Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
File: 8gwo0Z4N-1NIJqojqlBq9oowW3o.mft (raw, json)
Hash identifier: kPNldtnX7OF+QUqIsx1cFKGjdFhZ56JFPVSOt/Xm40s=
Subject key identifier: 3F:16:51:9E:A9:46:A6:D6:8C:16:70:2C:0C:54:E3:2E:BA:B2:FF:CF
Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
Certificate issuer: /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Certificate serial: 019F90FE94A55B13AEAEA3BF3C38E4F48959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
Manifest number: 1959
Signing time: Thu 23 Jul 2026 22:00:30 +0000
Manifest this update: Thu 23 Jul 2026 22:00:30 +0000
Manifest next update: Fri 24 Jul 2026 22:00:30 +0000
Files and hashes: 1: 4h6lcQgIZNPNn6orDQ61-yTtwWo.roa (hash: 3IoAe85ki8GRw4jFh+5yx1kZwJzMdssvyjliLQy2iM8=)
2: 8gwo0Z4N-1NIJqojqlBq9oowW3o.crl (hash: 6Z5W+/OhgZsVdtIbJpHgitvL5fAljKbfzooqZ8cu9f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:94:a5:5b:13:ae:ae:a3:bf:3c:38:e4:f4:89:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Validity
Not Before: Jul 23 22:00:30 2026 GMT
Not After : Jul 24 22:00:30 2026 GMT
Subject: CN=3f16519ea946a6d68c16702c0c54e32ebab2ffcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:fd:41:a8:4c:98:b1:7a:55:20:86:91:b2:
87:c2:9f:cf:1d:25:6f:3d:fb:f9:60:28:70:d1:36:
b2:1f:0d:19:e4:a8:8b:b7:7c:91:b1:a5:53:a0:8d:
dd:25:ba:7e:bb:32:d3:eb:4c:a2:a7:ff:f2:42:25:
1c:70:fa:e9:8f:67:2d:86:17:f8:a5:26:b8:01:78:
0f:51:c0:a4:30:46:c7:b2:5d:8d:f0:61:ba:fd:5e:
ec:ef:d9:f7:2a:6d:3e:ad:ed:8a:5f:a8:a3:e7:c0:
40:7e:49:bd:dd:ac:2e:b7:e2:a8:5b:08:a5:4e:ab:
99:77:98:9e:54:64:12:d1:d7:24:aa:e9:e9:e5:0c:
81:ed:35:21:04:cb:9e:ab:6e:82:af:31:50:68:9a:
22:3a:6b:45:f9:43:81:3a:46:ba:07:b0:0d:e3:02:
62:58:6d:7f:db:ab:72:66:20:c7:d5:92:01:06:a9:
44:ef:bf:9b:8a:e5:0f:71:5b:d1:15:3b:2b:86:d5:
30:f3:b6:23:9c:36:61:a6:9f:8e:e6:25:ff:5c:6b:
91:ec:ba:fa:7e:7b:c0:37:1e:ed:fd:60:e9:0b:d2:
ea:d5:6a:29:82:d3:f5:ac:16:54:fd:41:53:a5:19:
34:35:3d:5c:a7:63:03:60:2d:e5:af:aa:1a:15:9e:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:16:51:9E:A9:46:A6:D6:8C:16:70:2C:0C:54:E3:2E:BA:B2:FF:CF
X509v3 Authority Key Identifier:
keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:04:b3:78:79:41:d8:7a:54:96:f1:07:39:a1:2a:f4:80:dc:
dc:33:4b:b3:a9:93:c6:a4:0b:64:59:3b:b4:80:bd:c9:a7:67:
44:f3:3b:11:de:d3:69:17:c9:44:ba:0e:41:b6:56:52:75:b2:
c9:31:8a:66:c1:8b:6d:68:9f:63:2e:2b:b6:d9:ca:b2:eb:2c:
d3:1b:48:cb:dd:d4:d0:d2:1e:0d:bf:94:0b:63:bb:9b:09:8b:
a3:7e:16:ae:8a:6c:0d:7f:fb:66:0f:08:45:a7:43:e9:36:a4:
32:5f:36:fc:69:ed:fd:73:fb:08:df:ab:11:0d:8c:cf:55:17:
92:c7:4e:2c:fc:92:83:9f:5b:5c:9b:f8:d5:de:00:cf:a9:c5:
22:b1:56:43:02:ad:3d:b2:a6:58:25:41:f1:83:2d:b6:13:b8:
3e:5e:72:d3:fc:82:01:a6:58:88:d5:a5:06:85:f0:c5:1c:08:
ab:3b:15:c4:71:f2:99:05:03:95:c2:c8:a9:63:2e:12:63:bc:
3f:96:6a:fc:23:be:da:56:b9:02:9a:a8:8a:3d:1e:2b:ed:47:
b6:ef:22:bd:a1:d2:d4:e2:a3:af:0c:45:81:85:7d:fd:1b:e7:
d5:7c:aa:1b:fa:7a:5f:22:11:3e:44:76:84:07:29:48:8d:82:
68:a0:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:58 2026 by rpki-client