Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: Dk2gpGjG1/yyejTZ3sWtA5sX7Q1yu63/3sPyy3hJ8X8=
Subject key identifier: 8A:6D:3A:FA:E8:9B:62:07:B8:26:96:DC:E9:3F:BB:11:78:A7:D6:71
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 019F8EA251ABB38BDB5F8C8058416C8B1415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 1703
Signing time: Thu 23 Jul 2026 11:00:30 +0000
Manifest this update: Thu 23 Jul 2026 11:00:30 +0000
Manifest next update: Fri 24 Jul 2026 11:00:30 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: nuAB2EM+yUBUnfOY8UUh/fzarA0NGU2gEGW9RHO1aTw=)
2: 2ztr66xhOcOr2Kq6L1D4fEoRjwo.roa (hash: amz+yTvX9x7rzj0FFfB2aTlKhOEfzIXqA7tCgNwl8L8=)
3: ypNsMEiA0eytbHpILkkUcrUHiuI.asa (hash: MB36B+UQExuZ+YHIlLlB3WxM9/xtf1qsLE+t7spjDH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:51:ab:b3:8b:db:5f:8c:80:58:41:6c:8b:14:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Jul 23 11:00:30 2026 GMT
Not After : Jul 24 11:00:30 2026 GMT
Subject: CN=8a6d3afae89b6207b82696dce93fbb1178a7d671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:6f:17:53:17:0b:3a:a6:bf:bc:b2:e3:2e:
82:d2:cf:84:35:5b:5b:25:57:e9:ab:e4:f4:24:38:
ff:ce:90:2e:9b:b0:3d:c7:35:d5:3f:14:98:de:04:
a2:8e:3d:35:59:88:d8:ce:39:a8:9e:b4:63:67:e9:
77:22:ac:fc:3b:d5:69:df:7b:18:59:8d:4f:37:53:
29:ef:8b:e9:27:96:f2:b9:7e:55:ac:f3:6d:26:81:
49:c4:5f:0f:b6:6b:0b:11:65:4c:f7:b3:d0:83:6e:
dd:8f:82:3f:ee:01:14:68:12:f3:1d:6a:39:48:b2:
c9:19:23:bb:dd:b1:b1:73:e6:ff:a0:a5:35:a2:9c:
90:9e:0d:3c:7d:a5:0e:a9:b8:c1:c1:d7:5a:58:0d:
f7:eb:d0:97:1a:fd:5b:c2:eb:97:2d:6c:3e:7f:30:
85:06:a4:73:fa:3e:33:6e:ca:f2:24:52:37:c2:4f:
5e:23:36:aa:5c:c2:db:7c:df:f5:5a:93:c6:fe:48:
5f:48:25:82:14:d9:3d:fa:19:68:01:0f:c2:7d:0c:
cf:20:b6:b1:30:71:eb:70:6b:95:b3:63:47:05:71:
6f:35:cf:d4:b0:6c:87:47:60:fe:06:a4:4c:be:4f:
43:66:1f:6d:1e:88:4f:ab:e6:ec:90:0d:e2:62:03:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6D:3A:FA:E8:9B:62:07:B8:26:96:DC:E9:3F:BB:11:78:A7:D6:71
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:56:c2:ea:b6:03:5e:d6:0d:14:96:6b:6b:17:ea:d3:a7:92:
b8:be:d9:cd:c9:3c:05:10:df:c0:59:5f:2c:53:66:ed:28:d2:
e6:07:52:07:89:58:1f:34:9d:36:db:52:3d:4c:f5:ea:87:c1:
2d:d7:6b:ec:92:03:58:86:89:6a:6c:44:e7:42:d6:1f:64:6a:
be:11:80:4d:b1:86:e9:60:43:97:b6:7f:a4:df:94:ad:ef:de:
d3:72:c4:51:00:12:34:ac:b8:2e:76:ec:51:be:aa:bb:08:19:
17:b7:4d:de:12:31:26:3e:e4:11:24:7e:3c:05:dd:fe:60:02:
43:1f:43:a6:97:bb:04:b0:d4:61:93:2f:d2:c9:89:6a:52:76:
0a:2b:5f:7b:58:2b:68:b1:f9:be:27:00:d9:4d:a8:fa:91:66:
10:b4:55:17:15:48:d7:b6:42:4b:8a:5b:19:cf:b4:6c:32:db:
20:da:b4:5e:c6:2e:39:a6:eb:5f:61:92:47:33:12:22:25:ba:
ce:83:38:e7:48:d4:c6:cf:6f:24:ac:37:57:20:b7:44:79:f9:
c6:ca:01:27:2a:33:0a:87:bc:b7:bb:e8:9e:1b:f0:60:a9:5f:
66:28:4e:08:0c:54:e1:64:c5:e7:9e:48:44:6e:e6:7f:11:95:
52:1f:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:25 2026 by rpki-client