Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: ZT3og7Jv7Nbp0Db6aqrxvTyHocd+H4r3qvzgCJgDPVs=
Subject key identifier: B6:66:9A:41:49:8B:8B:4A:F1:B0:98:8A:D6:8B:F2:E8:37:26:3B:1A
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 019F9059B65FBD6B047DDF218B42966956E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 138B
Signing time: Thu 23 Jul 2026 19:00:26 +0000
Manifest this update: Thu 23 Jul 2026 19:00:26 +0000
Manifest next update: Fri 24 Jul 2026 19:00:26 +0000
Files and hashes: 1: 2hKU1NYjNBDhpco5HEAK3um-kbE.roa (hash: YhjeByYxX6wVLssUtZI4v3Qulxa9a1zwl57K6O3z8yo=)
2: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: JWg1a9xBkk2wbB7/agicRwTgLgggx4ytY7IQPYNAQO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:b6:5f:bd:6b:04:7d:df:21:8b:42:96:69:56:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Jul 23 19:00:26 2026 GMT
Not After : Jul 24 19:00:26 2026 GMT
Subject: CN=b6669a41498b8b4af1b0988ad68bf2e837263b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:18:bf:cb:f7:e4:2c:ab:6e:40:67:0d:f6:
5e:fc:f1:73:5d:f0:85:e0:ae:e6:bb:b5:d9:30:7c:
23:f2:6e:e9:6f:4a:e8:37:c6:b5:fd:cd:cd:73:94:
62:83:c8:7d:5f:7c:ea:8c:7b:6c:07:5b:ac:16:9a:
08:58:6f:db:2d:5a:3d:89:2d:59:76:42:de:d6:89:
7f:99:1d:7a:85:b5:e0:71:e6:53:8f:ab:2e:c3:69:
3d:8a:0e:ad:99:f8:11:8b:04:40:ed:3b:b3:b9:d9:
b1:74:aa:d3:ec:4d:68:1f:ae:ab:d4:d8:22:a4:bd:
7b:d4:b7:9d:80:91:6a:7d:34:c7:bd:0f:61:b1:99:
98:8a:67:f8:a9:5d:61:39:1c:c2:8b:de:8f:36:e1:
61:d9:32:10:6c:b5:7a:a5:43:a0:e4:f8:11:d3:48:
e9:84:01:6a:b6:2c:ad:84:c7:e5:fe:7e:c0:f4:75:
a0:4d:eb:c1:50:31:dd:a3:78:84:60:20:5c:7d:5b:
5c:df:b0:f8:42:e8:12:98:38:f0:6d:dc:be:2b:bc:
ca:95:31:4c:36:55:0a:1f:a4:27:7e:be:7a:b6:55:
0a:ea:1b:93:56:3b:16:f1:c4:8f:4d:05:93:6c:97:
93:a3:eb:dd:4d:62:cf:f6:2e:63:af:1a:11:81:af:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:66:9A:41:49:8B:8B:4A:F1:B0:98:8A:D6:8B:F2:E8:37:26:3B:1A
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8e:38:72:c6:f0:06:30:bf:74:c6:05:08:3c:ac:d9:24:0c:
85:e6:b3:57:c2:69:d0:15:ef:8a:b3:e3:dc:14:37:35:40:f5:
cb:a0:ba:bb:95:5b:04:66:69:fe:4e:5d:67:9c:e9:f0:df:a7:
2e:bb:84:bf:99:a3:df:0e:d7:93:1b:83:50:73:61:7b:4b:44:
8b:18:13:f7:52:95:a6:05:10:bf:0c:44:06:7f:cf:66:82:92:
cf:49:9e:8e:1e:b2:a5:f4:cc:51:80:dd:06:00:9b:98:c2:b8:
d1:ee:ed:37:61:52:65:3a:01:70:8e:e6:3f:21:5b:d6:d3:81:
5c:2f:d0:95:ef:45:ce:de:75:03:9b:81:7e:53:5a:9f:82:6d:
61:42:07:20:8a:37:86:77:a5:78:9e:f6:db:9b:dc:0c:e4:5d:
83:00:55:63:ec:71:5a:06:76:14:ef:dd:43:ab:04:b1:20:72:
8c:59:7e:ce:98:eb:d4:b4:8d:9c:84:e4:cc:5c:9d:6f:03:dc:
5d:b7:ea:2d:ed:2e:2c:5c:a2:c6:79:c6:62:09:0d:27:73:1a:
15:f1:8f:87:25:72:45:ee:e7:61:b2:8a:94:f7:db:88:99:58:
5b:98:cb:0e:bc:a9:8b:b9:45:30:a9:d8:0f:5e:ee:4b:7c:84:
c3:52:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:56:50 2026 by rpki-client