Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: W1O+EBuh2QJal+CBxG0HYQ3JCD7q/bgGIQV0k9NI05U=
Subject key identifier: A6:89:A8:38:61:EE:93:56:03:B0:A3:F0:48:3D:70:65:B2:0B:2E:65
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 019FA97521258DA5C393EC2AFF1044B88198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 1967
Signing time: Tue 28 Jul 2026 16:00:53 +0000
Manifest this update: Tue 28 Jul 2026 16:00:53 +0000
Manifest next update: Wed 29 Jul 2026 16:00:53 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: 54+V3jQKA9POZ8F37za8Aiwwc/nqR3Rl2QMQzEvl3nU=)
2: 9YUjZkELa6GF8gXKAy2oZk9823g.roa (hash: 9YJ1KkOVgcysellhwW7N+q2CjNfsQUSgfOE1QvgDX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:21:25:8d:a5:c3:93:ec:2a:ff:10:44:b8:81:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Jul 28 16:00:53 2026 GMT
Not After : Jul 29 16:00:53 2026 GMT
Subject: CN=a689a83861ee935603b0a3f0483d7065b20b2e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:6d:f5:0f:d7:f1:b5:7d:6d:4d:e8:16:e5:
a8:3b:f7:21:cb:62:46:42:51:14:e9:9d:fa:d9:4e:
33:00:74:65:ba:37:4f:b7:29:77:b8:1c:8d:47:cd:
89:76:a9:5a:74:e4:87:0c:43:70:84:b7:fb:ae:e9:
b1:66:44:87:29:54:c8:95:e8:27:2c:d0:c7:f5:ec:
e6:07:2c:0e:fc:f6:b0:05:b6:96:92:dd:11:aa:aa:
56:4b:0b:4e:83:07:90:a5:ac:41:77:e2:32:9b:ae:
d1:c5:45:bf:a3:94:37:5d:43:89:6b:0b:5c:aa:02:
9b:a5:2c:ca:d0:7b:17:27:a5:4c:a1:3a:02:71:e0:
69:f5:b5:6c:77:cc:8b:17:fa:77:6e:30:37:37:b7:
2d:04:96:fc:30:32:bc:82:81:25:29:e0:8b:85:e9:
44:c6:fd:6e:d6:9a:c4:d9:55:30:76:8d:8d:cf:48:
82:a3:ab:cc:3e:dc:c1:a9:41:72:47:49:20:56:19:
44:d0:5f:5a:bd:6a:82:78:4b:3f:88:69:82:76:d9:
1d:20:42:f2:9c:e2:e6:8c:81:80:05:c9:17:42:10:
5c:0b:e3:6b:21:63:01:e9:c2:cb:96:c4:01:84:ee:
b6:82:3f:47:ea:53:1f:c2:3d:94:73:79:19:ac:fc:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:89:A8:38:61:EE:93:56:03:B0:A3:F0:48:3D:70:65:B2:0B:2E:65
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a8:63:f9:28:74:54:a2:f4:5f:2a:d2:ec:02:dc:bf:d2:1a:
3a:10:3c:66:cf:a4:0f:c8:75:58:f3:b9:ba:15:71:20:18:e0:
a5:42:d7:ce:19:47:c5:92:e9:5c:f9:90:b0:99:02:55:64:b0:
ca:c6:01:00:a8:40:aa:ba:c1:b1:8d:d0:4e:ae:9c:93:d7:df:
6c:f6:78:c2:86:27:63:37:47:19:9f:84:5c:db:64:c2:84:8d:
5a:bc:e7:92:7e:17:df:82:2e:f2:47:6f:d1:f0:0a:a3:63:36:
c3:c0:ba:62:2a:d4:3a:9d:04:08:49:51:c0:c7:79:e8:12:4c:
3e:3a:06:23:14:0e:57:7c:4e:39:b2:ae:50:d0:40:b7:7f:b5:
10:d6:e2:a3:a4:35:ad:59:a1:00:e5:44:08:64:2c:dc:a0:c2:
91:eb:59:42:62:8d:50:39:8d:60:ce:fd:a5:f5:5f:0a:d5:14:
ea:76:72:bf:6d:7c:d5:69:2a:a4:50:f6:ac:c1:04:26:6d:b6:
a0:8d:6f:64:14:5c:4b:af:f9:87:2b:ad:7c:80:ab:80:ea:d3:
59:65:ad:60:a5:74:b3:a2:e7:10:d9:89:63:93:7c:7c:72:3d:
1f:29:76:b4:f2:ee:58:56:eb:d8:9d:46:23:0a:db:52:d4:18:
46:d8:6a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:46 2026 by rpki-client