Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: m5MSA3cxc5d64aH8wtntce1VV8EZ/wSrt/gceTHcVVE=
Subject key identifier: B4:32:E8:C2:80:FE:33:80:7D:8C:D0:AD:8A:6A:8E:D7:3C:2F:F3:35
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 019F8FB53BCA33770457DAA72E24BFDBD1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 1153
Signing time: Thu 23 Jul 2026 16:00:46 +0000
Manifest this update: Thu 23 Jul 2026 16:00:46 +0000
Manifest next update: Fri 24 Jul 2026 16:00:46 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: vh1j0a9kMwxKS51Ku6pLJ0xf007OS0cTkI2x2K+GYwU=)
2: kAZmzQ0U-tWvr0f-02x69bXjUAU.roa (hash: 5WlvJHiQOeb7v4dnN4FdtefOtV8drHOu9JZO31PSCrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:3b:ca:33:77:04:57:da:a7:2e:24:bf:db:d1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Jul 23 16:00:46 2026 GMT
Not After : Jul 24 16:00:46 2026 GMT
Subject: CN=b432e8c280fe33807d8cd0ad8a6a8ed73c2ff335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:d4:94:b6:37:5a:4b:f2:ee:18:69:36:de:
fb:81:b0:38:31:04:35:5b:e1:9d:c3:f7:a3:1a:54:
de:58:c3:a6:c4:aa:2b:bd:9d:70:9c:d6:56:51:32:
4a:6c:5c:02:aa:db:67:97:17:99:24:4b:29:8a:4a:
9a:14:e0:d1:96:b9:ad:eb:74:93:7d:cb:69:24:8c:
72:92:46:6b:f7:f2:0c:f0:2a:aa:db:0a:8d:da:90:
02:cd:c9:51:21:36:db:0f:41:24:9b:23:f1:c8:db:
60:6e:ec:b1:0c:f3:aa:34:dd:f4:b1:a0:63:df:8e:
fb:a1:6b:c2:ce:1c:0b:9f:30:8b:9c:e0:42:e0:cb:
be:46:c6:eb:97:30:b5:74:77:a6:21:54:2d:64:84:
eb:bf:88:18:96:01:d1:e4:ce:0f:8d:9d:20:c4:7a:
14:72:94:15:11:8c:63:66:eb:2f:1a:62:90:69:54:
9c:1f:5e:df:bc:1b:22:0b:10:47:c5:f3:ba:77:94:
05:a3:d7:d6:f1:74:a8:46:f6:f6:73:d7:d6:8a:22:
7d:1d:f2:ad:2f:4b:33:37:86:19:6b:79:01:78:d1:
34:bf:ed:3c:26:36:8f:e6:98:a9:5e:3c:31:18:b9:
4e:5e:b5:e6:1f:b4:3b:5b:11:82:60:b9:81:1b:bd:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:32:E8:C2:80:FE:33:80:7D:8C:D0:AD:8A:6A:8E:D7:3C:2F:F3:35
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:09:32:d1:75:bc:70:93:8a:fe:aa:97:77:92:df:7b:3e:2c:
db:c8:a5:19:f0:e6:62:27:e3:cf:da:0a:ef:86:c9:de:f2:fb:
c8:49:ad:cd:d9:5e:95:34:b8:8f:70:68:4f:37:b7:e4:73:dc:
a4:d2:81:44:d6:4c:4f:d3:02:30:00:5a:e4:0f:6c:b2:6c:f3:
67:5f:86:5a:bd:a7:65:eb:96:18:eb:9f:e5:3f:22:0e:94:2f:
c0:dd:29:25:ed:80:06:68:bd:08:2b:89:70:59:88:0c:19:df:
f8:14:f4:ea:50:88:60:5d:22:a5:0b:f8:d5:6a:6e:af:24:78:
be:97:0f:99:45:53:f7:20:51:47:c0:7d:61:96:52:37:f2:d3:
80:f3:20:a4:da:b4:26:24:ee:3a:2a:9a:fa:4c:03:98:2d:76:
cf:7a:3b:a5:a3:f7:bd:65:10:53:d9:70:c4:cb:36:f1:ed:f7:
e9:5b:ae:ba:3d:f4:03:63:5b:37:d4:18:c5:cf:41:68:22:72:
e8:95:14:00:ee:9c:ca:cc:ea:d5:e0:ca:b3:7e:3d:86:bd:94:
74:48:e1:6c:08:e0:45:48:34:fe:e8:bd:99:a7:01:a0:75:48:
08:ff:f3:4e:c3:19:6c:3a:06:15:73:4f:d9:16:49:d9:c3:08:
11:94:41:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:47 2026 by rpki-client