Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json)
Hash identifier: Qpj227TB/4NRDdnAbguoC4H8OxmajNP08k3BHOXD4U8=
Subject key identifier: 75:D2:29:67:02:4D:8D:3A:1F:76:5E:78:2E:7A:3D:B1:CC:EF:78:32
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial: 019FAA87F1FFC1AC7739091BE4723D059112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
Manifest number: 0C8C
Signing time: Tue 28 Jul 2026 21:01:03 +0000
Manifest this update: Tue 28 Jul 2026 21:01:03 +0000
Manifest next update: Wed 29 Jul 2026 21:01:03 +0000
Files and hashes: 1: 1e3-ee_DDB8uKbq4DDF2oeY9brA.roa (hash: d1HzxXfkVXwQpykJbxZZ+w5Pxsb18cIOczK6ype9Npo=)
2: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: jLpUOHW4vkE4dzp6X9LmOxcRhkYM1DkwiyThv2gvoKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:f1:ff:c1:ac:77:39:09:1b:e4:72:3d:05:91:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Validity
Not Before: Jul 28 21:01:03 2026 GMT
Not After : Jul 29 21:01:03 2026 GMT
Subject: CN=75d22967024d8d3a1f765e782e7a3db1ccef7832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:ed:ce:50:72:84:b9:30:6f:e0:f1:06:72:
7b:f6:5a:4c:1d:55:bb:99:01:09:8c:48:7a:30:d2:
d2:10:ba:af:23:85:55:e1:92:01:3d:19:fb:11:a9:
33:6d:86:2d:35:ce:e0:c5:8b:4a:08:95:1b:00:85:
41:ca:44:90:8a:fb:67:17:30:88:c1:ef:4c:83:d7:
7c:6b:a3:01:81:6e:82:1f:80:70:ce:d5:c4:73:2c:
39:ff:44:55:73:7d:19:2c:3a:34:1b:28:3e:0c:52:
0b:81:c1:a5:96:4f:bc:f6:b7:08:bc:3d:5c:f5:e5:
11:64:f4:68:16:8f:62:ca:91:c3:ab:fb:ed:41:83:
6e:c4:05:55:4d:01:17:d6:41:e2:35:99:43:db:28:
37:13:36:72:a5:aa:b2:de:c9:a7:f0:14:f2:42:7a:
92:cb:22:20:fe:a4:d6:46:f9:5b:ea:2d:fb:bd:ab:
2d:81:bc:2c:aa:e1:7d:e0:a5:d4:41:7b:e8:58:af:
5d:60:52:3d:ed:d7:70:2b:0a:38:dd:2f:11:1c:fb:
59:86:7f:69:0b:6c:56:2d:c8:12:51:47:6f:88:b2:
7b:6e:f6:d4:c1:bd:cb:8e:ff:bc:a5:09:b8:e2:a0:
7c:c9:e6:b0:aa:74:f6:34:7b:bf:78:5e:3a:45:67:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D2:29:67:02:4D:8D:3A:1F:76:5E:78:2E:7A:3D:B1:CC:EF:78:32
X509v3 Authority Key Identifier:
keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ce:41:11:6a:4b:b0:c1:c7:9f:8a:55:a3:ad:4e:9c:f4:7e:
8a:92:36:39:a2:9f:87:82:5f:ea:44:51:df:65:4b:e5:54:09:
d5:da:69:92:49:6a:76:d9:ca:e6:ad:02:70:0d:6c:27:73:20:
fd:46:c7:00:7e:d4:10:52:8e:ed:fe:28:e2:d2:fb:44:3b:7f:
35:c5:4a:68:23:f0:e6:87:83:e8:2c:14:fa:c4:24:99:b3:a5:
69:f9:b2:55:87:c2:f1:b6:12:17:85:8d:38:94:ec:b5:b2:52:
9f:38:5c:0a:96:1f:ed:ae:3c:2f:cd:c5:64:99:2b:f1:3a:58:
f8:3a:71:cd:af:c7:02:59:f8:d6:90:a7:85:6a:2f:39:8d:a2:
ad:85:fd:c6:1f:9c:0d:fe:d4:2b:db:23:ec:de:6a:fb:6b:e8:
01:87:82:cc:28:fd:cf:d0:85:32:6e:6f:17:61:3a:eb:76:2f:
1a:d2:96:c0:03:f0:ca:c9:09:3a:87:ab:29:3e:93:7a:03:28:
1a:d0:10:9e:63:5a:71:a8:5b:cd:6b:5c:d9:e6:bd:8d:09:30:
c4:53:a9:3a:6e:f0:59:b1:10:46:66:d4:16:8e:ce:e1:33:57:
9d:fe:5c:85:c7:b8:2b:de:06:32:b0:14:c4:f2:74:97:1d:b3:
1e:a6:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:03 2026 by rpki-client