Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: uY090RU3CDGNjiB5KMWC+W8SGvcdQOAx0JcVaSvk98I=
Subject key identifier: 89:0C:B1:E4:53:0D:95:DD:8F:4B:CD:97:C8:F6:BD:3D:A8:2C:28:78
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 019F927EEA18A252C7DFD882322EF046FD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 10BC
Signing time: Fri 24 Jul 2026 05:00:18 +0000
Manifest this update: Fri 24 Jul 2026 05:00:18 +0000
Manifest next update: Sat 25 Jul 2026 05:00:18 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: +QCGalsHrhHo4WfpBoLj9WEguw2INnjF8FIFu/RS/mM=)
2: LmCE4vBv57eU5WHq9fR2fqAFtRA.roa (hash: mnnr39ZVewAFhZkB5nyRtZi1LdwMDrlxlNTdJSgLeFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:ea:18:a2:52:c7:df:d8:82:32:2e:f0:46:fd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Jul 24 05:00:18 2026 GMT
Not After : Jul 25 05:00:18 2026 GMT
Subject: CN=890cb1e4530d95dd8f4bcd97c8f6bd3da82c2878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:21:70:f0:61:48:ad:40:6f:4d:8f:6c:16:
89:37:30:68:3d:d7:dc:80:da:ea:d8:fd:dd:d8:e3:
b0:f8:e2:1e:68:fd:60:3b:05:9b:eb:f9:eb:3e:88:
3e:37:2f:bf:35:68:dd:3a:8e:32:5c:7b:ed:d9:f2:
ff:cb:5b:1b:53:d2:56:f2:9b:1b:3c:03:ba:64:17:
a3:b6:2c:14:9b:3d:ac:bd:09:da:28:46:7d:0e:6d:
d4:a6:ce:d6:1b:3c:5f:b5:02:59:1d:c8:62:6c:97:
77:67:25:5a:2e:a3:17:f1:4c:83:20:7c:f1:22:77:
bd:7d:bc:9a:67:b5:25:d7:b5:5b:73:26:3a:09:bf:
78:e2:d2:4b:f0:57:f9:c1:76:1b:a6:3c:b7:79:46:
29:ec:78:02:60:48:96:9f:ba:48:57:5f:e4:5a:59:
c8:35:71:aa:87:e8:bb:1d:7c:d0:3e:0c:66:4c:b6:
0e:a5:f2:9a:23:65:a3:05:e9:2a:7c:6b:36:b9:76:
84:6e:ef:9b:7a:00:83:37:e7:bc:d8:cd:75:8c:97:
3f:bf:d7:4e:81:b3:66:ae:f3:60:bd:56:ba:43:e6:
f8:b3:36:51:b3:cb:69:b1:85:67:b3:96:31:de:d6:
19:83:bf:4a:f5:14:6a:b5:f8:b6:78:d0:2c:66:89:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0C:B1:E4:53:0D:95:DD:8F:4B:CD:97:C8:F6:BD:3D:A8:2C:28:78
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ce:9c:c2:1a:f7:8c:c9:3b:c8:e7:ca:32:1e:d4:78:0a:c0:
68:4a:d1:c1:cc:82:9e:58:be:76:06:50:9d:0c:e5:b3:05:be:
a9:7f:6e:e7:f5:0d:4a:6f:ae:37:64:7d:5a:0e:de:04:3b:d0:
29:02:ad:22:9b:ee:98:ee:94:d4:a9:cf:da:b7:c7:0f:2a:a9:
df:1f:75:2f:f2:60:45:21:59:82:0e:77:60:f6:83:7e:ee:85:
9a:3d:9b:4c:fc:11:18:8a:7a:c5:56:7a:83:56:27:36:95:df:
37:c1:21:48:9c:ac:44:26:e6:4c:87:78:43:ec:9c:24:b2:a8:
1a:d5:b9:cc:0f:b1:28:8a:39:0a:fa:49:40:e6:fb:2f:09:43:
10:66:fd:97:02:c7:79:e9:f6:9b:0d:de:17:8f:19:a3:5a:05:
b6:4b:c5:d9:5c:e6:15:2a:b8:56:88:99:7f:04:69:f2:24:5f:
33:0d:31:ff:86:84:69:33:bf:35:f5:73:a7:23:bf:c1:4d:5b:
49:aa:68:4a:6e:82:cd:12:a2:15:28:3c:85:1e:77:ec:52:67:
e3:de:2c:91:8f:31:13:c4:be:bc:bc:c9:62:21:c1:9f:b7:f8:
e0:a3:c7:97:a6:c1:2b:4f:be:f6:71:f1:6e:86:91:70:fb:4b:
ec:58:07:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:27:49 2026 by rpki-client