Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
File: 8nlONzkr4v_oF5XX0WHwMwVqBs8.mft (raw, json)
Hash identifier: AyLR7Jj20fs4isG1CEOsWHNF1zE59Hp3ainYR8k7Gbg=
Subject key identifier: 70:D9:19:DA:AA:91:E0:01:DF:9A:31:94:A1:D4:46:08:59:E3:BE:93
Authority key identifier: F2:79:4E:37:39:2B:E2:FF:E8:17:95:D7:D1:61:F0:33:05:6A:06:CF
Certificate issuer: /CN=f2794e37392be2ffe81795d7d161f033056a06cf
Certificate serial: 019F8FECAD470FF8DB6D892C3C4168CA288D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
Manifest number: 2A
Signing time: Thu 23 Jul 2026 17:01:20 +0000
Manifest this update: Thu 23 Jul 2026 17:01:20 +0000
Manifest next update: Fri 24 Jul 2026 17:01:20 +0000
Files and hashes: 1: 8nlONzkr4v_oF5XX0WHwMwVqBs8.crl (hash: v97gHV16z7RWhx3EiNfLogBDjqBMi8IVje6a0P2NG20=)
2: g1hZM_gA4VG6GdoQudkyKC9Iy5o.roa (hash: jJPVFAYeWIaOyslOEJqm1eIOt5Tzn5vmJYRqVTS9b6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:ad:47:0f:f8:db:6d:89:2c:3c:41:68:ca:28:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2794e37392be2ffe81795d7d161f033056a06cf
Validity
Not Before: Jul 23 17:01:20 2026 GMT
Not After : Jul 24 17:01:20 2026 GMT
Subject: CN=70d919daaa91e001df9a3194a1d4460859e3be93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:03:31:97:9e:6b:0b:b4:4c:5d:40:38:fe:
73:1b:b7:cd:14:55:5d:6a:f4:31:31:1e:f8:6e:39:
55:2c:35:75:c7:63:73:85:79:54:34:ad:fb:02:45:
d8:12:d3:b8:b7:a7:81:57:d0:84:99:99:84:e4:e7:
14:d8:68:36:84:5e:08:62:63:8a:b3:69:af:3d:e9:
e6:4f:bd:3d:59:22:c7:cd:91:68:30:2f:11:0f:51:
2c:6c:bb:1e:cf:cc:d3:49:f2:46:0d:b4:72:26:1b:
07:5f:b2:df:c1:32:a4:88:40:7b:42:e2:54:55:69:
cf:9a:ae:d8:5c:be:a2:65:7f:0c:ed:96:02:b9:64:
82:56:f1:f4:ec:d0:a1:90:7f:e7:77:e0:41:a9:50:
2b:44:46:b8:3e:90:6b:96:63:e9:ee:ac:e8:c7:60:
a6:2b:32:95:87:1b:11:4a:e9:5b:50:11:30:87:62:
ef:46:bb:4b:17:e8:45:fe:38:c6:de:0d:77:89:67:
ca:46:8a:51:99:18:e6:3b:f2:f3:a1:52:12:a9:4c:
d9:53:a8:ce:a0:aa:93:58:d4:89:c4:24:55:94:14:
58:c7:a5:cc:11:ad:92:eb:0d:29:40:6f:35:21:d8:
ec:18:c3:a6:c0:f7:d7:7c:4b:39:28:a3:e9:9b:ae:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D9:19:DA:AA:91:E0:01:DF:9A:31:94:A1:D4:46:08:59:E3:BE:93
X509v3 Authority Key Identifier:
keyid:F2:79:4E:37:39:2B:E2:FF:E8:17:95:D7:D1:61:F0:33:05:6A:06:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:45:a5:38:fc:4e:47:20:9e:22:f5:83:06:4f:f0:8a:f6:df:
32:13:0b:4f:81:a8:91:d0:7a:23:96:90:2a:67:31:fb:78:5b:
24:9b:15:8e:18:af:19:71:74:37:61:25:00:82:bb:18:af:25:
d2:e0:91:52:1a:af:96:53:6e:9b:6f:32:21:3e:67:14:fa:a0:
3c:c4:2d:72:bd:35:f2:c1:ed:f8:a1:7a:7d:30:5e:53:f6:d0:
9e:f3:f7:ca:ad:6e:a5:0a:3d:ac:94:89:09:c1:4c:f1:62:64:
d4:dc:7d:70:4d:1d:81:2e:9c:db:37:73:f2:a7:0c:32:69:1c:
b4:07:e8:47:ec:2a:30:3f:86:80:bf:a5:26:05:ba:d8:79:dd:
5d:60:a0:cc:99:3d:74:2f:5c:5a:be:6a:87:0a:ca:de:88:0d:
b7:51:c0:15:9e:1c:2a:26:4a:61:e2:c5:ad:82:d2:e5:11:9d:
77:40:1b:25:39:91:e9:c5:d8:5c:9d:0c:e4:cf:d6:68:25:c7:
cf:6c:3e:de:7d:ca:74:47:11:1e:08:98:a2:f4:e5:1b:3b:44:
2e:2e:b4:4a:82:1f:fd:e4:4a:2b:5c:34:59:e5:53:f7:12:86:
ee:1b:fa:9f:1e:45:7b:ba:e9:91:3b:fc:d5:7e:da:3a:57:e9:
4f:c6:2c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:59 2026 by rpki-client