Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File: 8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier: cLnXamYtXELVnHTbkdxAmy89aYqf53Ljv4FS0qS3HNw=
Subject key identifier: 81:6C:54:47:32:DA:B2:0F:5A:C4:B3:6C:8D:E6:28:3B:BC:1D:91:0C
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer: /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial: 019F905A57513AF12C4F5E07B61C5C66A7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number: 07A2
Signing time: Thu 23 Jul 2026 19:01:07 +0000
Manifest this update: Thu 23 Jul 2026 19:01:07 +0000
Manifest next update: Fri 24 Jul 2026 19:01:07 +0000
Files and hashes: 1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: 5zw3cPL9CC2vXCCNzCVnOca833lTxs2F8pCIrBFozno=)
2: NpxIGcPNSR7M7Pg5DxBw4oq6qFc.roa (hash: /JiblaBoPoe2nZBA7SVm6e0ExqOkpFSs5xrzKMIO9LU=)
3: kSpQdj4pHKFVSlXJ4ce8DARPvac.roa (hash: kZtsdvWcO2A1I+qg+DhaJ9CEvwXS8FB59+ItpXgZAT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:57:51:3a:f1:2c:4f:5e:07:b6:1c:5c:66:a7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Validity
Not Before: Jul 23 19:01:07 2026 GMT
Not After : Jul 24 19:01:07 2026 GMT
Subject: CN=816c544732dab20f5ac4b36c8de6283bbc1d910c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:fe:fb:37:25:02:67:08:c4:0e:30:e5:2c:
87:11:59:8b:be:6c:0c:9a:70:7a:d8:ce:07:f5:04:
e8:93:6b:ef:6d:1b:c7:c5:28:9d:71:61:d5:b1:79:
9c:08:29:b0:9d:7b:25:cc:3a:5e:36:86:3b:90:2e:
fd:16:98:49:b7:7c:26:96:75:68:90:70:f1:16:66:
e9:a2:71:2a:5d:e7:94:6a:1c:43:c9:da:3b:51:3d:
95:7c:46:e5:85:78:1a:39:44:22:30:46:02:77:04:
2a:ad:2d:43:55:7c:60:9d:e3:47:12:e2:82:a5:54:
8e:b5:7e:83:b0:e4:ea:36:b4:ee:43:55:6d:33:ee:
31:b0:02:eb:60:71:9b:f7:7c:4f:4b:55:41:70:90:
62:08:15:51:6a:11:0c:1a:3d:c7:17:bf:b0:a9:50:
d5:e7:ff:29:9b:ad:15:1d:28:50:ca:12:27:1c:85:
5e:fc:fd:61:0b:5e:25:27:0f:c6:eb:2c:d5:50:c0:
b5:bb:33:f2:c8:99:6b:b3:c8:bb:63:e8:b1:c3:10:
82:32:1e:e3:42:9d:25:92:8a:49:9b:27:5b:af:0a:
4a:6f:24:70:e6:8c:63:2a:48:91:25:b7:57:bf:44:
68:f6:45:2f:71:94:db:41:cf:dd:af:76:27:49:d5:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:54:47:32:DA:B2:0F:5A:C4:B3:6C:8D:E6:28:3B:BC:1D:91:0C
X509v3 Authority Key Identifier:
keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d5:ad:9c:31:34:52:5e:a3:89:2c:be:9b:e2:e5:e8:cf:8c:
62:e7:27:05:e4:d3:a8:41:ee:f1:6a:f8:0c:18:8e:eb:e2:e1:
19:cf:d6:42:1c:d8:12:27:99:24:14:53:3f:83:46:10:0b:59:
d2:03:02:3d:55:99:23:a4:0f:6d:79:c3:97:21:cb:a2:c4:96:
a2:53:75:26:1e:93:60:88:28:97:be:5e:1d:74:67:95:27:cf:
73:39:72:8b:39:04:d1:a9:73:cd:e1:83:61:51:8b:93:0f:af:
06:f2:d7:c2:ce:87:3f:2e:6b:4b:57:e8:7d:e3:f9:15:b1:fa:
c5:55:0f:9e:ab:ea:e3:c9:3a:05:42:d9:49:e8:c6:5a:53:c5:
52:f3:92:0d:09:8f:cd:cc:a5:86:49:8e:9a:86:bb:04:b3:9d:
c2:f6:81:e7:53:e4:c8:8a:f7:c7:0e:14:e0:a2:eb:44:b4:41:
dd:12:f6:92:6f:a7:d2:57:2a:31:30:0b:6c:db:bf:9a:d7:b9:
5c:37:70:f5:1e:6a:49:0c:21:83:fc:c6:32:8e:21:d0:9b:3d:
d9:43:92:1f:10:5b:13:34:e2:dc:87:33:a2:c2:53:b8:f3:c2:
8b:1a:85:3b:39:42:84:8f:16:a7:6f:81:83:cd:23:d6:ed:f5:
a0:de:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:23 2026 by rpki-client