Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: NAeKYUUluusOIZPYoM4xs1ptyauk9MdNVMWYPEmPoNE=
Subject key identifier: C4:C4:C3:35:15:42:09:2B:69:D8:30:9D:CE:B6:58:CE:64:00:CA:EC
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 019FAA1A05CD87E7C281A14ABDD05F5C3719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 19DA
Signing time: Tue 28 Jul 2026 19:00:59 +0000
Manifest this update: Tue 28 Jul 2026 19:00:59 +0000
Manifest next update: Wed 29 Jul 2026 19:00:59 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: 0/uNSRqlKjl+aHmA0LUO0CEE7ryja4WYRnwKVZ/tDtk=)
2: l6d-s6pGrwjzo2MVrYFXt_vj8FQ.roa (hash: GWCGfDBQXbx8zU/9pE2/fyqt5ipxe1FQBrMDGvjciQY=)
3: wNW1OJ6nNt-LJ_qt91rusWZGqUk.roa (hash: Uf/zMrnHEJKdoypvZyEP0WBvkTlQGSBhuCZb5Fsvgco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:05:cd:87:e7:c2:81:a1:4a:bd:d0:5f:5c:37:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Jul 28 19:00:59 2026 GMT
Not After : Jul 29 19:00:59 2026 GMT
Subject: CN=c4c4c3351542092b69d8309dceb658ce6400caec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:ac:8c:67:2f:7e:2a:23:2e:99:6c:78:6c:
4e:8b:53:fc:5c:97:29:ff:48:1f:e2:40:fa:3e:42:
aa:35:1b:db:18:b3:3c:1e:56:f1:f1:26:41:97:0e:
73:31:9a:1a:83:cd:0d:17:31:6a:d3:a7:4a:1e:21:
7d:fa:c0:e1:93:f4:2b:ed:70:fa:fe:31:04:23:76:
a9:62:a4:a2:75:2b:b5:5f:6b:5b:12:a2:47:76:e8:
db:8d:54:14:97:22:a7:8c:f7:0c:9c:0f:9c:84:45:
af:c1:81:a6:9c:81:88:c8:fb:00:90:6c:24:90:0c:
e5:a0:24:63:d6:b7:05:a2:cb:e8:b1:f6:b7:a3:d4:
51:aa:23:2b:f1:3f:7c:8e:36:c0:17:01:46:52:6b:
e6:c8:42:68:24:d6:cb:63:77:f4:62:0d:cd:6d:e1:
51:0a:b7:be:82:bf:af:dc:15:ed:46:ad:bb:b4:a0:
15:22:e9:cc:a3:77:99:9d:da:0f:a3:5f:e8:4c:67:
99:14:8d:55:91:b2:b6:0a:5f:fb:09:f1:e8:e5:99:
5c:e9:97:a2:18:2f:f5:73:1a:7b:42:1a:d4:a2:ee:
f6:95:57:77:a9:f8:54:32:fb:69:06:8b:90:76:44:
23:c3:79:d9:fd:e0:22:a3:56:a8:e5:2f:b4:99:10:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C4:C3:35:15:42:09:2B:69:D8:30:9D:CE:B6:58:CE:64:00:CA:EC
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:51:89:50:56:c4:6f:52:8e:6b:dc:db:75:8f:f8:34:0a:cf:
cb:9e:e2:51:6c:79:99:9c:5a:41:6b:c7:1c:0e:b2:7a:38:87:
12:08:30:1b:ab:ff:dc:46:65:58:9a:3c:9c:46:dd:e3:bc:92:
de:ff:84:7a:16:7c:47:aa:ee:ef:78:1f:23:e7:4f:ce:d3:92:
e6:ed:5b:ef:01:5d:9c:f9:a7:c1:7d:0a:61:4c:7c:ea:31:f6:
65:05:4c:49:9e:d7:91:a3:28:88:3f:cf:4b:21:11:9e:c2:63:
06:80:8b:6e:ab:d9:7d:16:36:7a:09:d2:3a:ce:4d:b7:af:5e:
2b:a4:f1:d3:1d:1d:92:41:59:a3:b4:9d:d6:74:8b:ad:01:26:
b5:c6:81:1f:e4:7b:b1:a1:cf:2b:ac:75:93:6c:6d:bb:12:fd:
82:9a:e8:05:92:ec:72:8a:3c:ee:e1:11:5c:2f:ee:07:bf:1e:
f4:35:35:e1:d2:54:9f:79:06:a2:d7:f4:49:a7:3b:4d:ad:56:
31:72:60:7a:4f:16:92:9c:4a:f2:4b:b9:9d:c3:e8:a8:33:ef:
43:30:cc:b4:ca:df:90:d0:ce:34:1b:cb:94:64:e4:75:df:5b:
e6:0f:99:b4:81:66:4e:88:9a:33:a0:d1:ed:1c:fd:b3:f1:37:
81:05:20:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:27:47 2026 by rpki-client