Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File: 8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier: h0h9h2bgYMatncacodLTK+GxOVSxWoiVk6z8R82Ft7Q=
Subject key identifier: 38:6C:7F:BB:68:D2:84:10:B8:D8:A9:35:DC:6F:50:D5:EC:80:CE:A4
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 019FA8CFCF1CC5B686B50591AC724AECCCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 13:00:18 +0000
Manifest this update: Tue 28 Jul 2026 13:00:18 +0000
Manifest next update: Wed 29 Jul 2026 13:00:18 +0000
Files and hashes: 1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: /Ob1m/zoq/onIflEpzNb9F8cl9L+aSxmBw8Hcl1fqfs=)
2: XXKVsIY0HbIJymCv56HgZpurwFA.roa (hash: Sk/E2nAzU4UxwMsd952VhcruaPuVHKtKy3ii+1Myr2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:cf:1c:c5:b6:86:b5:05:91:ac:72:4a:ec:cc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Jul 28 13:00:18 2026 GMT
Not After : Jul 29 13:00:18 2026 GMT
Subject: CN=386c7fbb68d28410b8d8a935dc6f50d5ec80cea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:c0:37:a9:22:36:ce:7f:e0:1e:a6:43:0d:
e9:8b:66:7d:8d:86:75:20:9f:06:bc:ad:b2:2f:a3:
3c:fc:de:eb:1c:09:dc:e2:5d:9e:62:fe:3e:ed:e7:
b2:a5:85:05:0c:88:20:4e:41:20:3d:de:46:52:3f:
8f:96:c1:93:c8:7a:6f:7a:54:19:8d:cc:70:b1:55:
73:7f:36:2b:89:66:c7:82:b3:28:ff:f2:36:ce:c9:
ea:aa:01:59:ef:7b:ea:07:43:31:7a:ae:25:6d:2a:
d4:2d:3d:7a:e5:1b:b3:a8:94:ca:56:f6:13:f6:6b:
86:c5:e8:86:51:37:18:9e:0a:95:8c:6e:73:fc:0d:
2c:89:a8:b2:3e:86:bc:85:e1:5c:bc:f0:a0:72:bb:
31:9f:9c:45:6d:af:ea:fa:69:f2:c4:57:bd:2a:b9:
30:91:44:8b:33:06:bb:98:c8:8b:0b:e5:42:88:66:
8b:df:c2:df:7a:64:fe:73:e3:a3:41:be:80:93:d8:
e5:92:1d:e2:03:f7:70:0b:e0:6e:2b:19:9e:59:21:
1d:e6:a4:b4:1f:78:d9:8f:a3:b8:82:32:3a:d8:bf:
8a:1e:c7:ea:b3:07:f9:3d:ee:48:29:34:fd:0c:b6:
b4:df:01:5e:63:f4:13:24:c7:7e:aa:24:32:a7:f9:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6C:7F:BB:68:D2:84:10:B8:D8:A9:35:DC:6F:50:D5:EC:80:CE:A4
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:67:ff:21:bc:63:a9:2e:b4:65:ff:8e:0b:d9:74:89:9b:98:
e5:df:28:72:d8:53:76:f8:60:e4:45:c3:95:44:79:92:cb:51:
9b:e0:2c:43:67:a6:84:96:bf:48:52:e6:5d:61:88:7e:05:fe:
2f:ec:7c:e9:ee:32:3e:fc:0d:c8:c3:1e:95:cb:0e:fc:8e:bc:
8c:5b:a6:0c:a4:ac:7b:76:82:be:1f:7d:40:e9:cf:90:28:6a:
93:f0:c6:34:4a:38:82:f3:c9:f0:b9:15:e5:67:e1:27:21:95:
85:c8:f0:2c:2f:54:ea:40:88:2e:a3:2c:25:a4:e8:40:b1:e7:
d7:7d:06:8c:40:6e:26:8a:61:3c:b8:29:4d:27:23:35:e7:3a:
3e:e9:9a:e1:a8:8c:82:ba:6e:fc:8b:22:b8:c4:7f:55:00:17:
d2:9f:10:ed:bf:49:9a:da:e5:7c:e4:1e:b0:9f:1f:b3:db:b8:
36:ac:af:85:45:11:af:02:9b:d7:96:71:86:ee:29:1c:b7:73:
48:da:14:66:a8:0e:84:09:34:88:22:2b:28:e6:22:32:30:5c:
e2:fd:c0:85:95:11:60:f7:35:e3:8b:dc:e0:be:28:f7:ad:60:
16:26:ca:ce:c2:97:3e:66:a3:60:f1:d5:04:e9:50:c3:46:9e:
a4:2a:ec:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:25 2026 by rpki-client