Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: mlVZqy5sp2OPBPonVmgj1lpASk9qiT5k0xic16FGiNY=
Subject key identifier: FC:96:73:BF:9A:2B:8C:08:7C:69:99:72:AD:A0:E4:F8:5D:68:BB:AA
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 019F90C7C3E8E93BC2B9AADCD1DF882F11D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 1134
Signing time: Thu 23 Jul 2026 21:00:38 +0000
Manifest this update: Thu 23 Jul 2026 21:00:38 +0000
Manifest next update: Fri 24 Jul 2026 21:00:38 +0000
Files and hashes: 1: 4-1jTpLuCOAg2Vrbi_YFCr92v_4.roa (hash: fO6SjPHBF8aFGKNbO8o4HrubgQPH9aKLn7J3+znKEj4=)
2: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: CM2GXqqbxQp1Pf3eWwRIq+uoyV8XhOWYUVRwW7ZauiE=)
3: Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa (hash: ArKoVR1HvT27XmVZlqzha6BxLY/5mnRJvZnwQwU+NF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:c3:e8:e9:3b:c2:b9:aa:dc:d1:df:88:2f:11:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Jul 23 21:00:38 2026 GMT
Not After : Jul 24 21:00:38 2026 GMT
Subject: CN=fc9673bf9a2b8c087c699972ada0e4f85d68bbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:f9:78:51:af:a4:69:cf:9d:26:9a:ff:86:
27:3e:28:56:14:03:07:c1:2c:80:c7:39:cf:d8:78:
48:35:cd:32:34:6d:12:2c:8d:a4:f5:7a:b0:12:13:
91:5e:f2:cb:3a:41:aa:8a:63:b0:11:7a:45:7f:00:
ca:d8:43:92:c5:db:fb:37:77:5d:fc:0d:3d:41:80:
9c:4a:8e:2a:a9:50:2d:67:c7:ad:c0:bc:d3:64:dd:
22:68:3a:b3:c0:a7:f8:83:e0:37:48:b4:4a:28:7b:
3b:d7:ce:ed:f9:79:f1:fd:7b:88:12:39:e1:a7:55:
8d:80:ae:60:41:ea:42:a5:32:60:f6:ed:6e:1d:79:
28:e6:15:a4:5a:12:a2:de:be:22:0a:9e:00:bf:06:
93:96:16:ac:8e:b6:ad:b5:9c:d1:0b:06:ad:c8:e6:
df:fb:39:f1:f8:90:58:b7:54:32:43:aa:5e:27:09:
99:8d:61:46:d7:90:5b:c8:37:d5:37:27:eb:6b:fa:
b9:a9:b3:0d:e9:63:97:30:89:a8:29:8a:4b:c0:34:
61:32:ed:6e:25:3a:e2:70:c6:8b:88:7d:c1:7b:6b:
4f:d2:5d:d3:c5:c6:84:49:b9:5c:97:05:06:62:81:
d9:33:ce:74:9f:14:90:17:0a:1d:88:35:01:97:49:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:96:73:BF:9A:2B:8C:08:7C:69:99:72:AD:A0:E4:F8:5D:68:BB:AA
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:14:bd:ba:22:99:9a:f1:39:db:c0:dd:c5:74:ad:b1:2c:41:
9f:28:e3:bc:e4:fe:85:4f:5a:86:12:78:65:a5:0f:12:69:79:
f4:c4:f2:db:6c:5b:4c:03:f5:6a:3c:cb:fc:db:67:d6:a6:e3:
bc:fb:36:10:59:bb:a3:15:a3:07:08:44:c2:64:72:cc:df:6f:
c7:f3:79:26:95:b9:5d:e9:ec:31:da:0c:92:3d:4a:43:9f:0e:
3e:84:53:bb:f8:ca:3d:b0:c6:30:22:32:3a:60:92:61:94:8e:
a5:84:db:97:38:3b:b7:7f:48:1c:26:0a:09:f3:f2:75:dd:15:
11:21:7a:2e:7b:2c:45:56:9c:54:7c:c1:18:d4:30:65:bb:16:
05:cf:cb:fa:87:f5:98:ce:b4:0c:a9:bf:53:85:9a:1b:4e:96:
c0:98:e6:08:17:cb:88:29:82:63:0e:29:4e:dc:70:65:29:b6:
28:b6:21:41:24:6e:f4:81:d4:ac:fc:0e:08:a1:d5:73:50:52:
a5:4c:24:4d:fb:07:53:91:7d:86:ab:5c:f7:63:eb:03:37:27:
69:d1:ec:e3:4d:66:7e:0d:4e:33:c1:be:9d:37:48:d8:ed:97:
25:fb:d1:d5:6f:af:60:91:19:3d:ed:a3:20:b7:19:80:1d:8b:
9f:14:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:29 2026 by rpki-client