Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
File: 8lizqXQbQx177NZChrnmvODpddo.mft (raw, json)
Hash identifier: EoCC0AZqGb3BsRb6oE1UlEjITIpBSATE9nA8L+ryGNE=
Subject key identifier: 5E:7D:92:61:23:18:BF:F1:87:58:EB:F0:8D:D6:84:94:DB:00:E5:43
Authority key identifier: F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
Certificate issuer: /CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Certificate serial: 019F905A6D9B0CD50DB7AEF1DDF9BF238B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
Manifest number: 1995
Signing time: Thu 23 Jul 2026 19:01:13 +0000
Manifest this update: Thu 23 Jul 2026 19:01:13 +0000
Manifest next update: Fri 24 Jul 2026 19:01:13 +0000
Files and hashes: 1: 8lizqXQbQx177NZChrnmvODpddo.crl (hash: indykQ6LqtT6MgKoW3fVMJ3kS24rWS3iT1X2SMlws6Y=)
2: 9vmezDMgMLAYgubj0dZwQBpw7Zo.roa (hash: QLo0rxDXf9m7rqbC9zynXdEyUGpcYsQ8wFalcr82vIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:6d:9b:0c:d5:0d:b7:ae:f1:dd:f9:bf:23:8b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Validity
Not Before: Jul 23 19:01:13 2026 GMT
Not After : Jul 24 19:01:13 2026 GMT
Subject: CN=5e7d92612318bff18758ebf08dd68494db00e543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:2a:e5:14:cb:0f:4e:e3:fe:f3:b6:a8:3f:
ef:93:1c:4d:2a:33:80:ff:8a:52:aa:d3:36:9e:f0:
d1:26:14:8b:90:2a:fe:2f:1d:5e:4a:37:42:79:5d:
17:a9:cd:c2:c0:98:c5:c4:4d:19:8b:c2:e2:21:32:
e6:97:f4:18:61:3e:e0:4d:d9:55:94:62:f1:73:1d:
44:a5:4d:af:52:fb:ca:0c:8b:0f:68:f1:a2:9b:11:
29:92:1c:3d:17:58:e2:95:75:6f:7e:de:d6:24:a0:
a1:32:f8:d6:39:8d:e4:3b:15:10:d3:6e:d5:37:01:
8b:8b:74:6f:b8:57:de:d6:6e:53:ce:cd:ef:ea:c1:
4d:72:dc:d4:19:8f:94:11:89:99:44:82:a6:8f:3b:
d1:f0:50:df:2a:19:30:65:e0:a1:0f:fc:2e:d4:f9:
13:47:00:83:16:9a:13:4e:9f:22:e5:9a:7d:82:b0:
f6:6d:88:52:66:ac:ee:30:12:ff:bd:cc:c6:d3:d0:
de:84:ad:f0:32:d1:7e:ca:82:54:b9:3f:56:27:e7:
b8:72:69:16:52:be:d9:af:98:b2:f4:09:15:84:0b:
d5:df:39:8c:15:ac:07:ea:5f:18:44:a4:a0:a7:c3:
71:62:e0:1e:97:e1:1e:df:5f:d9:66:e1:1a:97:9f:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7D:92:61:23:18:BF:F1:87:58:EB:F0:8D:D6:84:94:DB:00:E5:43
X509v3 Authority Key Identifier:
keyid:F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:51:2f:1b:9e:1c:68:1c:c8:06:72:5f:78:33:74:34:1f:4a:
40:1e:58:69:e3:6d:29:fe:33:87:77:a0:81:94:19:bb:70:e8:
8c:7b:3a:cf:50:5a:ba:bc:24:d0:66:44:31:79:3f:65:c9:6a:
bc:1d:2f:11:08:07:16:63:6b:aa:1d:f8:d8:9d:50:7a:93:d9:
91:df:97:7e:4d:02:d9:89:4e:44:e5:a1:80:c1:f2:ca:96:09:
2f:44:4d:bb:77:84:d7:d0:41:02:24:cd:21:b2:74:0a:ae:1f:
b0:81:f3:7a:ff:67:18:33:ca:ae:c8:0c:42:6c:7e:ca:9a:00:
02:e1:0b:1c:29:9a:8a:f6:09:b6:ac:60:ce:5d:b2:cf:39:20:
bb:d7:ae:62:a5:1c:ac:ae:38:09:93:28:12:db:46:e2:9b:5e:
00:42:85:4b:f8:25:37:55:ce:58:78:58:5e:f2:82:2f:2d:8a:
80:c5:cb:3e:63:14:ac:63:f2:e4:d7:da:6e:1a:8b:fd:00:ed:
9c:31:24:16:e3:4a:29:f9:4d:89:be:a3:29:90:ce:17:1a:be:
33:13:50:4d:44:81:1f:ca:6a:01:93:6c:1f:6a:e0:1a:c9:29:
ad:61:b9:7e:e9:17:f6:b2:95:08:1f:58:9a:68:48:10:f4:bb:
b6:cb:1a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:31:42 2026 by rpki-client