Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier: v65F+Z+Lk92IIRqER2oGXtQHKs0xCQbo3ewywoZ/Xzc=
Subject key identifier: 99:37:48:85:AB:2E:78:CE:55:A7:8C:86:35:B4:41:D8:27:8F:1A:35
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial: 019FAA1A62FBB98695569131B7ED4CD45D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number: 0BD3
Signing time: Tue 28 Jul 2026 19:01:23 +0000
Manifest this update: Tue 28 Jul 2026 19:01:23 +0000
Manifest next update: Wed 29 Jul 2026 19:01:23 +0000
Files and hashes: 1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: XgUATy7UP33uoJIl/badYgyeyhe7lKyBR0img7AMfd4=)
2: UFBEpO4lAvQQYygzidhd3XdFxgI.roa (hash: UGxXMNFmL4JWlj/CB1VthyOKOfzl2mNWHFy1E8dwYXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:62:fb:b9:86:95:56:91:31:b7:ed:4c:d4:5d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Validity
Not Before: Jul 28 19:01:23 2026 GMT
Not After : Jul 29 19:01:23 2026 GMT
Subject: CN=99374885ab2e78ce55a78c8635b441d8278f1a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:f7:1c:40:e5:1b:70:7b:c9:95:6a:26:22:
90:ee:7f:83:2c:59:fa:cc:1f:7c:df:87:1f:e9:e7:
d8:af:db:c3:a8:f8:a0:d5:fd:5d:11:6a:5c:9c:4c:
f7:cc:af:c4:55:32:40:f7:77:0a:a8:10:dd:bc:26:
9c:cb:5e:0c:1a:27:69:bc:d5:6a:75:7d:04:79:a1:
8d:35:bb:0e:7c:35:66:32:16:72:cf:cc:b6:fd:01:
5f:b7:8b:4a:4a:93:f5:17:d2:f0:48:6b:93:7c:08:
17:15:f6:92:cf:cf:c6:78:2a:02:46:34:c4:f1:cf:
98:91:2e:51:04:01:0d:f7:f5:01:e2:59:5c:89:64:
52:86:53:28:5e:13:89:03:4c:4c:79:52:a3:34:cc:
e7:d8:29:a5:df:c1:0c:51:df:db:69:9c:ab:81:8c:
fc:87:f8:bc:f2:12:ee:1a:9b:22:9b:eb:da:c1:17:
9c:6d:bb:e7:f1:21:59:d8:6f:46:35:e5:43:67:7e:
9c:9d:e8:cd:fd:17:60:69:34:45:ba:6f:f6:06:55:
e0:70:a8:3c:ef:56:5b:37:40:65:09:0d:2f:eb:5e:
43:7d:3d:31:a4:4c:73:68:86:35:1c:d0:e8:76:ab:
53:d1:bf:9e:63:f7:93:04:3a:67:fc:59:cf:35:d9:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:37:48:85:AB:2E:78:CE:55:A7:8C:86:35:B4:41:D8:27:8F:1A:35
X509v3 Authority Key Identifier:
keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ca:38:8b:49:d3:dd:76:4a:9e:c9:25:bc:45:15:05:a2:62:
83:d0:9f:9b:fa:ef:8a:ba:b0:a9:31:57:fd:13:61:97:8b:4a:
95:10:e5:91:87:d4:ff:a8:27:f0:39:ec:38:b2:3b:93:1b:76:
73:87:14:f0:1f:b6:21:0d:3d:b5:c2:5f:e6:73:bf:c4:dd:a5:
e5:de:af:d3:ee:a5:08:87:32:b0:5b:68:8c:4a:ae:73:bc:75:
1b:23:ce:39:29:ed:86:a4:34:dd:07:26:8f:b5:6c:ed:8b:06:
d1:52:84:1a:2a:31:44:f9:65:af:94:43:8b:d9:c9:8f:ac:40:
5b:f3:e1:99:fc:e7:a5:35:5b:45:9f:16:b0:8f:1e:76:eb:92:
a1:0f:6a:54:61:8d:33:00:66:af:a1:72:b5:0d:e4:b5:ef:14:
5d:4e:72:71:da:73:e8:54:83:05:95:31:44:1d:3e:8b:db:e7:
6b:7d:84:7a:9b:53:a9:c5:3f:26:6a:0f:75:58:03:5f:48:be:
91:8c:2d:60:4b:fc:99:64:ab:25:4c:05:f9:a9:3b:ad:cc:35:
10:bb:d6:3f:64:18:a6:4a:a8:63:b5:52:f9:5a:8a:66:34:3f:
17:81:66:95:dc:b2:4a:b0:be:d4:47:59:5a:5c:c6:93:c3:33:
57:6c:8f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:52:56 2026 by rpki-client