Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier: CoDpeXG5jFa+r9QHgM63lo2PHOSbeJ8bBR0/pbxI0U4=
Subject key identifier: 32:D3:AA:BB:CF:06:4D:F3:D4:44:86:F1:BB:16:39:3E:DE:66:50:07
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 019F91DB07844E9C7684482B5BEE7627A698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number: 0A8E
Signing time: Fri 24 Jul 2026 02:01:18 +0000
Manifest this update: Fri 24 Jul 2026 02:01:18 +0000
Manifest next update: Sat 25 Jul 2026 02:01:18 +0000
Files and hashes: 1: ALLGVKP-5SXjVEpjuKZaujJ3frw.roa (hash: 2IbnRTYsIxpxMkgjyLztl2mAatRyrBZ2hVeLGo8g2qQ=)
2: ATMfOPn_iklWkDGZaU6nBEYrMIs.roa (hash: MkgqGmH4i1AY83gSH/fJ/hLhxo7uHROhQ+deiJMJQps=)
3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: y0uV3FdUtfb5Q1ytGbRip6s3l7fwXBAWHkmH8j8fXCc=)
4: gd0apcrdYEI4bPnkTNGJSM4gRa4.roa (hash: p+dDYEXfjkS2FAsmztfw4NEl9rJExwTKxbBp/O3yJJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:07:84:4e:9c:76:84:48:2b:5b:ee:76:27:a6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Jul 24 02:01:18 2026 GMT
Not After : Jul 25 02:01:18 2026 GMT
Subject: CN=32d3aabbcf064df3d44486f1bb16393ede665007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:bc:ff:d4:b9:ed:d9:a4:2c:79:76:56:f1:
2e:c3:55:90:37:4b:26:46:df:c1:6b:04:bb:f1:44:
15:da:91:ba:36:24:db:f7:c4:06:5b:40:0d:7f:66:
34:7c:c5:34:17:82:04:c9:35:c9:47:72:6a:1c:af:
fb:f1:84:07:ac:f7:3e:67:ce:bb:2a:ac:5a:8f:90:
53:34:2c:30:16:6c:3f:cb:d5:0f:63:5f:89:44:1b:
ce:30:b4:37:bf:70:e0:90:09:b4:06:21:7f:58:24:
1e:00:e1:5e:ee:0f:67:a7:c0:d2:1f:bc:ec:56:3e:
97:2f:6b:24:a0:8f:2d:a9:d0:2c:7b:75:c0:0e:00:
db:06:90:a7:c1:8a:ee:8c:e3:63:0a:63:63:37:69:
39:c6:d2:11:b5:26:14:60:e9:eb:35:8a:6a:6a:75:
6b:ae:81:d0:93:3f:4a:0f:7f:f4:6a:cf:bd:7c:c7:
65:59:c1:1e:ab:36:a1:ab:c1:a1:d4:59:10:47:26:
b0:57:74:99:a6:28:3e:a1:b1:af:2a:cf:60:94:f7:
da:ae:06:95:f5:51:5b:8b:bc:9f:e7:ad:35:25:1b:
f5:ea:42:a7:1f:03:b1:85:ab:53:fb:ce:34:c2:aa:
e3:56:4a:18:0d:fd:a5:db:6a:bb:80:88:66:86:fd:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:AA:BB:CF:06:4D:F3:D4:44:86:F1:BB:16:39:3E:DE:66:50:07
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8b:33:9c:a1:f1:b0:b7:d7:8f:c2:b1:ae:f5:cd:ee:fa:ec:
ba:f5:65:cd:87:4a:be:a2:da:6f:c1:c2:05:55:9c:83:29:6b:
b7:54:ab:bc:73:ec:96:f5:49:80:31:05:1d:21:7e:8a:95:7c:
75:83:f8:c7:a1:ba:1b:08:b2:59:27:f5:52:5d:a9:5d:df:71:
d3:2e:9b:14:a2:ed:cc:f4:79:b3:91:ab:3b:4c:84:ee:2b:91:
8e:11:b4:8d:d3:e8:a9:e7:d9:05:3a:47:73:c6:8d:be:da:3f:
51:d7:f7:72:dc:af:67:bf:ca:44:ea:77:9b:0f:ab:5c:68:b6:
4e:42:1f:56:3f:f2:89:65:14:3e:ef:23:48:02:a7:52:0e:c4:
20:d2:9a:ee:47:eb:17:11:f1:3c:da:fd:44:b4:67:f5:a9:6a:
dc:6e:85:0f:c5:06:85:c2:a4:3b:f1:11:44:db:bd:e8:14:cc:
2c:58:35:f8:59:a5:86:25:5c:55:ca:c1:4e:28:dd:e3:3a:6c:
ab:24:69:6b:0d:21:57:cb:bf:ad:36:de:37:a3:26:59:e0:a4:
e3:86:c5:f8:6c:7f:41:41:77:1d:25:0e:ed:14:b3:e8:92:7c:
76:20:b2:33:22:a2:78:94:fa:cd:04:35:6d:80:f3:e6:da:8f:
4c:a1:0e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:37 2026 by rpki-client