Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: 9NNoMY0a7gENlh6B59AhD8zUvqwaxO5+mEmJyzC7dOo=
Subject key identifier: C5:63:C4:07:D5:E5:D1:93:FD:14:67:DF:19:37:94:56:E8:1D:42:EE
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 019FA898DC19B3860DE6E516C77BF27D4F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 12:00:17 +0000
Manifest this update: Tue 28 Jul 2026 12:00:17 +0000
Manifest next update: Wed 29 Jul 2026 12:00:17 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: PzShe3u1Mer9pH0sN9/R4wNcMCmkryaSt7skXCVsrds=)
2: ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa (hash: iGCdrPf4Ppnrs4dgUDy3DlxhNj0AHzaCi9s56mQZshU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:dc:19:b3:86:0d:e6:e5:16:c7:7b:f2:7d:4f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Jul 28 12:00:17 2026 GMT
Not After : Jul 29 12:00:17 2026 GMT
Subject: CN=c563c407d5e5d193fd1467df19379456e81d42ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:b9:70:45:4b:2d:f1:09:48:2d:5e:cf:bb:
00:03:4b:39:7f:02:45:37:1d:71:ff:ef:67:07:c7:
6a:1f:a1:d3:78:e2:a7:b1:a5:de:d0:87:42:d3:38:
96:77:13:4c:24:c4:34:f8:fe:b3:a6:08:9a:96:08:
3d:24:39:84:d4:2b:f4:8f:c7:d9:22:51:c0:90:4d:
c6:69:5f:41:f3:1a:05:d4:4d:27:4f:15:4e:5a:71:
8a:51:12:8f:cd:d6:6b:69:5a:6d:b6:32:f8:14:5c:
f7:53:ed:0d:55:22:cc:fe:e2:fd:8c:21:32:fb:cf:
2f:3c:9d:ac:2f:14:07:b4:49:d3:86:89:c0:cd:f0:
a5:3b:df:2e:e9:5e:ec:00:27:27:bb:b6:ee:5c:60:
1f:14:a9:22:c3:d9:4b:bb:16:b9:82:a4:70:33:44:
80:e8:eb:53:94:56:a9:89:e1:b2:d4:de:b6:e9:ae:
cc:92:fd:8d:78:57:19:71:67:9c:21:5a:7d:dc:cd:
d9:49:f8:57:c9:59:23:fc:49:c4:f4:12:bb:a1:3a:
b5:30:ad:57:00:05:a2:5b:ae:2f:85:39:75:52:25:
a1:a0:76:e7:1e:22:8e:ec:9c:f7:9d:ea:0e:3b:7f:
c6:85:1a:6a:d5:55:79:38:c7:7d:a6:7f:69:4f:8a:
c9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:63:C4:07:D5:E5:D1:93:FD:14:67:DF:19:37:94:56:E8:1D:42:EE
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d9:9f:fb:3d:ce:93:ff:83:a9:74:51:cc:7f:3d:6c:5a:06:
5e:8a:9a:b7:4f:21:cb:02:f0:95:9a:c9:5c:c1:58:a3:ce:5c:
24:0d:b4:d7:c2:0b:78:a8:ef:39:94:90:b2:d8:cc:b0:95:92:
2f:a0:37:dc:2d:59:6d:a0:9f:6b:7a:c6:af:b4:5a:46:f1:9a:
80:6f:bb:17:2e:dc:d4:cd:12:58:f8:aa:62:21:7e:ab:b9:63:
44:ba:7d:08:e1:08:5a:bb:29:48:fc:ef:1e:83:a8:93:6d:5c:
1a:18:54:49:77:58:1e:ef:65:fd:ed:19:c4:5d:9a:85:4d:45:
50:23:3b:1c:8d:ef:8a:d7:01:3a:b4:12:47:d3:50:80:83:c6:
02:c3:76:f0:39:a8:d5:6b:49:1a:49:72:16:90:99:95:4e:20:
3f:ff:31:06:2b:7a:f6:bb:72:36:da:38:12:d2:c9:70:a7:f7:
c5:97:8a:c1:0b:3b:e4:3d:19:91:a4:b3:2f:61:eb:cc:c2:83:
33:5f:c6:98:12:1f:76:1a:22:fc:ef:e0:1a:de:80:5e:75:9b:
62:b5:d1:95:34:f6:b8:60:97:35:21:fc:2d:f9:37:d1:47:bb:
93:df:c7:ca:9e:45:cf:77:a6:24:fd:10:9e:7d:88:e3:8b:b8:
29:1c:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:32 2026 by rpki-client