Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: FJw0rBi8R0H17LTw0ddralVBa/+0RRzxuUN4KeWv/oE=
Subject key identifier: B5:1E:FF:32:65:F1:81:2D:4C:4D:34:44:39:E7:1F:30:C5:D4:CD:DF
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 019FA9ABB2215B99D0F8BCBD708C777E3F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 102F
Signing time: Tue 28 Jul 2026 17:00:29 +0000
Manifest this update: Tue 28 Jul 2026 17:00:29 +0000
Manifest next update: Wed 29 Jul 2026 17:00:29 +0000
Files and hashes: 1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: B9WnfkEY2cJZn8fQTQS1BRZCGEyImmQ+IwBbWGU46JM=)
2: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (hash: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A=)
3: LwxlxO59sLpFilR69YBzUan2hpk.roa (hash: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:b2:21:5b:99:d0:f8:bc:bd:70:8c:77:7e:3f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Jul 28 17:00:29 2026 GMT
Not After : Jul 29 17:00:29 2026 GMT
Subject: CN=b51eff3265f1812d4c4d344439e71f30c5d4cddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:1f:5f:b9:66:e7:51:f7:d2:d5:cc:c9:f7:
d5:74:65:75:70:8f:c2:6e:ee:71:6d:bd:ec:fb:e7:
a7:9b:d0:f8:70:a6:ca:1f:3c:d9:7d:13:3a:30:89:
24:49:d8:1b:9b:96:0a:ff:27:9d:9a:fa:ba:67:ba:
e5:ff:c5:4b:72:71:18:b6:09:47:e3:8d:fe:c5:b5:
44:83:96:48:a1:12:60:d7:31:f8:4e:dc:84:56:70:
89:e4:1a:2d:ee:6b:39:6f:cf:86:78:5b:ef:20:56:
9b:bf:42:05:2c:f6:13:f0:33:cc:db:20:ab:72:74:
f7:d6:7c:27:e2:fb:cf:26:05:b0:aa:55:e2:24:44:
0e:50:8d:9b:20:d8:53:40:74:41:42:45:27:a2:18:
eb:bb:20:0b:99:14:f5:4c:1d:ae:5a:2f:ae:6b:bc:
4a:52:bf:48:60:88:45:27:69:fe:6c:81:0c:e4:d5:
33:35:b1:82:47:c5:ab:cb:ff:c5:a7:95:0e:3b:06:
c2:b3:d0:f6:52:74:bc:45:e1:ba:c6:98:6f:6e:42:
8b:c3:d2:89:e4:75:cd:aa:28:16:be:6f:78:13:b3:
dd:aa:57:f0:c2:5d:66:ab:ee:dc:54:7a:fa:f6:c5:
a1:8a:6f:4d:91:5d:ff:47:9c:72:48:e4:54:9b:ca:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1E:FF:32:65:F1:81:2D:4C:4D:34:44:39:E7:1F:30:C5:D4:CD:DF
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:41:b8:91:db:97:e2:fe:f7:51:48:9e:63:0b:30:f6:6c:6d:
b0:3d:1c:77:96:98:58:26:f8:7d:80:ed:88:66:c2:2b:97:e3:
61:4d:e1:3f:22:dd:18:f1:7a:3c:d1:0a:f9:32:1f:54:34:30:
94:b0:14:e9:d6:18:3b:92:dc:88:a2:dd:d3:13:cb:5c:35:62:
bb:a3:91:d1:cc:a9:93:48:c2:f2:d5:90:e7:d5:78:d3:cc:4d:
33:73:d2:c6:28:ec:cb:de:d7:8d:e3:25:1f:29:a1:c2:ff:2e:
d8:bb:08:c9:a8:3d:d8:8b:f4:cc:4d:ae:60:dc:37:bd:81:2a:
3b:7c:c2:5b:72:8f:8c:7f:21:67:35:91:cf:99:9b:f6:21:47:
c3:10:3f:ea:c3:e6:f6:b7:21:f4:da:40:81:0c:b3:00:bc:68:
45:66:dd:14:50:75:a8:9d:47:4f:90:7d:69:df:b8:89:a4:1d:
7d:f8:43:25:54:2c:45:dd:46:43:cc:a0:9f:f8:ac:14:18:d5:
ac:6c:7a:c7:c5:36:d6:bd:13:05:7f:02:82:77:57:76:74:9f:
06:74:83:b4:d9:0b:18:17:00:bb:6b:d7:d8:e1:31:97:27:78:
69:de:a8:c5:57:ba:ac:c6:41:56:5e:2a:3c:9c:1e:93:c8:73:
9a:bb:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:12 2026 by rpki-client