Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
File: 8FAUfun2L5cEI8vYttUupfSg7aU.mft (raw, json)
Hash identifier: pjrex3dKOsWbaHDhVpnEI+WOKjlHnwmwYA91NTPkh6E=
Subject key identifier: 3E:4B:40:3D:9C:68:EE:14:41:DD:46:A7:91:C9:9B:1C:9F:39:8F:2F
Authority key identifier: F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
Certificate issuer: /CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Certificate serial: 019FA9071C55112FB4A7270D475D198AFB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
Manifest number: 0520
Signing time: Tue 28 Jul 2026 14:00:43 +0000
Manifest this update: Tue 28 Jul 2026 14:00:43 +0000
Manifest next update: Wed 29 Jul 2026 14:00:43 +0000
Files and hashes: 1: 8FAUfun2L5cEI8vYttUupfSg7aU.crl (hash: oN7dvFD0sOtwjY4PUj0lsxzmr7981lpuezkxg+3rJoI=)
2: BrDWyRlSZn2CXtf4IPz2NecaGek.roa (hash: stEsjXO2Qw6gddDjn4syr8tHdGrYULyxkALHqMMCkng=)
3: UTz-CAu9udrXHC-2_mble0zxioE.roa (hash: khov/J99ODqiFOcvNEfOtWttZ4QbtF1bybuUhyPlZGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:1c:55:11:2f:b4:a7:27:0d:47:5d:19:8a:fb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Validity
Not Before: Jul 28 14:00:43 2026 GMT
Not After : Jul 29 14:00:43 2026 GMT
Subject: CN=3e4b403d9c68ee1441dd46a791c99b1c9f398f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f9:17:cd:92:6e:d2:15:24:03:a3:12:7b:e2:
ea:75:90:02:f1:c4:b4:62:e3:71:4a:1e:cf:30:32:
a8:65:3c:a6:62:b7:43:42:46:09:bd:80:27:62:ce:
37:9e:66:8c:28:4d:dd:56:8e:9a:1d:3a:e9:49:22:
e3:2a:ad:f4:54:38:13:83:89:91:c5:43:63:15:39:
86:fa:22:24:80:77:fa:e8:b0:2c:d3:d6:4b:0a:45:
ca:b6:39:00:a5:94:db:18:82:64:06:c0:5d:a0:88:
b1:43:78:c0:f2:3d:4f:48:e2:64:d3:4e:48:c6:4c:
6a:71:80:2e:e6:16:1d:97:49:68:ac:0c:73:4f:e5:
ef:ed:88:68:be:aa:1f:0e:0f:10:b2:0b:19:9e:f2:
78:67:e2:d6:2b:48:e1:7c:a8:ee:59:19:b8:a3:86:
da:f7:21:76:29:91:3d:7a:c0:df:ec:cf:fc:b8:24:
f3:8c:d5:57:f2:c1:9a:cd:09:f0:49:42:78:11:e4:
7b:b4:7b:a8:fd:43:56:db:b5:61:0b:44:97:91:db:
87:0e:05:61:c9:9c:1a:20:95:b4:0e:cf:f5:27:14:
42:c3:b6:4e:df:5d:85:1e:c9:5b:0b:ca:f2:b7:22:
19:4e:bf:a7:8f:8e:98:b7:42:f5:4c:eb:77:9e:82:
c1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4B:40:3D:9C:68:EE:14:41:DD:46:A7:91:C9:9B:1C:9F:39:8F:2F
X509v3 Authority Key Identifier:
keyid:F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:36:e2:e9:39:c6:24:93:e9:97:3e:15:64:ea:31:6f:09:b8:
fa:7b:f6:1b:0b:97:11:ed:17:14:50:c5:8b:33:4a:7b:49:3e:
17:33:8b:9a:b1:67:a7:eb:8d:7b:63:a4:d1:91:24:b2:1e:9a:
c8:58:c3:13:98:61:a8:af:e1:68:1d:e6:bd:0c:10:40:56:8e:
c9:a5:8d:9a:9e:a3:11:af:03:c6:b8:8d:78:65:ef:7c:28:23:
e8:99:84:eb:88:d6:6a:a9:bb:e7:51:28:23:a9:9b:68:b3:3a:
78:4e:36:77:a1:d0:77:93:05:a7:24:3c:e8:4c:88:71:84:c9:
9a:2c:3b:75:35:bb:1c:69:de:40:4e:1c:7f:79:b2:b4:33:7d:
68:0e:87:c8:8a:f4:51:f9:71:13:43:bd:96:b1:6f:2e:f5:42:
fa:53:52:16:2d:6f:58:da:6d:65:ad:cb:98:33:38:e3:62:d1:
16:10:e6:83:55:77:ad:32:79:e6:e9:b3:51:ac:c4:b7:4e:f9:
2d:db:67:12:36:16:fe:4c:5f:89:25:72:9d:6b:6c:5d:fb:92:
af:10:4a:8c:27:94:5d:54:39:49:f4:f9:b7:5d:c9:44:af:35:
a9:82:50:55:88:92:64:a6:ac:8a:8e:79:fe:84:fe:df:9e:9c:
b3:3e:9f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:17:47 2026 by rpki-client