Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: N/ZsvBYkEmTxate4jLOnbwH3vEMPhBnfc4QCbsRZ630=
Subject key identifier: 7A:D9:AB:49:F7:65:59:F9:21:B1:3C:DD:FF:8E:0D:28:12:8C:B6:80
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 019FA9ABE03E782FE8955DD2CB8B013CFB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0B52
Signing time: Tue 28 Jul 2026 17:00:41 +0000
Manifest this update: Tue 28 Jul 2026 17:00:41 +0000
Manifest next update: Wed 29 Jul 2026 17:00:41 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: kuEk/j3XeoKZ2vSNaqSZGECprWg6iff5+ql+/Vw9xQk=)
2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:e0:3e:78:2f:e8:95:5d:d2:cb:8b:01:3c:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Jul 28 17:00:41 2026 GMT
Not After : Jul 29 17:00:41 2026 GMT
Subject: CN=7ad9ab49f76559f921b13cddff8e0d28128cb680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:fd:75:ed:1f:0f:32:d9:5f:9f:99:4a:65:
46:99:d9:e6:ed:34:f8:cc:27:3a:76:1f:cf:a8:dd:
dc:9f:d8:3d:45:c7:43:08:e4:2b:f8:af:c3:87:5c:
8f:d6:43:94:f8:86:16:e3:cc:89:39:fa:ae:97:27:
86:f5:36:dc:fb:e9:ef:c2:54:19:59:6c:ef:fe:7b:
58:73:11:20:51:34:62:d3:57:6c:3b:c3:75:41:16:
d8:dd:82:06:75:94:db:6c:0a:bc:69:1a:ed:44:bb:
95:94:ed:4f:90:80:f1:7c:3f:b2:02:11:f3:1c:29:
3f:bd:f3:48:16:87:fa:65:61:43:f1:da:ee:98:36:
bc:2f:42:8e:6e:36:8d:d4:cc:a5:83:be:ec:3c:bb:
3e:d3:4c:71:82:02:c3:cb:67:98:26:72:55:be:e3:
9a:82:19:77:35:a4:c4:c0:33:b7:dc:9f:6a:85:cf:
97:30:dd:e8:5a:33:17:f0:c6:65:a4:ce:b2:2d:7e:
38:ab:b1:f9:dd:30:e4:11:72:7b:d6:e1:04:65:52:
1e:f0:3d:46:67:65:9f:91:2f:3c:ee:36:3f:50:4a:
a4:da:10:5a:47:d8:16:6b:bc:43:86:fe:7e:c3:30:
29:a4:e4:5b:72:93:8e:30:1c:b3:60:73:ac:c0:bc:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D9:AB:49:F7:65:59:F9:21:B1:3C:DD:FF:8E:0D:28:12:8C:B6:80
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f4:f7:a7:9d:e1:25:eb:38:8a:82:14:ab:75:b8:1a:56:b1:
da:93:4c:cf:16:9e:25:2e:c2:e9:ea:77:a2:22:63:c4:57:89:
35:ac:f6:49:15:21:ee:87:af:31:cd:f5:ea:42:df:a4:fb:a8:
74:b3:d6:55:5f:7c:ec:13:91:93:9f:27:35:31:f3:a9:25:4b:
97:26:58:63:41:f7:ed:1b:a4:f6:cb:9c:4c:9f:dd:26:89:66:
2c:e3:45:03:ac:42:08:24:c9:12:f9:b0:cd:4e:ad:d3:c5:20:
db:06:15:35:5b:ed:a0:61:e7:89:66:0c:43:81:70:2f:3d:75:
a5:92:65:8c:0a:1e:12:38:68:5c:b4:8c:7f:28:80:a6:a1:6d:
14:32:f8:37:e7:fd:a9:8e:aa:5b:4e:95:dd:fd:00:35:76:80:
f9:72:64:2a:48:eb:68:a7:82:20:e1:13:6e:60:47:be:f3:44:
d4:9d:de:64:41:96:da:63:39:fa:51:84:34:e9:28:02:7a:d2:
b8:99:53:a5:95:25:62:e4:11:2a:86:e7:9d:41:7b:b4:cd:b7:
3a:fd:b5:08:e5:2d:1e:46:f8:f7:73:d1:82:b7:df:71:47:65:
82:d0:98:a3:f9:61:48:55:fa:dd:f7:11:a9:a7:09:cd:8e:6b:
d6:bc:c9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:48 2026 by rpki-client