
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
File: 8RqaRFV9Rv8tgIiiKIha_wANwqI.mft (raw, json)
Hash identifier: u6C8SeJJrnZOo7lY0+wFJXVjBsfr9emcdik0xyM3cs0=
Subject key identifier: 10:42:D0:A9:5A:2A:2F:85:04:76:9E:22:83:97:55:54:77:52:84:EE
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Certificate issuer: /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial: 019FA9AC518E508D9167DA3E1E7FF23D52D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
Manifest number: 0E1F
Signing time: Tue 28 Jul 2026 17:01:10 +0000
Manifest this update: Tue 28 Jul 2026 17:01:10 +0000
Manifest next update: Wed 29 Jul 2026 17:01:10 +0000
Files and hashes: 1: 8RqaRFV9Rv8tgIiiKIha_wANwqI.crl (hash: 0mTRvsQQhAP6uXg/joYCfwBMHnDh0JrBcE62OrstdyY=)
2: z6n92NIP1tvVgc0euBLMnBtSoZk.roa (hash: Jjy7mkaYofsu+k30uI9CDy57tkSDpiXwny9UHpG3aJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:51:8e:50:8d:91:67:da:3e:1e:7f:f2:3d:52:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Validity
Not Before: Jul 28 17:01:10 2026 GMT
Not After : Jul 29 17:01:10 2026 GMT
Subject: CN=1042d0a95a2a2f8504769e2283975554775284ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:af:75:39:d7:e4:00:b5:d3:8b:6a:b3:d1:
47:73:f1:a6:9b:57:e4:e7:3b:be:50:ff:2d:bb:76:
b0:8b:a1:f4:6c:45:31:60:dd:6d:26:47:2b:47:b5:
ed:19:d7:2f:2e:97:f8:ee:b5:3b:ee:15:5e:c9:e1:
a3:f8:bc:e0:ba:e0:b6:6c:19:47:24:b5:07:16:24:
b6:d3:6b:d6:b4:88:95:51:64:20:9c:2f:34:d4:89:
62:46:cf:b1:4f:6a:0e:b5:d0:f6:7c:55:d2:dc:71:
2c:c4:76:f7:e7:e4:90:af:37:d6:e8:d8:0d:21:fd:
0c:f3:5d:6f:0b:6f:9a:af:7f:6c:20:96:db:81:4c:
1a:57:0a:94:33:9c:4d:32:d9:c4:06:df:d0:80:01:
e8:11:b1:47:e5:20:b6:9b:c1:22:36:9f:e5:fb:8b:
35:6b:ad:88:27:03:1e:8e:e5:e0:01:a8:12:87:09:
a2:63:39:44:02:86:81:6c:b2:55:5f:02:ff:50:13:
87:6d:ea:a4:9e:6b:d8:76:e6:e7:f7:e0:5b:1e:70:
3c:d0:62:ac:47:84:0d:9f:24:3b:8c:f6:1c:ca:d3:
62:47:fc:23:4d:05:07:9b:9a:b2:2e:77:ad:8b:c1:
af:04:d2:f9:64:46:aa:a8:76:5c:d3:8a:c3:a1:76:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:D0:A9:5A:2A:2F:85:04:76:9E:22:83:97:55:54:77:52:84:EE
X509v3 Authority Key Identifier:
keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:99:53:13:da:86:06:28:86:da:75:5a:46:b0:a8:9e:1c:31:
00:88:b8:da:06:33:47:08:65:4a:4f:da:6c:46:c4:45:2f:63:
2b:9b:03:11:a0:cd:8f:c8:cb:a9:68:6a:3e:68:74:4d:c4:1b:
2f:e0:61:db:d7:43:83:7f:67:46:f0:dc:a7:cc:a8:b2:8a:6f:
b1:f2:06:72:fe:89:59:4f:51:d9:63:53:f8:f0:5d:91:4c:2a:
c7:26:0c:b9:3b:77:41:e4:b9:0b:fa:47:9f:b3:66:e8:73:4a:
36:ce:14:c3:45:c0:3a:84:14:e5:e1:89:22:c4:3d:a5:0f:5e:
63:4c:32:42:ff:ba:21:23:a0:7e:0f:2a:81:d2:7a:c2:9c:75:
44:ae:b0:0d:74:2c:0c:f6:2e:f1:07:f4:51:36:cd:7b:8c:f3:
70:12:44:9d:9a:f9:f6:10:d1:c8:a1:75:8b:f0:29:50:a6:d3:
d5:37:1c:8b:ca:1a:6a:33:56:c8:ae:3c:f2:62:7a:b0:ea:d4:
b0:50:5c:61:7a:68:3b:36:29:14:06:d1:57:54:6f:21:36:b6:
92:b8:bf:ba:c5:4a:1d:c6:2a:e5:ce:1b:0f:f9:b7:2d:07:bd:
f5:f5:50:4f:f3:b4:c7:10:3a:a7:2b:d6:cb:1e:62:f6:17:5b:
05:ea:2c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:17 2026 by rpki-client