Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: AKeH2m3OzflJlGXoKDYzAl/JKBqb8d1qwiALoZ4pt0o=
Subject key identifier: 67:05:5A:3A:29:2A:6B:F0:1E:5A:17:D1:7A:F9:7B:13:8B:CF:62:B1
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 019F9023271376D4CDF35E69C52F8880E311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 18CB
Signing time: Thu 23 Jul 2026 18:00:50 +0000
Manifest this update: Thu 23 Jul 2026 18:00:50 +0000
Manifest next update: Fri 24 Jul 2026 18:00:50 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: qTrkD6YnD5RlWi5G957zTOL9ijGOwRcgnF/dXxRQnu0=)
2: dyj7Xcwg4fvIbgPvLBUgjAO8LDU.roa (hash: y2HtW5TPaDlHi0yiYdSPvHi8+3pJRBtpk7Wjb7tENAo=)
3: ocZPY67okT9wcZzWFKWfg9AUJ1M.roa (hash: iDAiG1YKPh6kU5IMftBrjc5iYiPA+UXefNbDPt+Am8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:27:13:76:d4:cd:f3:5e:69:c5:2f:88:80:e3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Jul 23 18:00:50 2026 GMT
Not After : Jul 24 18:00:50 2026 GMT
Subject: CN=67055a3a292a6bf01e5a17d17af97b138bcf62b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:67:72:6e:12:29:33:c0:e4:21:a3:13:b2:90:
3a:1d:01:d5:de:15:39:ae:ab:26:fe:3c:7b:1b:8d:
03:1d:4a:be:ca:e9:7d:00:7a:f6:49:93:2b:8b:de:
6a:93:6a:fe:8f:4c:f4:91:eb:6f:7f:ac:d0:a3:43:
29:f2:12:f6:ee:b9:1e:07:c2:a1:ac:48:00:ed:da:
25:5d:5c:fc:1e:06:93:2e:74:df:1b:09:96:a8:c9:
a0:f9:e4:8a:af:04:70:aa:39:6d:95:8a:f4:3b:db:
c3:a6:c3:f7:ee:76:6c:c6:5b:e0:65:5c:fc:ee:7f:
41:dc:b4:86:9b:e0:47:16:5c:da:00:71:11:7c:df:
19:38:24:7c:9c:3b:32:bd:7c:c6:05:57:98:ab:5b:
75:73:bc:cd:9f:b7:5c:29:4f:02:bc:1b:5c:cf:0c:
e9:57:eb:d6:1f:ba:45:fa:59:e3:13:02:24:3c:63:
72:59:ab:c2:6c:8f:b6:95:a7:37:e3:8b:f3:b2:47:
dd:9a:50:6d:cc:2d:73:5c:8a:7d:d4:fa:37:c8:8b:
7e:b2:b8:aa:91:dd:37:fa:d4:c7:99:50:f4:6f:9e:
fc:a3:c2:e4:2f:d1:d6:e6:c1:00:7d:02:e5:51:40:
82:d9:d1:a4:2e:a3:f1:ae:54:45:ad:e7:4b:87:63:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:05:5A:3A:29:2A:6B:F0:1E:5A:17:D1:7A:F9:7B:13:8B:CF:62:B1
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e5:f3:a9:ec:14:b9:5b:4b:6f:07:f1:8e:ee:81:69:42:cb:
55:9d:ad:ae:cc:9a:dc:11:c7:51:3b:9d:33:11:55:e7:f9:0c:
68:9c:ba:30:13:2c:3f:40:88:b7:4c:00:47:d3:40:02:e5:b1:
6a:d0:5f:50:a0:81:46:e4:a7:ca:d2:72:6f:7f:7e:aa:d2:a8:
18:af:26:4d:a7:05:be:62:ca:38:4b:e1:de:82:bc:14:46:e6:
78:df:57:d0:e0:a5:2e:a0:4f:92:49:f2:a8:ec:0b:93:55:7d:
90:0f:0c:e1:a6:c3:59:2c:86:12:7e:3d:e8:54:c6:57:5f:90:
0b:7a:af:5e:ba:dd:04:49:0b:3f:4d:94:d2:a0:be:ab:b9:b6:
7e:05:6e:ed:c8:11:ab:38:c4:1f:5a:fd:b3:0f:fd:1d:cd:94:
36:aa:0b:49:ae:27:a8:e9:09:80:c4:e9:99:65:4c:41:e8:4a:
1c:56:7f:24:8a:90:a1:27:bc:d1:59:e4:68:b9:a8:78:4a:c9:
22:c8:40:a1:d9:8f:9b:bf:70:83:db:61:9e:0d:c3:f0:0c:3d:
ef:90:63:92:0f:8b:5c:4f:07:4d:b0:34:ef:46:88:5a:d6:a0:
8c:ce:16:e9:c2:58:77:79:e7:0e:5d:cc:0e:b1:6e:d6:fe:ef:
ef:1f:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:13:55 2026 by rpki-client