Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
File: 8bi7seGGpZnUzAWMq_TfDiUvMfo.mft (raw, json)
Hash identifier: hKe4sM/31xcx6R4MZl/JQEKysuBme23l2HOJrKo7E5I=
Subject key identifier: A5:55:FC:74:E6:C3:25:60:10:D6:EC:A0:64:7D:C9:E5:6B:7E:99:37
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 019FA907718357A3D47F208F1C9DE63FE26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
Manifest number: 19C2
Signing time: Tue 28 Jul 2026 14:01:04 +0000
Manifest this update: Tue 28 Jul 2026 14:01:04 +0000
Manifest next update: Wed 29 Jul 2026 14:01:04 +0000
Files and hashes: 1: 8bi7seGGpZnUzAWMq_TfDiUvMfo.crl (hash: DqLABzSDkyKxGglqtJE1wtzBbwTQUpHOsSYMnirPuM0=)
2: NaRt1HVL2Kx-sncfnj_qlUg6AzA.roa (hash: eMNf8UixOg4CJ2lG1Z2ydmE1AwqLlbPFY92TlJawe5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:71:83:57:a3:d4:7f:20:8f:1c:9d:e6:3f:e2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Jul 28 14:01:04 2026 GMT
Not After : Jul 29 14:01:04 2026 GMT
Subject: CN=a555fc74e6c3256010d6eca0647dc9e56b7e9937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:e5:25:1a:70:60:60:f5:3e:19:1b:aa:d1:
4c:9f:25:fb:5e:12:4e:b3:b1:57:0d:86:1e:0b:db:
89:54:34:5d:6e:59:94:e9:d0:c5:8a:eb:6c:3c:51:
7d:e5:fc:99:79:d0:28:9a:79:4b:fe:7b:ec:b8:69:
27:b8:cc:d7:16:a6:cc:e1:7f:34:58:d3:87:77:54:
29:fa:96:4f:ec:25:9d:f2:81:d6:51:58:c2:aa:52:
19:b4:23:23:76:50:b6:5a:b7:74:b7:33:68:e3:65:
a2:bc:eb:9a:9e:8b:bd:4d:11:72:bc:b6:d7:e8:9d:
cd:d0:67:26:55:2b:81:d9:17:8f:bc:e6:3a:c5:00:
4c:ad:6a:61:67:9e:60:8b:56:25:0d:9b:ce:ff:02:
61:ab:4f:d8:60:a7:9a:47:c8:c9:80:e5:4e:7c:26:
b9:27:39:e7:25:51:35:57:75:8a:8e:ed:2a:78:59:
ea:38:97:54:07:dc:4d:3d:8b:6e:7a:69:a8:1d:53:
50:2a:8c:51:d3:44:cb:a8:f6:04:ef:58:1e:f6:a2:
61:1c:ad:5c:c5:4d:e3:0c:4d:50:0c:61:19:35:29:
f8:5d:97:3b:b6:62:0e:23:ca:38:82:50:6b:88:21:
c4:d6:19:92:67:4d:73:d6:8c:61:a3:df:59:30:d0:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:55:FC:74:E6:C3:25:60:10:D6:EC:A0:64:7D:C9:E5:6B:7E:99:37
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:73:9e:be:9c:88:07:a0:61:83:0b:52:dc:4d:b6:d3:c7:22:
dd:44:05:18:14:86:9f:75:73:12:9e:b8:01:35:fd:6a:08:df:
20:4b:19:c1:e0:99:b5:e1:74:46:98:0e:14:ec:a2:54:af:29:
3a:51:0a:13:38:af:f3:91:7c:b1:b8:97:9b:69:ca:de:4b:7c:
bd:bd:a7:9e:11:64:03:aa:eb:46:e4:fd:47:2f:cd:86:26:3c:
3c:77:f3:e5:9c:a9:1d:ee:bf:15:df:1a:0e:f6:0b:85:0c:8b:
6f:65:05:cf:1e:33:b7:82:67:c8:0f:25:c7:18:1c:78:b6:3f:
8f:4c:e4:56:b0:10:5c:72:33:96:67:fd:41:54:d5:b0:60:59:
25:98:d8:9e:03:e4:0c:f3:51:b3:c9:d9:8f:cc:37:86:42:af:
9a:15:b4:90:ed:8f:59:b8:43:f0:32:89:98:87:8d:0a:23:77:
a7:98:70:85:5e:13:0e:ef:70:db:5b:68:22:ee:eb:bc:22:b4:
a1:de:0a:da:3a:cd:03:6f:06:8b:71:41:56:ac:c2:14:45:c8:
12:e6:e9:6b:f9:e5:f1:2e:48:4e:95:d7:0d:d0:b9:d9:d7:01:
07:5e:73:d7:9c:bc:2b:bb:1c:02:23:60:e8:56:03:33:bc:58:
43:78:9f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:26 2026 by rpki-client