Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier: yH1NZhf5lTMkX9dAxYH8i9g7CFTEuoIyliTcn66p5gc=
Subject key identifier: 7A:F6:74:D8:4E:74:55:24:DF:72:DB:CE:9E:5A:63:F2:36:E9:FF:41
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial: 019F9392237FDE381867DDC7539BD503361D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 10:00:55 +0000
Manifest this update: Fri 24 Jul 2026 10:00:55 +0000
Manifest next update: Sat 25 Jul 2026 10:00:55 +0000
Files and hashes: 1: PUXWH5ErhkpTlX3DGsk45zeBJZg.roa (hash: xZcIxtVt0rhHswrnqiIOZ/p/5tyYj0LaAjYUyfrercI=)
2: k3bU7GJQGWmqllt3J0zrBV5kOFQ.roa (hash: FFe49A2byJNnvRF0qFtVbcLDcNCSlda3Ud81mS5eRtw=)
3: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: zx77n0CAVynXhM/UicjD203uLlSR2dT2sHv+Iqf6lY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:23:7f:de:38:18:67:dd:c7:53:9b:d5:03:36:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Validity
Not Before: Jul 24 10:00:55 2026 GMT
Not After : Jul 25 10:00:55 2026 GMT
Subject: CN=7af674d84e745524df72dbce9e5a63f236e9ff41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:aa:29:01:3f:4d:7c:32:80:15:a3:1d:c3:
a4:ac:6e:b2:8b:97:cc:45:8d:df:1a:74:73:33:8d:
20:71:7d:16:bb:97:4d:72:4a:25:a0:0e:a1:0a:94:
fc:cd:5b:bc:20:e6:04:19:68:e6:3c:73:91:21:06:
90:e5:bb:b0:bb:be:99:76:3b:8e:17:d4:80:a7:28:
d9:7f:e7:fd:0a:64:f1:5e:e1:b3:c7:97:d1:9b:5d:
98:e8:e6:f5:8c:6d:76:4a:73:94:05:0c:30:ba:e9:
4f:da:56:1e:33:59:52:8d:de:a4:a4:b7:fe:df:d3:
ac:79:2c:05:12:9a:01:f7:da:ad:67:b2:bd:50:26:
1d:45:0e:fb:7c:b2:fe:f8:46:06:7f:55:72:a6:c7:
a7:f3:c3:21:ea:5d:01:75:33:e8:db:d1:12:3f:33:
c0:77:83:88:66:a9:22:19:a0:2a:44:b8:b3:e3:35:
9e:66:b8:c3:d0:a9:1a:ab:6e:14:7b:0e:b4:79:a1:
ce:2c:10:56:42:f5:94:31:f8:1e:2e:d4:cd:fb:e1:
91:5d:b9:70:fe:f6:4e:d3:a5:04:4b:b2:b8:10:33:
b6:a3:0d:f4:59:f0:f9:7f:92:77:4d:48:79:c0:4f:
6f:57:e9:12:53:f3:21:df:d0:97:d2:b9:01:28:7d:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F6:74:D8:4E:74:55:24:DF:72:DB:CE:9E:5A:63:F2:36:E9:FF:41
X509v3 Authority Key Identifier:
keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2c:07:b0:b0:f2:a2:85:c7:98:c2:54:43:66:de:e8:bf:94:
fb:ba:99:88:84:95:c3:63:a9:14:4b:91:fd:b4:60:c4:e2:8f:
d2:74:45:45:0d:88:4b:c3:bd:7a:52:e4:6b:b8:3d:8f:0b:7b:
52:85:c4:a4:8d:d6:bc:ce:21:fc:74:c4:7f:e1:19:ee:53:06:
78:72:8e:85:f7:40:c0:23:36:8d:33:e8:b9:04:4d:97:4c:ad:
2e:f1:ee:89:ca:cc:96:b0:aa:7a:86:2a:93:85:63:c6:de:7e:
7c:d5:c7:d2:61:05:bd:d0:0b:54:0d:2a:60:31:1f:a8:b2:5f:
04:7a:30:45:49:7b:a2:45:69:57:bf:2a:2a:39:ae:ab:e7:ea:
48:34:0b:09:b0:99:c4:27:af:6f:3e:e7:02:d7:88:ba:ad:ff:
c1:e8:cb:11:88:3c:9d:97:d5:e7:2c:31:f8:df:98:35:0f:f0:
53:6d:8b:3f:a6:b8:05:d2:60:4f:42:37:43:a3:f3:94:b3:3d:
41:4e:4b:60:d9:5e:ab:4a:13:59:48:8f:53:64:3c:e3:08:ee:
ed:33:68:52:9d:8f:9a:19:e4:b8:74:71:8e:ef:6f:23:b2:87:
93:f9:fa:e1:1b:37:b8:37:d5:e5:57:9f:c2:61:46:2c:64:ba:
c8:92:c9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:30:16 2026 by rpki-client