Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File: 8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier: 9r2SP1qT2E76IRhCD3kZUjy0HhZgWK1mJOtPPvFrcps=
Subject key identifier: D4:67:2C:7C:51:0A:C6:5D:BC:5B:FF:A3:F9:38:30:95:28:1D:E9:FB
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 019F8F477BD05735A963B7513F70F31E1B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number: 09CB
Signing time: Thu 23 Jul 2026 14:00:54 +0000
Manifest this update: Thu 23 Jul 2026 14:00:54 +0000
Manifest next update: Fri 24 Jul 2026 14:00:54 +0000
Files and hashes: 1: 2GTvWzpclUq6kJYm-wsP_GwJPLY.roa (hash: fYmZ9Cu3/ER+umCuIKfV6emnqQD55csuls9mkFBGOE4=)
2: 5oF3V0rjeL1pJ5lHiFSxxXlRiqk.roa (hash: MY4vTmIm6iMkCfXRGy7HULVmNJlJMi1dSNNh0tuV34c=)
3: 69uCRF0gJPayfWhDtOPkNyE4RrA.roa (hash: zk+4O7C/kwm21uLUwHJKUDfYHP0XyuVnc9Gjvk0nfWs=)
4: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: o1WBgREjdivw7fQUD4Q3OudwAag84GyOpvZ03LZRA/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:7b:d0:57:35:a9:63:b7:51:3f:70:f3:1e:1b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: Jul 23 14:00:54 2026 GMT
Not After : Jul 24 14:00:54 2026 GMT
Subject: CN=d4672c7c510ac65dbc5bffa3f9383095281de9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:87:38:92:86:c0:6d:74:d9:7d:ac:a9:2f:
ad:82:05:32:45:69:b6:95:46:13:ca:d9:f0:bc:ba:
a8:d3:83:f5:27:6f:6e:b9:cb:ba:a0:0d:78:fd:29:
ee:49:72:a5:98:1d:c5:2e:99:de:f0:78:87:de:1b:
81:03:c3:33:8b:e3:62:28:5e:fe:c9:e2:7f:1d:53:
ca:ee:65:3e:ec:9a:b4:4a:16:61:a7:6d:f1:1a:f6:
d8:47:b1:d0:ad:71:0e:e5:91:74:55:a8:d1:66:aa:
7b:4a:b9:29:70:89:d2:13:bc:95:33:3d:65:4a:46:
cd:16:f7:12:e5:14:b7:56:a7:33:61:c2:71:79:5c:
26:37:39:71:fa:7c:b1:2c:74:ba:2f:cb:45:cc:a3:
82:7e:7a:42:c8:f6:04:9b:34:b6:e5:49:f4:38:eb:
4a:73:43:d8:6a:12:78:a1:2d:26:df:18:da:a7:76:
6f:c8:d8:1f:10:46:f8:9f:88:f1:02:7d:e0:95:ea:
db:b4:79:8a:4f:c6:aa:d3:61:9e:9b:75:08:47:8a:
f9:00:57:6d:2a:d9:09:54:43:7b:2d:c5:50:36:fd:
01:52:ff:e9:ba:83:1e:7f:10:65:7c:c9:70:50:63:
47:13:cf:fa:5a:3d:0d:35:68:4e:90:56:74:01:ec:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:67:2C:7C:51:0A:C6:5D:BC:5B:FF:A3:F9:38:30:95:28:1D:E9:FB
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4e:27:d4:03:3b:19:55:da:56:7c:f3:e1:76:b0:66:f5:ff:
ff:78:22:19:e3:ef:19:d4:b5:12:42:e1:d5:7a:c8:4f:99:e1:
b8:95:4d:d8:be:d5:46:4e:54:c7:39:26:9a:62:ed:cd:d2:35:
24:ff:8c:a3:69:aa:bc:5e:f2:ad:c2:bf:f9:8e:6a:fd:e8:4d:
82:10:f9:ca:b9:9c:1c:ec:77:75:95:bd:c0:f0:2f:2b:64:68:
b2:2e:de:bd:37:62:5a:d9:c6:32:f1:00:e2:57:6c:49:0e:2f:
67:e7:2d:fa:47:4e:9c:77:22:a6:1e:0e:86:e1:b9:38:51:04:
be:a4:fd:6c:1c:41:b9:10:fc:6d:c0:6e:7d:e1:72:71:ce:19:
51:85:3d:74:92:a8:1e:ba:7d:18:dd:ef:fb:04:7c:f1:d1:07:
3d:a8:65:22:8d:98:bb:a1:98:56:c1:9e:29:99:06:b7:30:8e:
4a:df:fb:d3:9c:ba:e2:fb:da:80:d1:75:be:6d:74:fd:3f:38:
7a:c3:d2:0a:fa:c5:76:32:0e:42:f7:fe:10:26:15:5d:05:af:
43:5b:71:d9:32:d2:63:7e:53:c9:c8:df:ac:65:a1:f3:12:0d:
f2:11:b9:1c:12:59:ba:a4:b7:a9:1c:34:d8:a2:c8:27:61:7a:
09:2d:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:22 2026 by rpki-client