Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: qqZtCH0JeMJW1xZjQTpSaWHAmkNsrav1bepMkIMfxms=
Subject key identifier: 99:2D:1D:C8:38:BB:F9:13:00:A9:3A:C5:69:77:DF:B8:69:55:C8:E0
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 019F8F102065981AEBAF92BC25DC756B3DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 13:00:26 +0000
Manifest this update: Thu 23 Jul 2026 13:00:26 +0000
Manifest next update: Fri 24 Jul 2026 13:00:26 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: I+jPi0OYleDiGQ2Zp6wdqv5LFddJStGBitYrUmhT72Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:20:65:98:1a:eb:af:92:bc:25:dc:75:6b:3d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Jul 23 13:00:26 2026 GMT
Not After : Jul 24 13:00:26 2026 GMT
Subject: CN=992d1dc838bbf91300a93ac56977dfb86955c8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:72:43:b0:ed:db:cd:14:19:b1:82:0c:f9:
16:96:b5:92:5f:74:e9:5b:5b:86:f0:8b:30:d6:ab:
a8:45:71:55:72:28:f3:b6:62:e0:e8:55:b4:fe:c7:
aa:a1:2c:19:1a:fc:10:42:c8:e5:f8:4f:43:0a:d2:
fc:d0:e7:a8:27:5a:ed:22:af:3d:c7:07:a1:3b:c2:
28:db:14:a0:42:d7:5b:16:e1:b6:23:51:2f:cd:b8:
e6:5a:ec:47:f2:66:ce:39:73:dc:f3:61:5e:9a:bb:
a5:2d:e4:d8:f5:21:48:ab:a5:b2:8f:8f:b5:c2:b1:
51:d5:bb:03:3a:05:99:59:78:34:cd:60:73:54:1f:
c5:20:9d:91:94:13:91:91:b2:7a:6e:fd:9d:48:82:
22:90:e7:c2:69:c6:9e:83:87:1d:4a:fd:c5:93:bb:
93:c9:e0:ca:2f:ee:ca:d3:8a:31:3c:c1:e5:46:e6:
4f:75:f9:f0:d5:3c:25:d9:d5:54:63:74:6e:a7:a3:
e0:a9:0d:e6:74:77:bc:2d:53:68:7e:8b:00:b6:6b:
5c:65:b8:1c:46:ad:18:15:e4:98:a0:be:31:50:53:
07:e1:db:e9:c9:7e:43:e8:87:6e:90:04:c0:a6:ae:
e5:46:65:e0:e2:86:6b:77:3e:0b:fc:0b:b3:20:ab:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2D:1D:C8:38:BB:F9:13:00:A9:3A:C5:69:77:DF:B8:69:55:C8:E0
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6a:ad:bb:39:b5:14:1b:52:af:4d:fe:64:69:35:f0:ee:74:
83:e9:7b:22:8a:64:2c:82:f0:8e:a2:20:87:6a:d1:2c:9f:b2:
9f:9e:f4:bd:7d:63:ac:e9:26:a9:69:ea:43:fe:c8:a1:7c:0c:
3f:6c:f1:74:22:8f:5a:74:7a:39:6b:cb:c8:c4:a1:c1:fc:e4:
a6:4f:b7:cc:c2:39:88:c3:90:07:09:5f:f3:26:c7:dd:54:6d:
0e:e1:81:3b:17:2d:f1:bf:1f:4d:be:95:21:3d:2c:b6:5d:d8:
8c:5c:b2:06:f4:e7:3c:f8:66:ad:49:59:f3:c8:40:16:91:70:
91:5e:d9:40:fc:77:65:c9:c3:20:a2:fe:da:4c:a9:e0:c2:5a:
a0:e7:1b:5e:cd:b5:ec:94:b0:b6:79:f6:a8:25:ec:bd:ef:1f:
ba:70:63:83:e9:19:96:0c:bc:34:f0:6b:05:91:e8:a6:b5:fd:
1d:9a:9c:fd:f9:99:56:e9:0c:b2:24:d1:38:71:c1:a5:8b:f5:
69:61:fa:e5:e8:fa:7d:0e:1a:21:73:e0:5e:80:8b:f0:9c:f4:
b9:d2:22:44:aa:0f:5c:b6:f9:b1:0e:4a:3d:97:5e:d7:5c:1a:
b0:4b:b1:de:6a:62:ed:f6:bb:39:31:55:f2:48:df:7a:c8:c2:
2d:64:b4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:53 2026 by rpki-client