Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
File: rd0Ub21v9nQIRevKnN_kDHFViD0.mft (raw, json)
Hash identifier: LvdO4DFWOoBt6tvWCvGWhTW6okLTnXzNU082CJMXC/w=
Subject key identifier: 7E:76:B7:43:FE:00:A5:96:6F:36:7D:32:95:65:6E:6B:C2:FA:E4:98
Authority key identifier: AD:DD:14:6F:6D:6F:F6:74:08:45:EB:CA:9C:DF:E4:0C:71:55:88:3D
Certificate issuer: /CN=addd146f6d6ff6740845ebca9cdfe40c7155883d
Certificate serial: 019F8E6BC8A141DD0EE1732742F1D7BA3C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
Manifest number: F8
Signing time: Thu 23 Jul 2026 10:00:56 +0000
Manifest this update: Thu 23 Jul 2026 10:00:56 +0000
Manifest next update: Fri 24 Jul 2026 10:00:56 +0000
Files and hashes: 1: d8grn2wXk9vmfr4CPR5GIGOguek.asa (hash: GujxxEhlnqGN/956zXiB0ryPh7UxwhtfLKl2I7TE640=)
2: rd0Ub21v9nQIRevKnN_kDHFViD0.crl (hash: tQw6DO6Ngn54pYzuippjOCAwpjpqLJWAHcsBd/DGndo=)
3: zzfUeVmLO32C_ObHNHjJVH4U69M.roa (hash: ZfmRsyH3zUInl36WXMdR2VHEdQrA8f5h8j3VKz/Y+TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:c8:a1:41:dd:0e:e1:73:27:42:f1:d7:ba:3c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd146f6d6ff6740845ebca9cdfe40c7155883d
Validity
Not Before: Jul 23 10:00:56 2026 GMT
Not After : Jul 24 10:00:56 2026 GMT
Subject: CN=7e76b743fe00a5966f367d3295656e6bc2fae498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:9b:d7:4f:23:15:3b:ac:b3:5f:f1:ad:11:
56:16:51:45:a2:09:ee:3d:65:77:74:41:9e:f6:26:
e8:a2:dd:3b:3d:03:01:88:52:dc:f9:42:90:0a:5a:
93:da:b4:6d:6e:ee:e1:c9:b4:b2:41:1f:76:cb:30:
59:a3:be:4f:30:d5:61:af:a7:fd:43:68:3c:fb:7e:
b7:c7:b4:cd:57:a9:e1:a7:5a:f0:09:6e:5f:c3:e5:
cd:1f:a1:c4:43:fd:c1:55:89:04:9b:b0:0a:a0:50:
32:ee:b6:91:eb:2b:ed:58:ed:15:a8:4f:31:f3:b4:
37:36:c1:91:af:88:21:cf:c4:2a:73:b1:bb:4e:8e:
e1:b2:cd:85:d7:11:56:50:4c:42:7b:2d:cf:6c:f7:
43:f9:7a:0c:51:bc:a5:66:28:51:ad:90:86:e3:b7:
ae:9b:74:ae:1c:5b:02:cd:11:c5:55:7e:ff:fd:48:
bf:73:de:41:3d:78:7c:4b:04:a3:dd:72:e4:f2:86:
f4:6d:a4:cb:e7:7a:15:00:4a:d1:57:16:aa:31:98:
51:95:65:4c:d8:49:91:db:23:d4:fa:78:cc:23:4c:
bc:16:d9:35:8b:3f:0f:72:be:c1:11:27:4c:d3:bc:
f4:c1:3c:78:b5:46:33:f7:f5:d4:c9:89:be:3f:50:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:76:B7:43:FE:00:A5:96:6F:36:7D:32:95:65:6E:6B:C2:FA:E4:98
X509v3 Authority Key Identifier:
keyid:AD:DD:14:6F:6D:6F:F6:74:08:45:EB:CA:9C:DF:E4:0C:71:55:88:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:38:9f:e1:6e:d6:a6:5a:c0:6b:eb:5b:07:b3:03:50:50:f0:
84:f8:13:68:92:b1:b5:13:75:bf:b7:1c:4d:e8:a5:ba:76:34:
a1:9c:63:12:e1:cb:22:d0:9a:8a:eb:3f:5d:e2:de:29:6b:10:
37:e4:40:72:b2:f9:78:7a:83:d0:71:07:b5:4d:74:3d:f9:02:
a2:87:b7:a8:d7:09:c0:fa:98:15:18:c7:90:d7:35:78:d7:9f:
37:f9:18:7d:eb:3f:42:a1:63:4f:d3:ad:8e:c6:5f:ef:3a:50:
ec:11:09:8f:3f:d4:3f:82:99:e6:36:cc:66:30:75:23:c8:43:
52:86:da:9f:27:eb:58:f9:19:f4:6a:56:33:1d:b2:1b:0a:c9:
e8:81:17:36:d3:32:72:52:0c:5d:22:92:40:57:c4:ed:c3:6b:
15:d0:88:ff:5d:db:98:12:2c:0c:0d:3a:78:a2:97:98:e1:f5:
9a:13:4c:fe:19:cc:5f:63:23:61:b2:43:1b:60:e3:78:00:aa:
e6:de:21:15:ac:f4:db:b8:02:0d:bf:1c:d3:a4:78:91:14:20:
9f:c2:3f:4c:5e:fc:5e:5f:5e:fe:85:c3:20:e3:0a:1c:75:1c:
92:79:d5:68:e7:71:29:63:c0:0f:ca:f6:86:14:8d:1a:a1:00:
81:17:87:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:46 2026 by rpki-client