Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/8Ios7HEB8hdz3vxZFsCLAcGFkOc.mft
File: 8Ios7HEB8hdz3vxZFsCLAcGFkOc.mft (raw, json)
Hash identifier: tJA3EkbxPxQHp5BH/Sz3hN6YbvAKbo+iBedngfyzyks=
Subject key identifier: 38:31:2F:A9:C9:CB:06:D9:B3:0C:F3:59:F7:E2:84:C6:BE:69:DC:21
Authority key identifier: F0:8A:2C:EC:71:01:F2:17:73:DE:FC:59:16:C0:8B:01:C1:85:90:E7
Certificate issuer: /CN=f08a2cec7101f21773defc5916c08b01c18590e7
Certificate serial: 019F90C7B6C7ECE7AF46B6FCD98B491C01DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ios7HEB8hdz3vxZFsCLAcGFkOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/8Ios7HEB8hdz3vxZFsCLAcGFkOc.mft
Manifest number: 02E2
Signing time: Thu 23 Jul 2026 21:00:35 +0000
Manifest this update: Thu 23 Jul 2026 21:00:35 +0000
Manifest next update: Fri 24 Jul 2026 21:00:35 +0000
Files and hashes: 1: 8Ios7HEB8hdz3vxZFsCLAcGFkOc.crl (hash: Y2PalU6Jt4GA7PqmjaVlYF3qmySGuznHleIAFqSQX2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/8Ios7HEB8hdz3vxZFsCLAcGFkOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/8Ios7HEB8hdz3vxZFsCLAcGFkOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Ios7HEB8hdz3vxZFsCLAcGFkOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b6:c7:ec:e7:af:46:b6:fc:d9:8b:49:1c:01:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a2cec7101f21773defc5916c08b01c18590e7
Validity
Not Before: Jul 23 21:00:35 2026 GMT
Not After : Jul 24 21:00:35 2026 GMT
Subject: CN=38312fa9c9cb06d9b30cf359f7e284c6be69dc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:97:5f:55:ef:77:36:65:aa:92:71:c7:b2:
55:8d:d7:69:3f:62:2b:99:b2:11:d6:b4:cd:ef:4d:
f7:68:32:5a:89:b2:ee:12:e3:2f:ac:9b:13:00:20:
16:fa:8f:0a:84:e1:3c:ed:c4:5d:02:0a:2b:ef:2a:
6e:fc:6f:ad:fd:6e:4d:75:f1:0a:86:75:e0:ca:87:
cb:90:fd:6c:57:89:5b:43:79:b8:30:48:33:d9:9f:
62:99:68:33:6c:26:ad:cf:2d:73:de:47:85:9d:2a:
cc:d1:7a:38:59:de:4d:b2:d4:d0:67:5f:6b:c9:fd:
02:b6:b3:74:83:25:95:da:a5:ba:3b:63:62:ee:78:
de:fb:f0:cc:20:88:8d:e3:2b:e6:30:ae:a9:7e:9e:
31:96:23:15:b8:04:8c:a3:cd:7b:e8:dc:fe:22:a2:
ce:fe:39:39:10:7a:4a:d7:c9:3b:c9:da:c3:4f:c7:
4a:6c:c1:56:83:54:38:49:64:95:c1:15:6d:ab:45:
3d:20:f8:66:fa:5b:05:8d:2b:82:74:f8:99:08:15:
9b:4b:0f:c5:0d:60:52:0b:35:67:74:46:26:77:3f:
e6:45:2e:7f:24:de:c1:7d:67:84:a4:f4:0b:d1:9e:
b5:6a:4d:69:af:3a:c7:c9:8f:9c:89:f4:04:b5:32:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:31:2F:A9:C9:CB:06:D9:B3:0C:F3:59:F7:E2:84:C6:BE:69:DC:21
X509v3 Authority Key Identifier:
keyid:F0:8A:2C:EC:71:01:F2:17:73:DE:FC:59:16:C0:8B:01:C1:85:90:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ios7HEB8hdz3vxZFsCLAcGFkOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/8Ios7HEB8hdz3vxZFsCLAcGFkOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6f252d-59ed-4a22-9d97-65b6408bdffe/1/8Ios7HEB8hdz3vxZFsCLAcGFkOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e4:61:a3:24:24:47:71:04:79:4d:e7:80:73:3b:f9:80:51:
25:17:ea:d8:d8:2a:db:82:82:26:94:96:1e:f7:6f:f8:1d:fc:
b7:db:27:bc:b2:86:b5:a6:b5:f1:5d:5b:b6:9a:2f:85:c4:24:
90:e2:52:e7:ab:bd:55:60:7e:a2:e4:08:e5:91:f7:96:2f:29:
36:94:aa:41:66:e5:35:72:d8:35:96:f6:56:cb:58:22:54:b7:
0e:d6:0e:c4:4a:d1:fb:24:24:c8:c3:f0:16:d4:48:65:a4:bc:
30:8d:d9:e1:a2:ff:40:d3:24:7c:3e:5c:8a:a9:97:0b:2d:42:
b6:a4:ef:4a:af:34:bb:c0:c7:aa:27:cd:09:6c:46:6c:93:c5:
3a:3e:98:eb:e4:38:cc:bd:a8:e6:dd:ad:93:f7:de:41:22:91:
b0:4a:87:d6:7e:cd:c6:8c:8a:74:5d:0b:da:0a:37:d4:cd:f6:
9b:d7:db:f2:79:ad:5f:ff:ed:cc:6c:48:52:bb:df:1e:39:b9:
66:07:45:5b:98:ce:78:5f:8e:d6:ab:65:77:b2:25:44:35:58:
68:20:32:e0:15:ce:81:0d:01:e2:45:cd:48:c1:ab:64:e3:f3:
b9:39:f2:45:21:11:b0:c7:dc:3a:74:ea:3a:64:89:40:63:c0:
bd:b6:d9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:01 2026 by rpki-client