Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json)
Hash identifier: mx183UaHkcGMoUCvNXGnjAb4uxILarFnFOKKZfQiejQ=
Subject key identifier: 35:46:D3:8A:BF:0B:3C:6C:67:10:AC:E0:2C:87:98:3D:CC:7C:FB:50
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial: 019FAB9AA7C9C5260CA2FACE9C4E9CE8077B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
Manifest number: 1968
Signing time: Wed 29 Jul 2026 02:01:07 +0000
Manifest this update: Wed 29 Jul 2026 02:01:07 +0000
Manifest next update: Thu 30 Jul 2026 02:01:07 +0000
Files and hashes: 1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: lE1LmlwUM6YU+Iz6CVWwL4Ozw/AyWWsTEjyhv5eKKzE=)
2: VHl37ymtX_2i6CyUoQNBTqA5Q14.roa (hash: eqHS99H1UTAx9btxTzK1grjqxkNHSX5THANz/qDbL1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:a7:c9:c5:26:0c:a2:fa:ce:9c:4e:9c:e8:07:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Validity
Not Before: Jul 29 02:01:07 2026 GMT
Not After : Jul 30 02:01:07 2026 GMT
Subject: CN=3546d38abf0b3c6c6710ace02c87983dcc7cfb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:1a:23:4e:9f:9a:e4:e6:26:21:6c:0b:13:
b4:5e:6e:d0:3c:87:ad:1e:f9:7e:b3:b4:b8:ce:54:
78:d4:85:42:0d:f0:b7:bd:fb:46:67:ea:0a:8b:c8:
1b:a9:d1:5e:b3:9f:37:ed:b5:5f:9a:e0:dc:cf:67:
57:85:72:63:57:97:00:e6:69:93:45:a4:fd:03:0b:
4d:b7:74:8c:e6:ca:31:4d:55:d4:8c:be:ff:8d:70:
78:0c:89:f9:f9:c6:38:1f:3a:4c:79:5d:bd:d0:2c:
e4:92:b8:d1:9b:dd:90:71:6c:21:a6:a9:4d:04:51:
57:77:98:b6:ac:91:c2:b6:23:15:d5:51:55:bb:bd:
aa:30:7a:56:90:b5:31:cf:04:ff:2f:f7:8e:ed:ea:
c4:6e:cb:22:27:17:1f:48:93:a2:4f:8f:fd:f3:f8:
32:51:1d:0e:4f:f8:06:74:e4:9b:9f:27:f2:c7:dd:
06:45:4a:d7:d8:1e:ae:23:47:78:45:e4:eb:29:4f:
41:56:f2:47:63:8c:c6:44:95:c4:4b:25:71:7e:0a:
74:d2:2d:e8:a9:d3:6c:c3:75:0d:bf:f5:63:85:38:
56:12:7f:87:54:8a:84:98:9e:6b:13:5f:6c:21:4f:
26:b8:94:40:14:d2:2d:8c:39:b1:98:20:b0:2c:b9:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:46:D3:8A:BF:0B:3C:6C:67:10:AC:E0:2C:87:98:3D:CC:7C:FB:50
X509v3 Authority Key Identifier:
keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9e:cb:69:61:e0:2a:c3:76:7d:50:55:2a:38:61:40:ca:eb:
bc:0e:8a:75:9b:d7:2c:66:49:93:32:aa:0a:a7:55:03:33:d2:
dc:aa:54:a6:1d:0b:87:ed:68:c9:0a:92:95:3f:d5:85:40:d1:
0c:fe:aa:76:23:41:e1:22:83:fe:e0:21:bc:52:60:56:ba:f9:
95:a7:83:8c:d8:ef:59:4e:48:a3:7a:64:0a:fb:6e:ba:99:75:
42:51:66:63:c4:72:3e:4f:e5:b2:df:45:b1:c7:69:ed:77:ce:
31:d9:f1:d4:ff:ad:e4:1b:16:40:83:9b:86:ef:87:67:a7:e2:
83:53:30:97:18:cc:5f:ca:50:ac:89:02:1c:59:07:27:b7:83:
9b:db:ba:0f:20:ae:00:2d:ec:af:7c:5e:b2:2b:e9:32:f0:2e:
f6:f0:ee:62:92:34:eb:d4:2e:4d:c6:20:44:fe:a5:cb:1c:e3:
8d:81:48:61:c4:76:b4:df:ad:77:64:01:30:12:40:cc:cf:df:
38:79:37:d0:0c:d9:47:3c:f2:17:bf:9d:13:ce:3b:1c:ca:92:
8d:5b:6b:62:1a:ac:42:66:d8:8c:9a:b4:cd:e2:fb:88:6b:2e:
21:66:c6:2c:83:91:b4:20:5d:78:29:be:5d:66:78:67:7a:d8:
4e:b5:4b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:37:38 2026 by rpki-client