Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: AOjEj6wIfjpE+BpfzLSCvVqzb9nHzeGQybQPNOGtNUk=
Subject key identifier: 83:1B:94:9A:66:8E:F3:67:D7:EF:1F:07:77:D9:9D:F6:7D:9E:BF:9F
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 019FA8D0A0F87ADFA289E6AF2C3961442814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 082A
Signing time: Tue 28 Jul 2026 13:01:12 +0000
Manifest this update: Tue 28 Jul 2026 13:01:12 +0000
Manifest next update: Wed 29 Jul 2026 13:01:12 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: M1nyRUyopN1QqNq2kpwfU4MWSBIA7OJItyyTWYZRdBo=)
2: e40GPVZTDeirYIdOqaP1aapsCXg.asa (hash: h+tl9RH2sA+blXZerCx7ZNM5+m8vY3pFl3hXGBoDo4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:a0:f8:7a:df:a2:89:e6:af:2c:39:61:44:28:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Jul 28 13:01:12 2026 GMT
Not After : Jul 29 13:01:12 2026 GMT
Subject: CN=831b949a668ef367d7ef1f0777d99df67d9ebf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:19:67:ca:a5:81:ce:0c:5e:3c:b1:62:90:
68:3b:96:8c:b6:73:46:d9:35:9f:6c:0c:ae:cd:d4:
bc:5a:2a:26:1d:c7:9a:f6:b1:af:35:3a:5e:c1:5e:
db:84:52:3a:34:db:ed:b9:00:18:bb:97:66:13:80:
f1:b6:6b:78:98:ed:f4:c0:14:49:a1:5b:89:af:ca:
16:17:4a:a3:bf:36:e1:c2:c7:ce:8b:0d:2b:7d:90:
1b:26:ac:b0:fc:7a:c8:5f:13:11:45:c4:f2:b4:56:
21:98:c7:71:dc:60:f1:79:06:98:46:53:0c:0a:96:
15:0d:a0:f4:89:34:6c:4a:b0:ff:17:24:8a:7a:63:
df:6c:ff:59:b4:e2:d8:a4:16:c0:bf:e1:16:7e:1d:
99:75:d0:29:e2:34:53:de:1c:62:57:06:e7:d6:cd:
be:6b:ae:2a:33:f4:1a:a0:67:b8:4b:99:07:d9:ca:
0e:c1:12:27:56:5f:5c:de:7a:6d:50:e6:a7:c4:c6:
2e:09:71:37:a4:e7:d9:07:41:c9:87:6b:8a:19:08:
db:66:ed:33:3d:d9:0f:6c:20:6e:22:60:c5:b6:16:
0e:39:f2:c8:11:25:a4:ba:07:d6:d1:fa:04:b7:bc:
cc:c6:3e:ba:df:fc:e2:4d:d6:58:54:04:fb:44:94:
e1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1B:94:9A:66:8E:F3:67:D7:EF:1F:07:77:D9:9D:F6:7D:9E:BF:9F
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8a:d3:3d:08:85:b1:62:a8:38:3e:9c:86:47:51:97:7f:f8:
d5:ec:46:55:84:82:d6:75:7f:d6:99:6d:9a:18:64:98:f1:6f:
71:8d:7f:05:72:b5:ef:6a:df:85:1c:c2:29:81:14:73:05:3d:
92:54:2a:f7:7a:4f:dd:15:8b:2f:74:d7:60:c9:bc:a7:42:3a:
18:b9:85:4f:6f:bb:75:80:e4:c4:23:18:2b:d8:82:ae:67:c7:
0e:a7:70:58:83:8c:88:95:4e:70:62:f6:49:fc:2a:c0:90:53:
4f:2c:b6:f0:0c:51:1c:ad:73:e7:27:44:c8:01:71:7b:d2:95:
54:bb:7a:14:07:ab:1e:08:9c:ab:43:60:64:2f:2f:f5:1a:a6:
b2:54:14:ca:53:d5:c1:4a:a9:08:1d:ef:64:80:8d:9c:d7:43:
d6:74:be:93:1b:56:60:7d:74:13:f1:f6:a0:b7:dd:51:83:38:
59:0b:4b:6f:cd:fc:d0:fd:eb:0c:11:a6:54:9e:01:83:bf:39:
e8:2a:62:5a:21:7f:89:e1:ae:90:f2:51:55:40:a3:f4:d0:9b:
59:55:57:2c:8f:b7:12:15:4c:00:c7:03:5e:9b:97:3e:1e:ab:
5b:50:88:54:ec:e5:f6:bb:99:00:6c:73:b3:43:fd:01:db:24:
5d:b1:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:56:52 2026 by rpki-client