Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: fTbk+NmX+zl5oGW4q1zAURzGyiJC4eAU9eIeY1mFT5E=
Subject key identifier: CF:32:CB:F9:BD:FB:E6:0C:32:56:5A:31:C0:EF:34:B3:6F:07:64:E6
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 019F93919D53C693799BDA53097A894C96F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 16B4
Signing time: Fri 24 Jul 2026 10:00:21 +0000
Manifest this update: Fri 24 Jul 2026 10:00:21 +0000
Manifest next update: Sat 25 Jul 2026 10:00:21 +0000
Files and hashes: 1: 2pSmfbphSDb9Cqxh8NYcKQtlp1o.roa (hash: maKyyaI7uWNQa13JatdDTrRmvHHlkhB9HEz590CRzd8=)
2: lNntVwqmP1g050CVm9YpSl35H2U.roa (hash: dV1Mh9n/uRu+yXT900FgqLc47Mey+zbCu4y2cZxScc0=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: 1A5ZRHWSp16o6/kSWmMM7tW3ZEJ08gCYHb0g0TZoQbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:9d:53:c6:93:79:9b:da:53:09:7a:89:4c:96:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Jul 24 10:00:21 2026 GMT
Not After : Jul 25 10:00:21 2026 GMT
Subject: CN=cf32cbf9bdfbe60c32565a31c0ef34b36f0764e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3f:b9:30:41:8c:2f:cd:8c:d1:5e:d1:25:29:
4c:70:ee:53:96:5d:bb:7c:8d:e7:94:e4:3f:f7:de:
22:7c:d2:3d:2d:a1:b0:2a:6c:bc:3d:59:6f:cf:69:
ba:26:ae:fe:20:20:b2:39:96:2d:0a:46:ef:dc:2a:
a7:e3:36:f8:28:e5:7f:36:6b:b8:8a:a6:ca:90:b1:
46:29:ea:de:34:d8:9a:d7:a1:99:d7:d4:4c:a6:07:
19:b0:42:5e:a7:c2:4e:7b:7e:d1:47:d7:f6:0a:e5:
b4:20:38:9e:5b:a5:c2:11:6e:22:37:e8:1f:29:e6:
9f:f7:49:7d:84:16:69:ee:33:f1:3d:0e:67:32:8e:
ad:d1:e7:f1:72:b8:99:66:d4:fc:04:2e:e4:4c:39:
26:66:1e:17:4a:08:66:7f:ee:8a:ad:47:c3:6a:17:
ac:3c:ea:89:db:44:15:75:8b:b0:2d:02:7e:b5:58:
af:42:57:68:f5:65:96:11:9d:8b:ef:d0:47:40:e2:
b7:51:16:e3:d6:67:c4:eb:5b:2e:a7:58:f6:23:d5:
44:90:d8:68:7e:77:b4:72:26:f2:63:6b:79:00:c7:
61:a0:12:0f:a1:fc:c6:78:69:d5:e2:6f:5c:4c:a3:
ea:dd:a4:77:1e:06:4e:01:51:36:a4:8b:ed:41:05:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:32:CB:F9:BD:FB:E6:0C:32:56:5A:31:C0:EF:34:B3:6F:07:64:E6
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d4:68:fe:e7:36:32:d7:61:f5:e1:a3:03:cc:2d:fc:44:29:
af:a4:bf:1d:e3:5c:40:ff:66:ff:d7:5e:a5:e3:62:d6:d3:c9:
8d:6b:77:de:75:a2:2d:6d:c6:c2:62:a2:01:9b:6e:00:48:5a:
5d:9d:f7:64:03:59:cb:19:a4:a7:aa:63:b8:d5:a7:7c:cc:dd:
fd:6a:63:f4:ea:12:82:23:75:ed:fa:1c:0e:87:03:03:94:27:
71:ff:ba:73:56:fb:62:15:bb:c9:aa:49:f9:31:4f:9b:eb:ef:
3d:b2:c9:17:55:a6:10:41:dc:c7:a1:7c:ff:f7:22:3a:f7:91:
88:6a:fe:5f:d2:4f:ea:9d:ec:d1:a0:46:5d:2a:51:6f:e5:3f:
fa:f1:29:aa:cf:4a:64:34:75:9b:7a:12:f5:47:40:78:c2:1c:
6b:2f:dd:54:4e:46:ce:ed:9c:25:34:d8:fb:6c:83:8b:b8:fd:
0b:3e:c8:c4:af:16:cc:91:ff:06:5b:85:8b:35:d3:4a:25:a7:
2d:b0:c4:35:09:65:20:3c:72:95:7d:0d:a3:72:4c:50:78:73:
54:fa:a9:21:7a:38:be:79:01:12:c8:b5:02:02:c6:41:35:f4:
ed:3f:97:82:cd:85:45:85:d3:e7:1b:15:d6:5c:3a:44:d8:ad:
66:07:09:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:26 2026 by rpki-client