Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: Y0271ewJZZI9O3SIX1NymryZuYcNOj29Bo5PHOUvWdA=
Subject key identifier: 07:01:17:4F:CA:D9:14:22:AD:8F:F7:67:66:21:67:35:62:76:3F:A4
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 019F8F7ED6C67BE67D50DBC650C693235D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 15:01:21 +0000
Manifest this update: Thu 23 Jul 2026 15:01:21 +0000
Manifest next update: Fri 24 Jul 2026 15:01:21 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: +Uc704N8rpQvQY9vgLORX/yaeofyFfEUt7XCl5MKccA=)
2: _igUKCILIjVQGGkM5QULk2U3nBo.roa (hash: 20wqHq8/cCP5c8/7zi0IPefhfTG7SQ/Exh3yYB/ZfYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:d6:c6:7b:e6:7d:50:db:c6:50:c6:93:23:5d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Jul 23 15:01:21 2026 GMT
Not After : Jul 24 15:01:21 2026 GMT
Subject: CN=0701174fcad91422ad8ff7676621673562763fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:87:2d:a0:bc:53:18:9f:6b:35:6f:66:bc:8b:
55:83:fd:10:56:64:dd:c8:09:75:89:af:c6:26:0c:
81:31:75:a7:38:da:8a:ac:19:46:2d:fd:c9:c2:bf:
05:98:20:a3:40:1c:4e:7a:50:64:6e:1b:43:a9:1f:
c6:d2:01:6e:e6:f2:89:57:ff:8b:2e:7c:3d:c5:92:
f0:80:9b:03:7f:19:5e:80:7c:90:7a:a0:55:3f:1d:
23:8a:d5:f8:3e:1f:2f:c0:7c:ef:28:2d:d0:de:31:
a9:e8:a3:93:22:fc:f0:8d:53:c8:b8:33:74:8d:2c:
f2:05:0e:86:8a:26:4d:b8:cb:55:d1:df:f0:4d:02:
cc:88:a9:b9:a0:46:fe:d3:6e:c7:30:16:9d:0a:d0:
06:d0:74:cb:de:78:02:d0:a9:3b:7e:39:a1:b5:f1:
11:58:b9:32:0e:50:65:42:d0:79:c6:cf:fb:3f:d4:
45:1c:eb:b1:ca:f7:d6:1c:c6:2c:db:a3:75:e2:7b:
75:46:69:3c:dd:e0:eb:ba:66:61:00:0b:c8:b8:c4:
ca:24:d9:2c:65:1c:4f:9f:b9:22:47:66:c1:78:5b:
4d:35:e1:61:43:31:be:b0:44:7d:62:ac:6d:7a:83:
7a:cc:cf:b0:0b:f2:25:53:85:c2:63:a1:a6:f6:11:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:01:17:4F:CA:D9:14:22:AD:8F:F7:67:66:21:67:35:62:76:3F:A4
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b9:6f:ed:33:5e:f2:61:cc:12:55:d6:48:f4:d0:8e:b8:5e:
aa:ba:1c:0b:7d:46:ee:5d:15:e1:3e:81:37:80:11:cb:66:95:
a8:e7:c1:10:96:88:d5:dc:24:a4:44:2d:c3:1c:16:7d:77:05:
03:89:24:2c:b4:a9:7a:6b:7e:76:27:95:be:cf:39:6c:67:2a:
06:98:b5:ca:dc:db:c3:34:e1:c5:8b:40:cf:77:e9:4b:83:db:
f0:6c:00:aa:7b:f9:10:0f:3b:8c:7b:73:93:dc:0e:0f:b5:63:
c2:ee:62:d5:63:da:21:51:ff:ef:15:2e:81:6f:13:e0:1a:ab:
dd:33:1d:ea:0a:d1:c4:ce:3a:e5:4d:b5:3b:0a:bf:9e:0e:0b:
ed:19:a1:d2:dd:a7:6b:0c:bd:72:89:f1:b0:72:cb:d6:8d:3d:
08:0c:9f:95:1a:1c:fd:50:40:3c:2c:3c:dd:11:d5:11:00:78:
43:24:6a:49:cc:17:0d:91:58:09:96:ca:bb:f0:ae:11:14:71:
c4:22:ef:fc:72:6d:be:3b:e9:44:d7:a2:e9:40:9c:85:24:35:
d1:a3:3c:7a:97:ab:b9:d9:55:71:b6:bb:86:e4:a9:ed:e6:81:
47:ca:f5:99:db:23:9a:57:c7:ed:10:1b:14:f5:4f:b8:be:0e:
0e:5f:73:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:06:50 2026 by rpki-client