Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: DZNjaeHIEvDQ28/lP8ceivmUUPvpU3Rw+2sSviBLAhI=
Subject key identifier: D8:68:9E:26:AF:13:15:14:97:49:EB:1E:EA:98:9F:71:9A:1D:BF:08
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 019F90C842731F5466056A2975E5AB6A9699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 1258
Signing time: Thu 23 Jul 2026 21:01:11 +0000
Manifest this update: Thu 23 Jul 2026 21:01:11 +0000
Manifest next update: Fri 24 Jul 2026 21:01:11 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: PA8ZJBmTCFgZfZar5aiLmjKck/piSm26MJgi8l0hseo=)
2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:42:73:1f:54:66:05:6a:29:75:e5:ab:6a:96:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Jul 23 21:01:11 2026 GMT
Not After : Jul 24 21:01:11 2026 GMT
Subject: CN=d8689e26af1315149749eb1eea989f719a1dbf08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:0c:e1:40:ba:94:09:d1:76:bf:ad:b6:da:
ae:e0:7d:fe:c8:f8:5f:c6:ba:f6:e1:59:34:0e:cf:
e6:f6:90:37:e8:84:ab:bc:78:d6:ec:e1:ef:f3:5d:
0a:52:4b:84:6d:f8:f1:b9:f2:70:f0:37:02:57:4d:
77:7d:42:4b:d9:79:09:e4:50:97:5b:c8:fe:25:b5:
8c:cc:4e:4b:95:66:92:5b:27:64:3c:97:5d:38:f4:
be:4b:cf:0c:26:75:c2:a8:ef:b0:8d:c4:06:73:62:
a7:e4:53:05:df:a9:5c:1e:87:ee:72:d4:be:07:07:
00:e9:b0:fc:e4:d4:95:f1:06:4a:4e:ab:19:00:83:
0d:fc:d1:09:93:bd:6a:da:8e:92:2e:1a:88:d8:f4:
52:74:cb:6f:9e:4d:b8:36:19:53:af:b2:93:2c:98:
91:19:df:ed:32:25:0c:81:3b:6e:b9:8d:1b:16:bf:
58:58:d2:48:98:bd:7f:8d:7c:8c:13:44:3e:02:8e:
ca:05:75:52:ef:0e:be:67:b8:be:42:df:f9:42:22:
47:cc:af:c2:70:b1:bb:21:74:9d:ad:82:10:67:c8:
8d:d5:86:c5:fb:6b:a9:71:90:01:92:0d:9b:65:79:
1f:03:94:fe:59:ca:c1:d9:29:90:dd:2d:73:8c:87:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:68:9E:26:AF:13:15:14:97:49:EB:1E:EA:98:9F:71:9A:1D:BF:08
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:48:c4:8e:5d:71:a3:2a:ed:44:43:6d:94:21:34:d2:88:d1:
84:0e:b6:1d:eb:ac:ae:0a:df:50:99:50:23:9d:b5:24:f7:f8:
86:d5:8b:cf:55:67:11:15:70:57:0a:08:ea:f3:4c:68:55:d4:
bd:d2:65:55:5c:76:a4:e0:4a:68:83:e7:96:c2:ec:c2:4e:0a:
be:80:0b:21:e9:3b:be:64:17:47:21:0e:86:7a:7c:75:96:4b:
1a:e6:46:c0:cf:95:ed:65:c7:aa:ba:04:db:7e:16:9c:ee:20:
20:54:fa:13:2d:cb:be:9a:4a:3b:b8:f3:8f:fd:3d:c9:75:a9:
91:e6:b9:0c:d5:ff:72:5e:aa:02:70:9f:a0:5b:68:f1:7c:4d:
ec:01:d3:57:63:5b:68:1a:d0:5f:a7:7d:de:14:1b:cf:9b:06:
e6:91:ee:a0:90:7d:4f:46:48:32:2e:52:9d:90:b4:12:79:6c:
4d:b0:ff:a0:be:3b:2d:79:dc:d2:c8:48:2e:97:2c:64:62:6f:
1f:52:6f:56:10:71:84:21:43:26:b6:94:cb:15:7c:5e:d9:a6:
23:c4:a6:31:b0:4c:74:00:4d:18:4a:92:52:90:45:0a:bc:b5:
03:d0:a3:b7:c1:25:cd:2e:8f:5b:e2:c4:9f:1e:b7:d2:79:8c:
34:ff:ab:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:42 2026 by rpki-client