Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: XijPx3GzHx89fgfeTHi4B2QBKtJEtnQ8TnzgD+5RM8E=
Subject key identifier: E8:55:44:F5:77:FC:A3:E5:06:50:1A:B9:B8:2D:CD:4F:0A:9E:34:36
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 019F9135FD74BA966A598460595CB59AC9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 0D93
Signing time: Thu 23 Jul 2026 23:01:02 +0000
Manifest this update: Thu 23 Jul 2026 23:01:02 +0000
Manifest next update: Fri 24 Jul 2026 23:01:02 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: 1Kq5nMiURmeuYZuZVPGRbW1kDbvKyBBoNQRyuqpOLl8=)
2: VtA7L-Ct6vFTl20MYPEZtGoRDeo.roa (hash: b0yRFvx0OppSDXs/JuwIRB5JsNwcA2V2X9CKVLLR4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:fd:74:ba:96:6a:59:84:60:59:5c:b5:9a:c9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Jul 23 23:01:02 2026 GMT
Not After : Jul 24 23:01:02 2026 GMT
Subject: CN=e85544f577fca3e506501ab9b82dcd4f0a9e3436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:58:3c:0f:d9:6d:e4:f2:61:e1:95:44:9a:
10:d8:f3:79:23:51:bd:ae:6d:70:cd:c9:48:0c:34:
2a:74:f8:8e:66:24:71:26:7e:85:3f:b6:12:bb:68:
20:05:a3:30:f8:ec:60:53:ca:8e:9e:46:77:05:56:
ab:24:c2:b2:eb:2b:cf:dc:3b:72:30:ca:6c:34:23:
17:45:9d:e1:79:82:6e:ba:0a:4c:5f:9f:14:90:80:
2a:33:aa:74:37:a9:09:98:73:bb:7e:90:cc:df:be:
a3:f5:59:70:73:50:29:11:e5:b2:08:62:bb:81:3f:
c1:a5:b2:5e:49:eb:ea:cf:b1:cb:e5:1f:45:44:62:
a3:24:ab:ac:04:fc:f2:53:75:6b:96:47:d9:cb:ac:
65:48:c3:90:cb:21:4c:e0:c8:9e:f2:b1:db:26:76:
1f:e6:b0:4b:8b:87:ba:c1:c9:77:6b:ce:f6:63:10:
8d:a3:0d:e4:92:33:22:30:53:88:fb:cc:06:83:b2:
89:59:67:8a:c9:24:f1:d2:34:73:e6:71:f6:d9:e2:
44:88:da:b5:2c:dd:38:24:78:b4:93:4f:cf:18:9a:
c5:47:a6:c2:fa:b4:e3:ec:d0:94:92:13:7c:66:d2:
15:26:84:69:64:43:b4:a3:3b:67:61:86:43:2c:91:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:55:44:F5:77:FC:A3:E5:06:50:1A:B9:B8:2D:CD:4F:0A:9E:34:36
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d7:3d:6d:a5:04:c7:c0:07:b6:3e:88:b0:53:0c:59:fd:98:
63:f4:b6:19:38:a6:cd:ce:86:dc:b7:63:ce:00:4f:18:c2:37:
f4:02:74:5d:49:b5:40:a5:53:08:35:9d:c7:82:2b:3a:4d:ff:
30:89:9e:59:92:21:a8:68:f0:4d:1f:b2:e1:ec:0d:eb:2f:cf:
b9:48:c4:e6:a7:b3:a5:b0:76:d8:44:23:55:03:75:33:a3:0e:
8c:57:ba:f8:ac:72:bf:ce:0d:60:dc:54:1d:67:36:40:02:07:
10:e5:a0:e4:51:d6:1c:1b:8a:e5:94:1a:bf:ee:b5:b9:b1:2f:
3a:15:04:7c:1a:03:1f:06:77:17:45:5a:21:d5:c2:f4:c7:14:
f6:66:f4:e6:ea:d5:32:76:37:e1:cb:d2:b1:ee:00:08:78:75:
ec:41:18:e8:4a:c4:eb:18:e1:16:bc:16:ee:51:1c:3e:0e:63:
10:19:a9:65:34:36:1a:42:08:a4:3c:2a:90:92:72:ac:de:7c:
4e:8d:89:66:be:62:9d:9d:7f:86:4b:ec:1b:af:5d:e0:4f:b8:
04:b7:42:2b:6f:3a:66:fe:b0:51:85:30:64:47:81:33:cc:68:
dd:1a:ac:bb:6a:0a:80:a7:73:00:9e:ae:61:a1:ec:47:07:07:
ae:10:4e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:51:29 2026 by rpki-client