Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: oPndPgU/PszHzs5lg2HEN5MVSmN0hJWnpYfuSzH7RNw=
Subject key identifier: B3:6B:AA:68:57:82:8A:74:E9:47:4B:E5:33:1C:38:7C:DD:4D:C6:1D
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 019FA8CFF8E09BEEB80359DD517F7CAC749A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0E52
Signing time: Tue 28 Jul 2026 13:00:29 +0000
Manifest this update: Tue 28 Jul 2026 13:00:29 +0000
Manifest next update: Wed 29 Jul 2026 13:00:29 +0000
Files and hashes: 1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: 5s5cZgMSHKJGlHctMcZWKd9+N+Q1Vo5xh2mFyXjiJWE=)
2: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (hash: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:f8:e0:9b:ee:b8:03:59:dd:51:7f:7c:ac:74:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Jul 28 13:00:29 2026 GMT
Not After : Jul 29 13:00:29 2026 GMT
Subject: CN=b36baa6857828a74e9474be5331c387cdd4dc61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:84:33:2c:53:62:8a:be:0d:13:fe:b1:53:
5d:d9:eb:06:d0:53:f9:1c:51:ca:33:7a:e3:bf:08:
ba:ec:d6:9e:2d:4f:ee:88:2f:ee:b9:cc:72:e1:50:
f7:1d:87:82:2a:77:d7:91:33:0b:01:42:fb:ed:36:
95:9e:8a:59:22:90:f9:b1:ec:aa:45:01:64:4f:a8:
33:eb:c6:93:81:f5:d2:0b:53:21:33:26:3f:c2:bd:
12:55:2a:15:d9:ed:6c:bf:36:f4:7c:85:87:56:17:
80:9e:83:b2:6c:3d:5b:44:d0:be:f4:0c:53:56:f5:
6b:1c:9c:dc:55:6a:b7:02:ec:a9:bd:24:2c:27:9b:
e0:05:2a:3e:ea:e8:41:44:59:01:03:42:f0:2f:57:
20:6e:64:41:d6:61:08:c6:40:69:4d:52:53:30:13:
76:80:6c:73:e4:53:72:31:31:b9:47:3d:87:f1:54:
7c:7e:1c:2c:51:28:75:12:4e:b7:7a:76:e4:d1:3e:
ed:b2:4b:ce:09:f2:6b:6c:5e:d6:01:d3:b2:28:e2:
b3:93:66:5c:5a:fe:b3:d9:fa:fd:f0:b1:be:7e:c0:
81:4b:30:3d:35:ea:22:4f:4a:41:72:56:cb:ec:ad:
97:cc:e7:3b:18:6b:2f:70:08:21:a5:7b:c7:6d:8a:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6B:AA:68:57:82:8A:74:E9:47:4B:E5:33:1C:38:7C:DD:4D:C6:1D
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ed:bc:fd:29:c0:1b:0e:c9:e6:c9:b3:2d:2b:79:db:dc:c9:
9a:32:4e:f6:3d:cc:44:25:08:62:97:28:22:ba:b6:73:4a:9e:
3f:6b:2b:da:fd:02:d9:f9:25:7d:6a:1f:82:67:2e:a0:d0:9a:
39:03:94:48:30:ca:e6:b6:01:4c:46:db:19:d5:8d:3f:f8:c7:
a8:fe:ba:cb:37:38:08:3a:19:10:be:61:b7:a4:8a:5e:be:43:
a4:1d:44:8a:ef:8f:d7:6e:85:6f:d9:f7:40:28:92:22:1f:df:
73:3c:dc:8c:30:d4:19:c0:79:30:8b:21:e6:b1:d8:f4:80:2a:
5e:bc:79:8a:56:65:73:88:0b:07:1c:bb:ec:68:22:79:db:4f:
67:07:8c:bf:40:e4:ea:a0:a1:57:97:d6:3d:ae:94:fb:f4:29:
f3:a2:4f:64:70:7d:80:ff:dc:57:60:c1:f9:3c:8c:a1:22:a5:
6c:d1:0d:7b:1b:d4:ff:42:4e:d0:26:33:c4:3a:67:a2:91:5e:
9b:2d:d3:91:fe:35:1f:cb:5a:d9:5f:2a:37:b1:03:13:0d:33:
11:ad:86:ba:e0:b7:e4:aa:0c:de:d4:57:c9:05:0c:51:19:cd:
2b:70:ce:5d:77:5b:58:b8:71:4d:ad:51:22:ae:da:35:ac:0c:
ba:68:35:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:05 2026 by rpki-client