Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier: tZYzELZ4HyzZsOos1pPJv2YaJdJYzzhR+P7Ys77TuRs=
Subject key identifier: 2F:81:05:BE:5D:41:08:81:D8:4E:07:AA:6F:14:04:29:F3:52:DA:9A
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 019F9059A949CCBABAF8EF99617CBB78729B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 19:00:22 +0000
Manifest this update: Thu 23 Jul 2026 19:00:22 +0000
Manifest next update: Fri 24 Jul 2026 19:00:22 +0000
Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: SS8a+X/EaxKEvxkNb/BxnaAGNOJOdOhRCvsU7A5nxdU=)
2: 9g90EbWmc6BJchDyUX4pQOV_PqM.roa (hash: 5bDGEQi2LTAictj/wkSLC8c8gl+A2erEIQu+tlRO84s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:a9:49:cc:ba:ba:f8:ef:99:61:7c:bb:78:72:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Jul 23 19:00:22 2026 GMT
Not After : Jul 24 19:00:22 2026 GMT
Subject: CN=2f8105be5d410881d84e07aa6f140429f352da9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d0:aa:44:28:42:80:6a:46:d8:2b:d9:88:2e:
23:90:c8:b1:bf:a9:63:0e:04:05:88:46:85:da:74:
ad:cc:c4:aa:94:01:c8:f1:f0:f6:82:46:7e:83:6c:
92:d6:51:3d:a2:cc:57:c1:73:5d:3a:39:07:fe:68:
92:9c:19:be:9e:e7:b1:92:70:5b:57:c5:86:c4:fa:
1c:0b:36:e5:80:07:29:9f:0e:17:a0:28:13:1e:d2:
ff:b6:24:3e:25:55:4e:e5:3f:de:16:33:90:88:cf:
9a:69:af:ce:8c:2d:5c:53:8b:46:a9:2b:83:fc:93:
f2:ec:ec:f1:41:94:e3:64:db:9c:8e:07:08:ad:22:
61:ca:e4:56:47:14:83:87:e3:54:d6:9b:0f:bb:30:
a5:80:4d:d7:ea:e7:48:28:bd:ab:ac:f5:d8:fa:9a:
90:6b:22:21:2b:e9:ae:f9:08:9e:ad:c3:80:22:86:
4c:25:e8:ff:cf:ae:c5:7d:a6:ff:2b:db:10:f9:73:
e3:b3:f3:41:5d:f3:d1:d8:96:81:a3:79:18:86:e1:
72:2b:55:5c:3e:c9:c3:18:42:ad:ad:7a:62:84:f4:
c3:50:8a:5c:d0:5b:39:12:51:66:2b:a6:12:7f:c3:
d7:76:ac:cf:59:d8:c0:e2:34:27:17:51:48:6a:44:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:81:05:BE:5D:41:08:81:D8:4E:07:AA:6F:14:04:29:F3:52:DA:9A
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:68:c1:a3:e1:75:09:3f:ea:e6:d3:e5:41:42:15:45:e7:19:
64:35:8a:d1:03:53:db:f4:aa:5d:5c:14:fe:b7:aa:30:5f:3c:
a3:d8:eb:27:27:66:b4:74:6e:0d:b4:2d:8e:d6:61:3b:fc:92:
a7:56:79:98:56:cb:34:a4:f0:09:d9:30:db:d0:24:de:4d:5e:
4f:95:78:6c:d4:d7:23:4a:dd:fb:38:dc:a8:7a:57:2f:8a:5f:
cb:af:82:19:85:6f:6d:d8:8e:d8:07:3c:5d:77:82:6b:04:a4:
fc:4e:65:ec:2c:93:aa:05:28:cd:5f:7e:96:05:ac:39:44:96:
c0:1a:38:99:8c:11:c0:83:9c:37:ca:58:5f:f9:e3:ef:19:09:
68:ae:23:74:be:68:dc:de:c6:da:84:d1:24:8f:78:0a:f8:4c:
03:ee:fe:72:e1:b0:d3:5a:27:65:60:98:f7:e7:a4:f1:8e:e3:
56:99:9e:66:28:2f:c3:3a:be:ce:fc:37:6f:c0:7a:89:24:d9:
a9:7a:5e:65:f9:fd:cc:2b:ba:8d:63:a9:9e:7b:89:77:f2:81:
37:03:7a:23:f1:77:86:b3:a2:b4:b8:8c:d1:45:25:b3:07:09:
86:98:0f:92:d2:ab:6d:d0:c4:08:88:43:7b:75:ce:b9:b3:21:
d2:c0:7b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:14 2026 by rpki-client