Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier: TOVMeoGaKWEAQo2caCy5Mf5IDNmrnFDkgGA/TLvw0BM=
Subject key identifier: 6D:36:7B:0C:F9:CE:65:AA:63:DE:69:CF:5D:99:4B:3E:CA:0F:79:B6
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 019F9248898137FC2A1A9D7CC866FFDAA438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number: 14DC
Signing time: Fri 24 Jul 2026 04:00:54 +0000
Manifest this update: Fri 24 Jul 2026 04:00:54 +0000
Manifest next update: Sat 25 Jul 2026 04:00:54 +0000
Files and hashes: 1: 4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa (hash: mR/ntepXIb3AfkywKQIADTaonFHTRbi9R2FQyBq3dKQ=)
2: 6PhblOAO9xa7zmIjxvlxnMtK7uQ.roa (hash: NWDITDoerQYCt5AOvDev1r+3TmGT8RmUVJIwjMd0YRE=)
3: FtNNeWImNsRtEKSUkKACM6lSmvc.roa (hash: 1b2HDz6Lo28/yROcDiHE0/pvPJHPVJCUsiCcT/vyD5E=)
4: H_IwdjQek-TxkIwNQc7QdhJFGTY.roa (hash: jds0yEe3zRWI3cu0lRDYUFLph76il4rNQy+a1D0VpZk=)
5: LiIvmL2jPb5CXm2fcW48pwl6IHs.roa (hash: nIYaySFJM8B7djJy1Ih3Y/KEycQQlbGH8uUci8K6W9k=)
6: fjWmsnTuw0Jy6MrhqYJr2902xYw.roa (hash: EbbXPkLE6w+CuqoWFnM8NOi9yq48EFyTEgcSWpqKxTw=)
7: rTQMpwKCtdAUeKgHOzQABtMHsGI.roa (hash: NFKvVLShqUI7IOwsmc2G6/b+0920aDWMbWSkjC2hmss=)
8: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: l5bTyIKA4G/fRNwee/LHfatobP+LSH8g4ZRsJY+8Nc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:89:81:37:fc:2a:1a:9d:7c:c8:66:ff:da:a4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Jul 24 04:00:54 2026 GMT
Not After : Jul 25 04:00:54 2026 GMT
Subject: CN=6d367b0cf9ce65aa63de69cf5d994b3eca0f79b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:70:33:54:d9:5a:0b:17:1f:ff:71:69:fb:
4e:64:59:e9:33:e8:12:66:20:e1:4b:d5:be:15:8a:
ac:79:76:cf:4c:09:bd:c6:44:44:e9:83:68:a0:15:
ca:44:70:5f:da:8c:77:35:d9:21:dc:92:c0:2a:6e:
6d:86:9b:b8:8b:97:67:40:5e:4e:b3:ff:38:1f:26:
7b:99:c7:38:82:bd:19:33:ed:fe:fd:30:78:77:ef:
0a:40:f0:41:14:ed:fa:c4:c5:08:17:d1:f3:89:9e:
25:3b:b6:ab:b1:5b:5f:ba:06:4b:b1:8d:3f:c9:64:
21:94:42:a3:29:ce:78:63:67:98:3d:b5:77:d6:62:
42:fd:5d:bc:1c:56:c6:eb:9b:12:26:00:9a:10:c8:
36:dc:38:86:e2:f3:7f:98:6a:ab:87:4f:24:e1:2b:
36:18:37:95:ee:3f:ec:19:fd:84:4d:0d:a2:c2:c7:
e5:b0:8d:7d:81:f2:e7:c6:9f:9e:3e:b2:23:c0:a3:
60:28:97:9b:9b:c2:20:1e:ff:13:bf:3c:8c:66:5a:
5e:5c:cc:fc:a2:ac:9f:89:9c:01:2d:e2:a5:a9:29:
97:f3:83:69:69:96:24:76:3a:0c:c8:53:46:fd:b5:
b7:1c:7e:d0:38:64:90:d6:4d:5d:5e:64:9c:c7:51:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:36:7B:0C:F9:CE:65:AA:63:DE:69:CF:5D:99:4B:3E:CA:0F:79:B6
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:78:96:ef:0b:dd:bf:ee:2e:f3:8a:3b:15:06:cd:7d:bc:22:
ff:7e:b1:2e:80:6b:90:57:98:3e:dd:0f:71:68:ce:6b:fb:31:
32:37:24:ad:be:15:3c:66:e5:43:b9:1c:e8:f7:0d:ba:8d:b7:
ef:f5:49:61:09:99:fd:25:49:97:0b:91:ee:e5:ac:64:2b:9d:
aa:0b:47:dc:7d:08:9e:be:52:cc:39:46:74:9a:17:52:bb:17:
ab:41:71:93:a5:6e:cd:19:df:ef:90:01:0b:28:6c:5f:34:4d:
fe:56:0e:16:e4:60:29:22:fd:e3:05:79:32:2d:da:24:4b:3e:
23:b7:fd:43:ea:a9:81:a4:dc:04:31:59:a9:0b:9a:c6:79:d2:
61:96:26:fa:6b:09:45:87:bf:00:de:54:ae:60:58:01:fd:b0:
3d:b3:ae:bf:f1:d3:26:e3:ec:58:f7:23:ee:8c:f5:e4:55:e7:
ee:fe:a3:56:7b:80:51:7f:44:25:f1:27:5f:86:b3:68:f6:4b:
0d:4f:65:45:48:36:ea:87:09:8e:4d:ff:7f:67:e6:9b:8b:5e:
16:03:f4:74:45:e1:69:c1:11:5d:1b:3b:9e:98:f1:f0:98:77:
48:19:1f:03:28:61:75:e8:e2:5b:27:bc:38:f9:cc:f7:ea:04:
ab:52:93:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:27:50 2026 by rpki-client