Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: ILmSISp8UmptPM2dcLd2sFkgLZuLrpnMSrWYg3rQSLs=
Subject key identifier: A9:C7:FB:E9:39:D1:B9:D4:59:DD:DC:1F:58:B7:3E:57:AD:95:F3:1E
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 019FA975D177077F5B2226E72FC3081844E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 15C9
Signing time: Tue 28 Jul 2026 16:01:38 +0000
Manifest this update: Tue 28 Jul 2026 16:01:38 +0000
Manifest next update: Wed 29 Jul 2026 16:01:38 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: /h4w4n01BgJvs/D7nVbRVSZORmxHpSLocrwHherVdLQ=)
2: Fj143MGHKktmJd-EbkW5Fscgq7Q.roa (hash: qVq1ZDi68rbqJdslxCJ44DoiVXJKtqjpcHKrD37I/Xk=)
3: HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa (hash: Lh+MTs7zk3xzxtVQ8DETff3QLgsLbSUualTWlhIFivY=)
4: WHeuBr41SRHYb97wRA-9N6rZlYY.roa (hash: JKr5DtUCS/MHFFPv5d8SACsCIRv8QZPYpdOpKjP/pqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:d1:77:07:7f:5b:22:26:e7:2f:c3:08:18:44:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Jul 28 16:01:38 2026 GMT
Not After : Jul 29 16:01:38 2026 GMT
Subject: CN=a9c7fbe939d1b9d459dddc1f58b73e57ad95f31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:0d:53:61:37:0a:21:92:a3:be:22:3c:d6:
38:a3:b9:94:55:2d:09:e8:7e:7f:09:f4:e8:98:c1:
30:73:d3:4e:af:a2:41:72:c4:b7:9d:3d:ee:bc:57:
95:b5:93:96:9f:9b:17:9b:0e:eb:b5:bc:b2:3a:db:
43:2d:28:71:08:11:82:dd:71:30:88:ff:0c:52:68:
b3:5f:58:fe:36:b7:84:66:74:c8:95:ea:95:e3:49:
5d:f1:b9:e6:cb:49:e7:fb:e5:4f:6c:ad:cf:56:8a:
c7:11:32:d9:54:f4:94:5a:6c:95:5d:19:7c:18:8c:
16:fa:2e:76:08:64:fa:9c:53:37:fb:c1:e9:02:f7:
c6:60:e9:3e:7c:49:21:3c:f5:9f:9d:25:46:71:ae:
c7:1e:36:96:98:53:9d:7f:02:e6:f9:a0:f0:9f:68:
26:82:38:c5:49:59:e6:aa:2d:60:f3:dd:7e:c6:e6:
e1:f7:16:46:83:f8:45:67:03:ff:46:75:5c:d3:b7:
3c:85:b8:c2:08:21:13:2a:02:78:bd:e0:43:6d:dc:
b6:90:06:00:86:73:0e:e2:dd:68:79:54:b4:22:3d:
e5:b7:11:ed:be:d7:05:a0:2f:e8:3d:cc:d9:e7:df:
51:13:89:05:35:70:16:91:41:74:99:f3:f2:4a:a5:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C7:FB:E9:39:D1:B9:D4:59:DD:DC:1F:58:B7:3E:57:AD:95:F3:1E
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bd:7a:17:d6:c4:b2:6a:31:5a:b5:47:ae:34:bf:b9:20:d4:
16:4a:01:98:bc:bd:1c:9c:3b:0f:46:84:1b:25:cb:1e:84:b4:
bf:35:b8:75:9f:30:5e:87:ed:36:98:32:b4:c8:89:11:d0:bd:
f2:9b:ae:35:2c:86:5e:d8:c8:ca:15:af:db:60:75:ed:72:75:
1b:f2:84:d1:02:fd:2f:c7:e6:7f:a0:f7:20:c1:f7:b1:35:60:
9f:7b:12:4f:ee:c6:1c:b0:bf:fe:35:a6:29:3a:d7:48:2c:30:
29:15:a2:b1:0f:a9:22:05:f3:0c:41:d1:fc:c3:41:35:b1:6c:
7e:c5:7e:68:f7:61:0f:8a:ae:27:06:f9:24:0b:c4:ac:85:5e:
88:92:e9:98:66:2f:4b:ed:7b:a5:fe:ac:a3:68:f0:16:7f:61:
55:56:c3:c5:a8:83:bd:ba:af:46:11:b4:37:c4:6e:68:12:20:
c1:e1:5d:d8:c8:e3:b1:01:24:5d:be:f6:c9:1e:d0:a8:2f:0c:
33:97:9d:b3:96:04:e5:1c:71:15:2c:ce:45:ab:04:18:ab:d6:
23:4c:79:85:c9:25:83:22:74:c4:14:5b:1d:b6:3d:d9:17:2e:
9f:e5:9b:7a:41:05:3f:d5:5e:03:f8:67:89:c7:b6:3f:49:be:
1f:a1:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:33:16 2026 by rpki-client