:b1:8c:c0:36:88:ad:79:33:62:da:76:
60:f8:6f:32:e4:a5:1a:f1:4b:94:67:ac:32:de:9d:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:B5:74:AA:47:69:C2:C9:E3:68:2B:49:95:ED:0F:7D:85:45:54
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:18:4f:6f:09:e3:83:94:55:5b:2f:74:a2:fe:31:7e:0d:fd:
44:4b:0b:06:b7:ca:de:c4:97:c3:5d:10:12:83:b6:e4:dc:cf:
56:3c:d9:ee:4d:12:78:70:a9:8d:de:26:18:a1:a4:30:ed:bc:
78:9a:9f:2f:ff:a5:b1:5f:ea:cd:e7:78:fc:2d:8e:ea:0d:8c:
c1:8a:21:2d:69:d9:6a:f2:8e:35:37:90:7e:2c:9f:86:2d:ee:
9e:77:50:61:10:f5:68:34:d7:c4:2c:2b:14:39:66:10:27:78:
0d:28:f7:2b:ef:75:35:32:a4:9f:7d:e0:b1:83:d5:39:f5:c0:
29:6b:ae:08:6b:26:34:b3:f6:cd:4a:75:ba:09:5c:1f:9d:1a:
ec:62:16:01:01:82:de:09:47:8e:21:06:c6:be:fc:3f:ed:ee:
16:5b:f1:7e:16:ce:06:99:90:64:5f:00:b5:e3:29:d0:52:27:
2c:80:5d:34:92:b0:ec:9e:cd:d9:cb:73:ce:67:e2:c5:90:f4:
c7:38:91:9b:7b:9b:cc:33:cc:41:e7:b4:d1:ae:37:b0:08:ef:
8f:79:5d:d5:a5:35:cf:12:a5:59:c0:48:4f:86:94:60:a9:83:
ac:95:3a:c6:4e:43:36:30:bd:8f:a0:c9:94:5e:80:65:31:7d:
45:39:87:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:25 2026 by rpki-client