Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
File: 8vQKwelzpu2pWuj5lPOipGwwGlE.mft (raw, json)
Hash identifier: qIZ4QHndoLsP14a99tu+WWGhLZsN3CWyIozOOHUqKAw=
Subject key identifier: 9C:1C:F7:5C:83:38:5B:FF:32:48:7E:5B:FD:22:7E:F9:2A:7C:66:F6
Authority key identifier: F2:F4:0A:C1:E9:73:A6:ED:A9:5A:E8:F9:94:F3:A2:A4:6C:30:1A:51
Certificate issuer: /CN=f2f40ac1e973a6eda95ae8f994f3a2a46c301a51
Certificate serial: 019F8F4748A86DC3E10812444759EFAF7EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
Manifest number: 3A
Signing time: Thu 23 Jul 2026 14:00:41 +0000
Manifest this update: Thu 23 Jul 2026 14:00:41 +0000
Manifest next update: Fri 24 Jul 2026 14:00:41 +0000
Files and hashes: 1: 8vQKwelzpu2pWuj5lPOipGwwGlE.crl (hash: V0ODXrSCdhtrf/H5wVuIITkhmzKIFsomzjG3kS/+Ezw=)
2: 9eIznmkQ1i1wObSFJhgIo07kbEs.roa (hash: PRIHTF2R61srx/cf5f84GRd6EYSqTtmRTfxJne6LAdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:48:a8:6d:c3:e1:08:12:44:47:59:ef:af:7e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f40ac1e973a6eda95ae8f994f3a2a46c301a51
Validity
Not Before: Jul 23 14:00:41 2026 GMT
Not After : Jul 24 14:00:41 2026 GMT
Subject: CN=9c1cf75c83385bff32487e5bfd227ef92a7c66f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:a9:9e:d4:a3:33:dc:ac:53:84:f8:9a:df:
09:59:01:3b:f5:5c:29:7b:e8:fc:55:9b:f9:ab:ec:
e2:9d:8a:88:11:81:df:67:4e:df:cf:a6:b3:f1:2c:
56:3f:49:06:00:47:7d:9b:c9:cd:db:6d:a2:6b:ba:
63:00:a9:5d:9d:21:c5:72:4e:32:ef:1e:39:5e:44:
d9:91:de:e6:bd:51:12:c4:fa:04:c4:53:7e:9a:78:
2c:8c:de:e6:58:2e:37:41:5c:fc:93:49:4c:cb:70:
4e:b1:cc:ea:3b:25:7a:95:de:d9:6f:67:98:40:75:
15:3a:2c:24:92:7b:29:6a:f2:dc:3a:4b:69:5f:dc:
1d:2b:90:a4:04:65:92:d9:c9:72:f3:d6:8d:26:57:
f1:ba:54:23:e3:bc:84:55:75:5c:1f:8e:5a:c8:c1:
d3:77:8f:76:90:a4:6c:93:1b:d9:e8:dd:1d:6b:f8:
0f:e6:73:1d:a0:49:eb:e9:9a:bb:b5:a0:00:09:39:
db:0f:9c:cd:3c:84:95:7e:58:c5:d3:82:6d:2d:d3:
3a:2d:28:4d:13:eb:0a:b8:74:a5:cb:37:e7:2c:04:
40:1c:9a:46:4a:a0:c8:2d:8e:9f:19:e8:f3:4c:52:
1f:a0:b5:c8:92:2a:de:ea:79:b2:fc:22:6b:4f:1e:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1C:F7:5C:83:38:5B:FF:32:48:7E:5B:FD:22:7E:F9:2A:7C:66:F6
X509v3 Authority Key Identifier:
keyid:F2:F4:0A:C1:E9:73:A6:ED:A9:5A:E8:F9:94:F3:A2:A4:6C:30:1A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:43:a5:a6:c6:40:f5:21:78:1a:d7:71:25:a4:ff:5d:2c:12:
e0:04:92:ad:c5:53:93:08:d6:35:46:0d:0e:59:70:f3:6d:84:
37:f0:ba:9c:aa:00:9b:36:68:30:d1:1f:2e:d5:56:ae:b7:18:
70:10:37:c9:b5:1a:4b:e3:19:63:c1:1d:ee:c6:8f:7a:f1:7c:
fb:49:e4:d3:d0:ca:86:0f:cb:da:b9:d2:f4:06:2c:51:75:45:
24:09:d0:82:41:f5:8e:22:de:b9:b2:39:d0:71:0e:08:a6:73:
9a:94:d8:12:79:4d:6e:44:ba:26:7e:e8:ba:c9:90:8a:11:cf:
18:ef:31:1c:e9:17:ee:25:0b:86:89:2c:3b:5e:bf:18:88:01:
69:84:e7:68:37:14:02:65:9c:85:9d:58:5d:c7:fa:ae:21:c1:
eb:a3:45:ef:87:95:53:85:c6:52:f4:93:c0:f5:0c:57:96:af:
18:08:71:2e:76:e6:a5:94:4b:78:dc:c8:bd:15:76:1b:32:d1:
35:e5:df:67:48:d9:ed:24:4e:76:c3:f7:ff:2c:66:df:af:0e:
43:1d:43:70:a7:19:37:7f:95:29:31:58:e0:30:55:4c:2d:60:
70:95:c1:f9:92:63:52:24:0a:a6:48:8d:d6:4d:52:f1:10:76:
9f:f8:e1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:03 2026 by rpki-client