
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier: PhBmudqKyMyBMtuI5oM0RcHoc3rvS+TvuFEu9NY2rCc=
Subject key identifier: 86:BE:D4:57:4A:0E:48:9B:18:1D:01:81:78:19:8E:7D:E0:1C:E3:9A
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial: 019F9059A283262357821BFEE502E16FB567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 19:00:21 +0000
Manifest this update: Thu 23 Jul 2026 19:00:21 +0000
Manifest next update: Fri 24 Jul 2026 19:00:21 +0000
Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: 6MtbB6jTh/NEN1zqhOJiQaMI7qYwWvbklSoIVKhEIv8=)
2: VVUHU9wzPSipaX2HFFPnxlMDk40.roa (hash: LpkGFoTMr4l6RIiQwmwapd7pQ8v6qmtf4dTq+3Df5AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:a2:83:26:23:57:82:1b:fe:e5:02:e1:6f:b5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Validity
Not Before: Jul 23 19:00:21 2026 GMT
Not After : Jul 24 19:00:21 2026 GMT
Subject: CN=86bed4574a0e489b181d018178198e7de01ce39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:cf:13:1f:63:60:5d:d0:db:e5:9f:28:46:
43:33:84:35:0b:34:66:c5:8e:9f:9e:d6:ed:d0:c8:
e6:11:4e:32:b6:57:0c:98:8c:6e:bc:f9:a3:1a:0d:
6a:ec:20:52:43:16:2c:4e:7c:4e:b2:44:be:67:a0:
e2:2e:dd:d4:01:ae:01:e8:ef:82:cb:d2:76:6a:ee:
83:60:d4:0a:d4:e5:f3:9e:e3:93:68:e7:92:c8:13:
6f:10:76:53:ec:47:05:80:d3:c1:4b:88:df:7d:4a:
8e:0b:cc:86:6e:e5:19:41:3a:93:4a:2c:23:0d:59:
6f:95:68:ab:31:26:b6:f0:76:dc:2b:d1:00:02:d8:
b9:08:6a:71:4f:c7:53:4a:54:db:ac:49:61:cb:7a:
29:89:24:04:92:50:79:fc:d9:16:17:22:de:09:24:
19:46:fd:84:d7:a3:08:89:5b:73:e0:00:e9:f4:1c:
9c:23:b3:b6:04:97:ee:7d:c0:3d:7a:b2:e1:51:bb:
4a:a5:77:d0:4e:57:f4:d9:48:79:ff:89:33:5f:be:
c4:aa:23:a9:6d:61:fe:8e:3e:ed:50:5e:ab:69:3a:
e4:26:20:e0:98:7d:e7:c5:41:e8:47:a7:ab:89:d2:
6f:84:d5:57:e6:04:b4:84:84:ec:95:81:37:40:5a:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BE:D4:57:4A:0E:48:9B:18:1D:01:81:78:19:8E:7D:E0:1C:E3:9A
X509v3 Authority Key Identifier:
keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4a:70:6f:70:31:ac:a9:23:d9:35:b7:25:47:17:48:8d:94:
3c:26:36:08:e8:c7:43:15:f6:b8:cb:3b:79:69:db:c9:bd:06:
a6:8a:1d:23:01:03:46:7d:87:93:d6:59:47:a1:74:30:90:9e:
d2:fa:6b:36:34:84:c7:5e:30:be:16:14:d0:99:d8:f6:bf:fd:
51:ee:0e:04:39:aa:db:77:ca:5b:37:97:b4:dd:1b:2b:aa:b2:
2a:36:c3:68:3c:e0:38:ba:89:14:47:f5:18:84:fa:2f:94:77:
39:ed:a2:51:02:41:90:46:76:a1:04:02:ec:21:a7:10:4a:cd:
6a:05:b9:c7:75:e6:16:96:f0:e4:0f:09:46:70:c4:38:dc:eb:
91:4f:69:fb:41:77:f5:ee:60:af:f3:e3:16:1f:9b:0e:6b:3a:
4c:59:9e:4c:f6:d9:f4:3e:0e:74:09:20:5e:9c:2f:af:c4:25:
ea:df:4d:6d:e7:26:7b:ae:55:b2:f2:af:82:5d:a9:0d:ca:94:
cd:d4:74:64:2f:79:e1:87:96:ad:f0:74:fd:58:ae:b5:1e:a3:
5a:08:0e:8e:95:5c:76:64:7d:e7:60:61:9c:2b:76:eb:aa:28:
1a:35:70:be:b0:86:6f:63:20:55:4a:68:12:20:d5:96:21:9d:
bf:a2:43:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:10 2026 by rpki-client