Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: 4OZZvR+J3ty0OndT2Ew6+m0SyOK7Iboj+Ljun1N13kg=
Subject key identifier: CF:8F:2F:AF:9C:B9:67:B9:29:0C:E4:72:74:EC:E9:DC:41:94:E7:C9
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 019F927EF21A344E4F3C7C654FFC63F67D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 1471
Signing time: Fri 24 Jul 2026 05:00:20 +0000
Manifest this update: Fri 24 Jul 2026 05:00:20 +0000
Manifest next update: Sat 25 Jul 2026 05:00:20 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: Ple84vwmVXEmBIzrSoKZt3firU2LwTVBRjMoHmSmTQI=)
2: 9hD2ERgxFZRceTwyPk94l0SmsBw.roa (hash: 7W+094dJdVnFZLMoB+fr0KNBxnfuASm7T/kRouyIeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:f2:1a:34:4e:4f:3c:7c:65:4f:fc:63:f6:7d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Jul 24 05:00:20 2026 GMT
Not After : Jul 25 05:00:20 2026 GMT
Subject: CN=cf8f2faf9cb967b9290ce47274ece9dc4194e7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:c4:ec:32:ad:a0:62:51:3a:76:a9:a6:8c:
c1:33:96:3a:ed:0e:13:87:f7:8e:35:77:ee:97:b5:
a9:e6:03:36:f6:2a:cb:a5:36:76:4f:b3:30:60:fa:
80:2d:31:e5:4a:2a:05:49:ad:e7:dc:fc:9a:e0:c3:
10:2e:49:12:ca:53:77:5f:0e:98:0f:15:6a:73:c2:
3e:3b:82:a2:f9:df:d4:6b:61:4d:1a:c8:b9:ea:b7:
8c:7b:15:30:37:24:a4:37:63:63:de:42:a6:de:1e:
6e:b0:85:77:07:22:57:78:69:fe:53:4c:82:08:6f:
15:bb:a3:aa:db:5b:86:97:d8:17:31:ff:1f:66:cd:
44:f4:ea:78:aa:40:56:8f:14:6f:34:07:8f:7d:5b:
1c:a1:d9:f2:cf:d8:16:37:1b:4a:7e:34:6a:9e:79:
d7:f2:72:8d:1c:f1:18:29:49:e5:bd:3f:04:8d:53:
a3:8b:37:fd:3d:d0:9d:61:ce:f7:95:2b:84:0e:6e:
fe:df:65:82:19:91:0a:70:02:88:e2:96:74:89:ea:
4c:c8:49:dc:25:b6:27:30:92:0a:99:38:0a:97:1c:
d1:1c:e6:09:02:88:a4:09:2f:43:45:30:d1:71:92:
58:80:8c:55:f8:fe:55:c0:8f:3c:4e:fa:b5:fe:5b:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8F:2F:AF:9C:B9:67:B9:29:0C:E4:72:74:EC:E9:DC:41:94:E7:C9
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f6:ff:99:67:a8:b9:55:86:cf:6e:a6:32:a2:f4:ad:7b:bb:
8d:91:a3:e1:9d:ba:79:3d:2d:eb:a7:68:95:95:fb:9a:0d:01:
03:7a:e5:c9:6a:e5:db:ae:e4:6d:b7:26:49:34:75:01:ad:90:
45:ad:cc:45:dc:58:cc:4e:39:5b:c4:f9:3e:83:9a:3f:4a:a7:
f5:d1:6b:65:23:f3:d5:a6:70:fe:2b:17:25:a5:2e:44:e7:e6:
af:2d:8b:80:21:39:d9:39:66:7d:49:8c:77:e2:92:da:e6:51:
b7:07:6a:1f:e5:11:af:4b:d0:3d:cb:f7:c0:2e:0b:a6:b9:c2:
d9:a8:76:f3:83:90:9e:f5:bb:a5:8f:91:74:b9:16:f0:5c:05:
a3:db:ef:c6:86:f7:d7:12:49:e1:98:0c:87:e1:9c:a1:67:8c:
44:83:ab:23:31:f5:89:53:7a:86:ad:5a:6e:29:6b:e2:7e:04:
6d:6c:a3:10:5b:74:95:1d:34:fb:39:4a:8e:b9:f2:9c:e9:b8:
d9:b4:79:42:8d:8b:a7:e6:4a:42:a5:c8:82:7a:f9:e0:64:df:
ea:8c:b2:a3:c7:f1:70:9a:f0:21:bf:d9:d3:aa:8f:fa:51:fd:
29:d2:c3:bd:6a:12:e6:97:7c:7c:6f:36:6e:3e:17:42:b0:b5:
e4:2e:3b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:57:11 2026 by rpki-client