Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: klgI8M7M7Eemcdn5UJHeQ3EIwnMwSGPHQaEnsMseXNw=
Subject key identifier: 10:11:AD:B1:64:24:1C:7B:B5:5E:04:81:02:CC:E4:5E:3F:2A:FF:32
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 019FAA50875374EF245E50C8CA7F2C394DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 18BE
Signing time: Tue 28 Jul 2026 20:00:31 +0000
Manifest this update: Tue 28 Jul 2026 20:00:31 +0000
Manifest next update: Wed 29 Jul 2026 20:00:31 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: +HY2ogM9QUP3xIBNz5yB64XlpHEuT7upZHBjTsXtMyQ=)
2: BmNLDCfpNhMuta2ovEkjhRgE3XE.roa (hash: 8pxnmm0DlGNm9U9Ei6IyeVDeTXCLFrg3l4BtLYG1QcE=)
3: yS5UEuhVvuTniTo0Rp3QBfAIY2w.roa (hash: EwvpzM71As4QzkpNR7WlLGyGWJ5qcNqZIHlrR3sWFGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:87:53:74:ef:24:5e:50:c8:ca:7f:2c:39:4d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Jul 28 20:00:31 2026 GMT
Not After : Jul 29 20:00:31 2026 GMT
Subject: CN=1011adb164241c7bb55e048102cce45e3f2aff32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:18:39:ab:d9:81:d4:9f:8a:0c:13:e9:92:
63:e6:e9:e6:2d:a3:b4:90:a9:f4:22:40:58:8e:c8:
c1:22:7e:75:8a:f9:05:25:f9:42:6c:f7:67:cb:5a:
9b:8b:f5:1d:3b:c1:b3:df:db:68:9b:b8:ad:a8:be:
4f:68:4e:4c:62:f1:ab:c8:d8:b4:5f:2a:c4:5d:b2:
0d:b9:2c:4f:fa:bd:46:88:bf:17:0f:3f:da:d6:35:
22:a1:52:61:e4:2d:bb:07:c2:ee:b7:64:fb:71:e5:
d8:9d:fb:84:96:dc:fd:60:e3:f1:4c:fd:c1:10:e2:
3f:e3:bc:60:4a:56:f3:67:a1:08:9a:8a:41:fc:ad:
26:e0:31:73:ea:64:ea:31:4e:66:91:4e:19:35:61:
97:c3:e8:ec:79:6f:88:73:f0:e2:d9:3e:34:1d:aa:
5a:02:c6:7a:c2:aa:8c:8f:f8:b9:b5:8b:13:7b:69:
9e:da:5e:db:31:3a:02:30:74:7e:32:5f:fe:be:67:
0f:92:d7:f6:fe:8f:e1:ac:cf:7b:88:6e:bb:0b:8e:
24:56:a7:78:d6:4d:90:ff:9e:46:00:0a:30:73:fb:
35:52:e8:65:b3:9c:70:da:0c:62:54:62:38:bd:80:
8a:4c:02:3e:dd:2e:48:1b:ae:c1:3e:4f:f7:d0:e4:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:11:AD:B1:64:24:1C:7B:B5:5E:04:81:02:CC:E4:5E:3F:2A:FF:32
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d7:c5:56:58:4c:36:f4:d6:95:f4:f1:6c:bd:b1:b1:62:f2:
f7:c4:87:95:0c:26:13:90:2a:df:17:32:42:64:ee:92:ab:2f:
37:97:ad:a7:8d:78:4b:c8:20:2c:f3:e2:1c:c8:54:f8:33:7c:
74:56:0f:43:86:40:4a:bf:ad:f6:fa:32:8c:f2:e7:bf:6d:98:
5b:d4:2b:66:e9:ae:c1:4d:a0:87:01:7b:67:67:30:74:46:0c:
7b:1c:0a:1e:51:b8:05:c9:ed:df:1a:da:f8:d3:08:ad:cc:c9:
f8:60:74:a5:95:62:38:cc:72:43:0f:e9:ec:cd:74:67:b0:8f:
55:65:92:a9:7c:e0:8f:ee:6f:f4:61:a7:f6:ab:94:ac:cd:35:
de:75:33:09:30:96:b3:24:74:6b:a7:fc:dd:00:17:e0:4a:49:
18:92:90:ca:20:54:68:35:52:5c:53:7e:40:9a:b1:3e:cd:0e:
16:d2:79:5f:e7:94:3d:3b:cf:b1:d6:ec:2a:be:8e:cf:06:ac:
30:ed:f5:a6:16:ed:5a:d9:d6:75:58:0c:a4:aa:ef:64:aa:38:
b8:d0:5e:57:5e:ad:37:dc:42:d3:13:d6:ea:53:e3:30:26:f1:
c5:68:19:af:a7:14:5f:21:04:dd:07:31:17:a9:2b:2f:11:e0:
c1:df:c8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:27 2026 by rpki-client