Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
File: 8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json)
Hash identifier: dKDXaG1Hh52CTcYGWpKp8Diz6SxhkX2kPdTtU4hqxD0=
Subject key identifier: 90:FE:D2:14:38:F9:1C:6C:24:26:B2:49:54:30:2F:F6:4C:41:29:E5
Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Certificate serial: 019FA9ABC1E5E1C11B62B0CDEA5820180974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
Manifest number: 0A33
Signing time: Tue 28 Jul 2026 17:00:33 +0000
Manifest this update: Tue 28 Jul 2026 17:00:33 +0000
Manifest next update: Wed 29 Jul 2026 17:00:33 +0000
Files and hashes: 1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: NcKjj8hFjdjBOT3mUSNAQfUxNRByYwAVE0yE/u5k844=)
2: t6Z6klZ_0NjLgXvq4YpIkhB8psw.roa (hash: +OTn+I3wq5DYeVWvGcpxMDqEd8XsWHPUTKNQceql21Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:c1:e5:e1:c1:1b:62:b0:cd:ea:58:20:18:09:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Validity
Not Before: Jul 28 17:00:33 2026 GMT
Not After : Jul 29 17:00:33 2026 GMT
Subject: CN=90fed21438f91c6c2426b24954302ff64c4129e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:8d:61:eb:c0:bb:bf:0e:91:c0:b7:1f:1f:
52:c1:3a:aa:a7:1e:ef:8f:a9:8e:5d:97:ea:d8:6c:
90:f2:ff:44:4d:1e:02:a3:b2:91:7c:21:67:0a:03:
c1:ce:40:ab:90:85:b1:db:5f:fb:b8:a0:25:ef:09:
e6:ac:97:31:09:f3:47:02:e4:31:db:bf:ab:2d:52:
38:d6:b7:58:6e:03:4d:3e:eb:aa:b5:14:01:cd:44:
cb:4b:25:bc:88:2a:6a:bf:95:47:e1:a6:43:98:e6:
46:cd:87:7f:b4:02:60:d7:58:08:c4:e1:bb:f5:ad:
a5:e5:f6:b5:a4:3d:a4:39:04:07:fa:6d:79:aa:ee:
22:9c:a2:28:72:09:c0:9e:cb:8b:94:a7:7c:74:f7:
80:b5:4f:10:46:05:b6:8b:b0:94:56:d2:fe:5b:8f:
b2:91:1b:0f:03:6d:ed:36:ee:b5:08:a2:2f:d4:b3:
49:49:f0:80:a4:db:a2:5e:82:5e:c5:fb:41:5c:32:
4e:26:ef:29:93:a9:ef:82:d5:2d:e4:3a:63:50:15:
93:37:e6:45:d2:d7:2a:8c:0a:8a:be:18:b7:cd:c1:
06:a4:d1:48:72:7c:db:c4:f6:9c:74:93:d2:fb:ac:
c4:2d:5e:bf:cd:b9:2e:a0:50:90:46:6f:77:ae:27:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FE:D2:14:38:F9:1C:6C:24:26:B2:49:54:30:2F:F6:4C:41:29:E5
X509v3 Authority Key Identifier:
keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e6:dc:3f:f8:8f:5e:a7:b1:bd:79:0a:bd:db:aa:0b:01:dc:
26:f5:b0:ca:97:ca:d0:04:b9:27:51:82:d8:6e:a1:c4:fa:26:
2c:b1:b4:5f:f1:a8:7f:13:82:99:e8:03:50:cd:8d:74:75:e0:
0b:32:71:db:6f:1f:fd:ab:09:26:77:71:bc:fa:2e:ea:22:ae:
e0:39:99:78:61:09:0a:1a:67:8d:40:49:c1:1a:56:a1:c8:ba:
0f:02:ae:aa:7c:05:89:6b:31:2e:11:49:68:ed:8d:9a:3c:d5:
2d:57:cb:c0:0f:c0:a3:8b:7c:3b:7e:af:a0:d3:90:8e:ba:c1:
4f:58:14:0d:f9:17:47:5f:f8:4a:4e:a5:45:43:69:d8:42:f2:
82:9b:6c:6c:9e:55:ba:9d:71:f8:0c:fd:f6:3a:a1:2f:25:60:
58:32:18:7b:59:8f:ab:46:bf:94:69:33:9a:47:16:40:73:4e:
df:42:0f:f4:ef:05:e9:8a:de:d1:70:56:27:da:1f:7b:df:b4:
02:62:82:38:01:af:a1:1c:c4:8a:5f:4b:b4:ad:5c:a8:94:ee:
82:55:2e:d3:88:a5:b6:4d:6e:9a:21:96:74:d7:57:6e:eb:45:
d8:05:6f:d0:47:c5:6d:bb:d8:a8:9b:c6:b7:9d:1d:d7:a2:34:
91:83:88:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:43 2026 by rpki-client