Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File: 8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier: jlPqORIrJqgl3nk1sheDjkeaJL/j84n99hYGJWrIyKI=
Subject key identifier: E5:2C:1E:51:5A:BD:0F:6F:7E:C4:A0:79:A6:9A:35:C9:70:14:78:C4
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial: 019FA93DC7AA03DA458D75CB619377DCE4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 15:00:25 +0000
Manifest this update: Tue 28 Jul 2026 15:00:25 +0000
Manifest next update: Wed 29 Jul 2026 15:00:25 +0000
Files and hashes: 1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: HzOHAaGp3A1pyohxyHH2cd0gdFTQMUsGdIjPhTbTnfE=)
2: RlwzmymQw4BKJ8E0igozFpwiNNo.roa (hash: UVpzzvY69LGOYgMZuAZgP3abVssHII4njzML7dW06y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:c7:aa:03:da:45:8d:75:cb:61:93:77:dc:e4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Validity
Not Before: Jul 28 15:00:25 2026 GMT
Not After : Jul 29 15:00:25 2026 GMT
Subject: CN=e52c1e515abd0f6f7ec4a079a69a35c9701478c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:5d:67:e9:4d:4b:5f:11:d7:77:43:b4:ad:
0b:da:e9:ab:56:0e:30:ae:b0:51:db:b6:62:ae:2e:
5f:a8:82:ae:99:0b:5d:f6:2c:0e:ff:80:4b:46:d2:
ed:78:71:9f:e5:15:f0:47:6c:35:5c:a4:59:a6:68:
f4:0c:90:a8:62:ac:d4:ec:3d:b7:26:f2:0e:79:ea:
dc:9d:df:3b:cd:5a:46:51:d8:3b:58:c3:cf:d7:1f:
98:4d:61:b0:e0:0c:71:81:8f:e5:64:71:f2:56:ee:
9b:1c:c0:86:74:86:ff:97:9d:69:15:3a:76:0c:e4:
9a:af:b3:66:af:68:4c:cf:f1:f1:61:e1:45:7a:a1:
f0:9b:bf:fa:f1:4f:bf:80:7f:b0:a7:da:96:51:bf:
f9:62:07:c6:d3:3b:2a:3b:60:39:dd:0b:98:ba:f7:
09:5f:e8:5c:99:e9:ce:24:c7:23:3a:96:63:23:e7:
58:32:e0:cc:92:53:0f:1e:b8:c8:be:6e:c5:b3:4d:
0a:e9:bd:24:d2:f8:c0:16:e5:8f:da:0a:c8:2a:a0:
a3:92:7d:5e:0c:85:38:46:d4:64:7f:54:50:42:3e:
84:c2:f3:e6:09:b2:37:01:27:e6:bf:9b:95:79:8a:
db:5f:8d:8c:ea:4b:b8:c8:87:79:6d:bb:1b:dc:e0:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2C:1E:51:5A:BD:0F:6F:7E:C4:A0:79:A6:9A:35:C9:70:14:78:C4
X509v3 Authority Key Identifier:
keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:de:ec:55:89:53:5c:b5:26:a3:4c:45:32:9e:43:89:b5:d9:
90:11:d8:43:ec:4d:5b:cc:f5:f2:92:fe:7f:1d:83:32:8c:f0:
2c:61:9e:b2:ad:07:aa:4f:cf:c4:7b:cf:ba:f6:cb:44:b7:f4:
64:cb:0a:a4:0a:32:49:8c:fe:ec:8d:96:df:a2:64:62:ef:7d:
f5:d4:ad:4b:7b:83:02:be:09:4b:17:83:25:68:83:c6:73:4e:
0d:ec:fb:dc:d9:15:70:07:2e:85:53:94:77:c2:dc:9e:cd:74:
89:df:f9:1b:0b:9a:c9:2c:0e:07:89:c7:7b:0e:2b:c7:99:ad:
e2:c0:65:b8:ff:bb:dd:15:96:90:03:35:35:00:c3:be:9d:62:
61:8b:e2:58:7e:21:4c:7c:fb:e0:04:2e:bb:55:0d:a3:7e:9b:
64:32:98:e2:8a:f8:87:ce:6a:90:61:1c:59:d7:8c:14:81:33:
cb:23:81:48:bf:1f:84:63:06:ff:62:66:1a:f1:55:f4:94:05:
0d:c1:27:7a:96:95:2b:f1:64:1a:88:d5:1f:19:61:0a:55:2a:
bc:62:7d:80:1c:8b:7d:03:8a:30:cc:b0:6e:1b:fb:5e:40:32:
b2:1c:b8:4c:98:e8:3d:02:9c:7c:6f:de:e1:f0:6a:09:3a:16:
17:2d:71:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:57 2026 by rpki-client