Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: ykkH3ljxO0fcHRj2xbB5DcfY7r6hym679vZnHv1gPVs=
Subject key identifier: 34:99:8E:47:15:A1:41:26:73:78:97:F6:DE:B1:BE:C3:B9:FC:21:86
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 019FAC08BAA41D1139A4A9CDA55189749E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 19DB
Signing time: Wed 29 Jul 2026 04:01:20 +0000
Manifest this update: Wed 29 Jul 2026 04:01:20 +0000
Manifest next update: Thu 30 Jul 2026 04:01:20 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: RIXUkd9Nxa+sEsvoxeGzHzKzJ5ii72lcT3jwMdyiocI=)
2: l6d-s6pGrwjzo2MVrYFXt_vj8FQ.roa (hash: GWCGfDBQXbx8zU/9pE2/fyqt5ipxe1FQBrMDGvjciQY=)
3: wNW1OJ6nNt-LJ_qt91rusWZGqUk.roa (hash: Uf/zMrnHEJKdoypvZyEP0WBvkTlQGSBhuCZb5Fsvgco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:ba:a4:1d:11:39:a4:a9:cd:a5:51:89:74:9e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Jul 29 04:01:20 2026 GMT
Not After : Jul 30 04:01:20 2026 GMT
Subject: CN=34998e4715a14126737897f6deb1bec3b9fc2186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:2a:04:e0:2d:82:ee:fc:57:e0:98:d7:b0:
7b:3b:ba:0c:18:9f:dc:83:ad:6d:49:84:2c:37:b2:
0b:0f:a9:76:a6:b1:6e:e4:fd:4a:08:c3:30:e7:d7:
9f:e4:ad:89:07:a6:a6:80:c8:af:2a:74:55:d3:6d:
c8:d6:9c:98:0d:c1:3e:68:60:cc:7c:9e:e6:5a:61:
c0:3d:bb:3e:e9:d8:00:ee:83:63:a6:68:cc:f4:d0:
f3:c1:8e:62:e8:77:11:cf:e9:7c:97:8e:ae:e3:1d:
5f:ed:d6:f7:ef:54:7d:ef:52:f4:86:2a:a0:1f:b3:
de:20:98:5a:68:39:a0:b4:2b:1c:48:1e:b2:2a:2e:
ee:a2:b4:2b:30:c4:f3:68:09:0a:34:81:81:e3:23:
a1:57:bf:48:4d:0d:92:a6:cd:87:80:d0:8b:db:fe:
68:80:0c:15:4d:56:40:73:c6:45:de:9a:43:c3:d5:
87:88:fc:30:38:dc:17:e9:ba:9a:85:b0:74:5f:1b:
b9:ee:1a:9e:82:50:82:d4:8d:11:6c:5f:2c:56:54:
3d:0d:6c:4c:83:e3:5f:7a:e7:6c:d9:fa:3c:80:b0:
dc:35:3d:a5:46:66:02:35:58:eb:62:84:20:02:df:
eb:c5:76:b1:c9:d1:6b:12:73:22:b3:6f:7e:95:62:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:99:8E:47:15:A1:41:26:73:78:97:F6:DE:B1:BE:C3:B9:FC:21:86
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3f:22:68:88:ea:1f:62:b4:74:e8:da:db:ae:32:6f:1a:67:
79:c3:98:98:36:13:49:55:23:5c:fd:76:f9:58:18:16:5f:7a:
f6:9f:1b:1a:3b:35:eb:a1:b8:0a:6f:e0:b4:5d:8e:39:e0:cd:
86:07:a1:b3:10:21:6b:88:6e:76:9c:79:fe:d4:97:f4:64:6a:
5a:b0:ec:b0:9f:bc:e5:2a:61:8a:56:03:d9:0e:1b:20:f8:6f:
09:ea:c4:ff:fc:84:42:40:04:4a:ed:71:99:ac:c8:9e:33:0f:
d1:f7:59:d5:c0:47:e2:b1:cd:a1:30:9a:f5:9b:9d:a9:12:e6:
6a:f5:67:95:87:83:fb:27:a7:36:18:2f:58:a8:95:b6:d7:86:
61:1f:8b:c8:c2:88:7b:7c:a7:af:aa:39:03:07:13:f4:81:39:
f9:89:a8:67:20:2c:34:91:24:0b:de:44:42:81:9b:e9:ed:e4:
24:21:a7:56:18:d6:27:38:12:50:a3:91:41:32:fa:28:c5:76:
c9:ea:3c:c5:d9:64:98:d3:28:0c:b8:15:1c:af:c6:aa:3a:ad:
69:5e:bb:57:e4:03:66:8b:06:5d:e3:6f:ac:9e:2f:58:86:d7:
ca:8c:b4:13:36:7c:9a:c9:ad:41:68:55:a7:c9:86:8e:ca:ca:
98:6d:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:05 2026 by rpki-client