Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: 6WWFCXI+1+9OBZ4gBgC9qw5zElBWYwSBCagVYt93IvY=
Subject key identifier: 02:4A:B7:DC:8D:A9:E0:46:85:90:95:EF:51:39:F7:8B:BE:1B:47:F1
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 019FA93DB4D3FFBB47DAA8F6F23C35C2BAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 1964
Signing time: Tue 28 Jul 2026 15:00:21 +0000
Manifest this update: Tue 28 Jul 2026 15:00:21 +0000
Manifest next update: Wed 29 Jul 2026 15:00:21 +0000
Files and hashes: 1: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: JV0Yt4ThssyXJy+9dLWbg2Q8PsJq8TXlKY3Op1enLPk=)
2: IVsntpINLVptcAxi9F9OffThDww.roa (hash: lHhfp2KRoCfz9OytgUFCH4dMCm+ma5lnnpotEWvlFIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:b4:d3:ff:bb:47:da:a8:f6:f2:3c:35:c2:ba:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Jul 28 15:00:21 2026 GMT
Not After : Jul 29 15:00:21 2026 GMT
Subject: CN=024ab7dc8da9e046859095ef5139f78bbe1b47f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:8a:03:53:be:f5:ca:f7:05:05:f4:5c:64:
11:1b:e9:1a:6a:66:e9:45:72:16:d4:88:e2:43:84:
16:12:90:cf:93:31:db:85:7a:80:27:aa:8c:70:47:
0d:e0:50:66:da:71:bf:70:56:99:50:18:0f:37:dd:
bf:a2:23:71:28:d9:0a:c2:5d:23:57:da:fe:49:33:
d7:47:6d:17:12:28:ab:8c:b4:a2:64:c7:5b:62:b5:
fc:88:36:12:6e:27:8d:82:30:3c:1a:cc:ab:77:4f:
46:18:f1:6c:96:27:f5:c4:b1:86:7e:d1:1e:e1:2d:
8c:b0:3f:d5:17:8e:ba:d1:36:ec:23:6d:7b:40:67:
93:90:2f:fb:39:c6:6c:59:93:9f:d6:fc:d6:07:f5:
2b:86:03:a5:29:1d:3b:6b:0d:3c:a1:f4:20:b7:1d:
cd:fe:3f:88:59:39:8a:ce:3b:2e:bd:d3:9b:83:e7:
d7:21:68:36:ef:b9:ce:4d:55:5b:55:a4:aa:ff:19:
29:a5:a9:79:f2:f3:57:4a:14:59:c3:d6:01:a2:eb:
32:d1:ce:de:f8:54:10:8a:6e:c7:4a:c9:0e:e4:75:
2d:6b:3b:22:7d:11:46:be:cc:3c:ef:d3:c2:0c:d3:
2e:7c:75:3a:78:7c:1d:f1:04:15:ef:9d:f7:c6:62:
f8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4A:B7:DC:8D:A9:E0:46:85:90:95:EF:51:39:F7:8B:BE:1B:47:F1
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9c:c2:51:ac:55:82:f5:d5:a3:be:bc:18:ee:00:e3:bb:8c:
19:7e:1b:05:b3:04:fb:92:d3:20:06:6a:65:08:5f:3c:0a:cf:
7f:38:c8:5f:6b:07:8b:30:4b:8e:1d:9b:cb:39:a3:18:51:67:
e0:29:dc:9e:67:79:27:45:9c:95:9b:49:69:71:41:29:75:09:
c3:18:52:53:f4:fe:07:c5:6c:39:35:d6:a3:2d:43:21:02:f9:
d6:e5:93:a0:76:a3:d3:34:c6:b5:a7:ec:9d:0f:44:fe:c9:8c:
1a:21:1c:d2:e9:fa:2a:d6:60:48:e6:54:62:e5:1e:7c:23:27:
56:4f:7e:ad:10:31:0d:3d:fd:90:19:ab:4c:93:3e:ed:a8:77:
d8:60:88:c0:51:b1:4b:d6:2a:80:09:61:86:6e:ad:59:4c:16:
22:74:48:94:2a:e3:13:e5:fa:ea:df:f0:ce:80:91:90:77:15:
bd:0f:1b:f4:c2:9c:4a:b2:1f:b0:0d:43:54:92:ec:e7:ad:25:
88:c2:a4:7a:89:4a:03:7e:be:50:a2:63:5e:8a:c1:ed:ed:73:
ae:ff:55:77:a0:74:23:cd:e0:2f:af:00:a8:c4:59:eb:e1:08:
d5:5e:72:e9:f1:a5:3f:87:91:87:2d:a7:3c:a2:21:86:3a:63:
86:6a:5c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:39:58 2026 by rpki-client