Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.mft
File: 8yGP6gYFApn3AjI4MvBll9R7K2g.mft (raw, json)
Hash identifier: ecTyA1UvdLhAs8XpAWcfeKSd+9s9mVgwL687rw0cNUM=
Subject key identifier: F1:1E:F5:98:E8:F9:54:AC:B2:D3:84:7C:D0:03:C1:3A:E5:BD:32:0F
Authority key identifier: F3:21:8F:EA:06:05:02:99:F7:02:32:38:32:F0:65:97:D4:7B:2B:68
Certificate issuer: /CN=f3218fea06050299f702323832f06597d47b2b68
Certificate serial: 019F935B0F0897B4D3D0A200E07B1510A86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yGP6gYFApn3AjI4MvBll9R7K2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:45 +0000
Manifest this update: Fri 24 Jul 2026 09:00:45 +0000
Manifest next update: Sat 25 Jul 2026 09:00:45 +0000
Files and hashes: 1: 0RtwyRVvjIiWN2cWguOt53v2hjY.roa (hash: mzBpFhzZJKGkwbVMWM32gnUj/RPjVRzflr6kqw19bpA=)
2: 8yGP6gYFApn3AjI4MvBll9R7K2g.crl (hash: 5KYvVjFeOKDYk6HGn/GmNswFNdWRcndG5eShRKVfNxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yGP6gYFApn3AjI4MvBll9R7K2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:0f:08:97:b4:d3:d0:a2:00:e0:7b:15:10:a8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3218fea06050299f702323832f06597d47b2b68
Validity
Not Before: Jul 24 09:00:45 2026 GMT
Not After : Jul 25 09:00:45 2026 GMT
Subject: CN=f11ef598e8f954acb2d3847cd003c13ae5bd320f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:8d:9f:57:e4:5a:a2:fc:34:7d:d4:72:11:
61:89:f1:3b:94:d0:e8:66:55:99:33:84:d1:94:6f:
3b:41:5a:ca:f7:f8:84:d3:33:83:31:d3:57:b0:e5:
fb:32:c8:fa:db:2d:34:5f:9d:0c:75:6d:9b:ea:24:
97:10:69:5c:4b:de:c3:db:87:4b:b1:17:85:8f:05:
bc:af:62:8b:ef:3c:df:d9:78:a3:87:b3:bc:89:ef:
6f:55:ee:66:d2:e6:42:a8:63:c4:5c:09:5a:54:db:
8e:a2:8c:12:7f:dc:2e:52:5a:20:cb:75:21:43:dc:
13:0b:89:c6:e7:c5:b9:11:8f:8f:1a:79:9f:0a:3d:
c3:05:ea:41:6c:87:14:01:67:fc:70:64:fd:be:c4:
02:77:06:67:8f:25:f3:94:18:52:86:32:48:7c:8a:
a8:f5:f2:16:17:04:6f:45:46:9c:8d:b0:47:f6:0e:
83:cb:b7:6b:99:6b:cd:99:21:ae:1a:c7:34:84:78:
6f:ab:3e:06:6f:38:84:2e:f7:5e:18:b4:90:54:66:
f2:bc:b5:c7:cf:7a:37:88:93:ab:b1:76:c0:bb:62:
47:41:85:06:c5:f0:9f:1d:d7:c0:74:4f:74:42:53:
a0:24:13:2f:b4:97:f9:55:6b:c4:85:ea:f5:2f:40:
fd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1E:F5:98:E8:F9:54:AC:B2:D3:84:7C:D0:03:C1:3A:E5:BD:32:0F
X509v3 Authority Key Identifier:
keyid:F3:21:8F:EA:06:05:02:99:F7:02:32:38:32:F0:65:97:D4:7B:2B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yGP6gYFApn3AjI4MvBll9R7K2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/8yGP6gYFApn3AjI4MvBll9R7K2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f8:e8:bc:a6:13:27:39:20:d5:36:e3:cc:a2:cf:8e:c7:5b:
9e:14:c7:cd:8b:49:f4:e3:46:17:8f:bd:69:1b:77:b4:91:f2:
19:3d:32:9a:35:39:5d:c2:c3:49:d0:d2:31:22:45:90:4d:76:
4f:3d:89:ca:04:d1:ff:71:28:2f:09:90:91:6c:5b:c9:95:a0:
d3:e8:fb:00:f3:0c:d2:9f:9b:88:78:da:75:9a:e2:ab:e0:ea:
43:75:17:d1:45:9e:b6:a7:c6:c7:47:27:cc:9d:27:78:2a:ce:
01:01:dc:9f:10:45:fd:91:55:f1:b7:e0:7f:7c:78:10:b3:42:
aa:79:48:c6:22:62:b5:bb:57:1d:14:2f:de:53:18:7e:ca:3c:
58:72:5f:a3:0d:cd:a8:24:84:79:a1:d7:63:c0:77:9f:a5:f8:
cb:1f:ad:4c:fd:bc:d1:05:d1:15:3f:e9:f5:b5:1e:52:7b:bf:
88:54:6b:79:41:1a:48:b7:b3:e5:6d:d4:20:8f:79:48:df:29:
cb:36:46:4e:47:47:8a:94:35:e0:46:b1:5a:bd:9b:c2:50:a4:
3c:31:36:cd:ab:4e:f9:40:cf:8d:d6:50:64:f7:04:1f:0a:9f:
38:24:ea:20:27:21:1b:7d:7a:93:c8:68:b6:09:6c:05:e7:a7:
69:1d:64:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:03:53 2026 by rpki-client