Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: t2/gutpSgZS0VZw2foiWct1tWJx/2+BTObYUucYrmUA=
Subject key identifier: 01:79:EA:AC:C6:FC:2B:9F:C0:1A:A2:C7:B2:2A:50:5D:59:62:70:57
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 019F8FB53F48C4BC3EF48A25C9726CEF8973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 140F
Signing time: Thu 23 Jul 2026 16:00:47 +0000
Manifest this update: Thu 23 Jul 2026 16:00:47 +0000
Manifest next update: Fri 24 Jul 2026 16:00:47 +0000
Files and hashes: 1: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: ujhWrxhjbbmf31uGLWchOYD/dW0yl6ayQdTiMmUAE10=)
2: iir-MP9u--5X9N6sLaapXHQB96w.roa (hash: KYgiiMZkt1y8OXMvRPUfLQi6b3EsUMCv28kMOUxnz3s=)
3: l8WM5SXhhLHZk6-0rTuPZujifDU.roa (hash: OwasY0cE4RjsEomhMQYGit6AbKnSUZ5M+37Aov/WE20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:3f:48:c4:bc:3e:f4:8a:25:c9:72:6c:ef:89:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Jul 23 16:00:47 2026 GMT
Not After : Jul 24 16:00:47 2026 GMT
Subject: CN=0179eaacc6fc2b9fc01aa2c7b22a505d59627057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5a:92:f4:15:b4:d2:dc:bb:6e:32:4a:16:8a:
e2:35:09:9f:2c:f5:04:66:f9:83:a7:7a:3b:fb:f1:
2f:5f:50:07:b5:16:5f:4a:b9:1d:28:7e:e0:c3:2b:
3b:dd:37:d1:02:5b:1b:77:6d:95:01:d6:ee:ae:92:
a0:df:f7:cc:e7:b9:34:b5:62:6d:9e:4d:cb:9a:b2:
c2:1e:c2:fe:c2:78:04:4b:2a:26:ef:9e:23:7e:72:
9e:e7:b4:65:97:4f:0b:9a:eb:d4:bb:f3:e2:60:b8:
d7:70:45:21:b4:a8:9e:d0:92:92:c8:70:d2:3d:a9:
b2:66:a9:80:88:02:78:8a:8d:9b:6f:51:7e:fe:54:
ee:e3:d6:f8:12:44:d3:f3:d5:9e:67:0c:18:91:cf:
f3:68:38:dc:6c:c4:9a:cc:33:e0:a0:7f:47:04:3c:
a0:ec:c1:d7:d1:cf:da:78:2b:ae:54:3f:1b:d6:5b:
ca:5b:85:bb:a9:39:8c:b4:aa:6d:1e:f1:20:f4:63:
1e:4d:4b:ef:9f:f5:2f:b7:ba:f7:63:a4:1d:ea:10:
c2:b4:d9:65:da:be:23:77:89:52:b1:49:12:e6:fb:
6f:58:55:fd:14:cd:45:76:3d:fb:15:30:db:6c:68:
22:04:70:f1:5c:ab:40:e0:59:92:53:17:3a:0d:bb:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:79:EA:AC:C6:FC:2B:9F:C0:1A:A2:C7:B2:2A:50:5D:59:62:70:57
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ef:13:36:2a:89:c4:1d:2d:91:2d:72:90:de:cf:f5:0d:76:
a1:ce:a4:2e:24:e5:31:d8:28:fa:c3:4b:1f:24:cd:b3:6f:45:
0d:fb:e2:5f:6f:29:e6:65:1f:0e:c7:22:f9:f5:5f:f4:d0:9c:
18:56:fd:78:b4:4a:56:6a:20:74:57:c6:d6:c2:58:e4:91:0e:
b5:ed:ba:78:b3:86:94:15:1d:7c:b2:1d:89:3a:cf:fe:a5:a7:
84:7f:a7:dd:8c:76:60:cd:28:8e:f6:8f:82:f5:46:c5:cf:92:
60:bf:a9:aa:f7:92:b9:7c:82:25:bc:2e:15:ef:4b:2c:4c:c0:
a8:a4:2f:f7:ad:8e:3f:79:41:40:ec:78:56:6f:9f:fc:3b:c0:
06:c1:9c:22:55:2b:ae:8b:6e:f2:49:79:53:a8:22:7f:8b:78:
fa:c6:ed:c4:cf:14:2a:06:7d:52:fd:74:d4:7b:0b:ef:cf:b5:
b6:20:c1:7d:24:db:fa:4f:cf:54:97:0a:57:1e:b4:b2:db:e8:
39:41:d5:16:43:ec:5f:43:2d:ab:4b:68:f1:24:c5:8a:63:1f:
e0:b5:c2:09:8b:36:a6:5d:91:dc:20:39:1e:0e:c0:47:52:98:
d3:c4:1a:20:3d:76:1a:14:be:1f:75:74:fa:17:c7:4e:d2:f9:
4c:7d:a7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:39 2026 by rpki-client