Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
File: 8zk0PMbVHduONjgpmhu0lfRYCSE.mft (raw, json)
Hash identifier: k/T7Oscu6uQndu4X6hRgQqeloBXvcjtzcDuqcPHop2k=
Subject key identifier: E5:AA:1C:BB:5D:7B:BE:87:52:6A:88:93:0F:83:D5:E6:53:A8:06:90
Authority key identifier: F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
Certificate issuer: /CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Certificate serial: 019FAB2C56724E30759748E0E35D3555D9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 00:00:37 +0000
Manifest this update: Wed 29 Jul 2026 00:00:37 +0000
Manifest next update: Thu 30 Jul 2026 00:00:37 +0000
Files and hashes: 1: 3ZbP8D4oyhCe4u5mlugxkhUP_G4.roa (hash: mYQ4ggMgVLrFbz01ZBuOhgHTwYfwTmz0/Kv0k+37TBo=)
2: 8zk0PMbVHduONjgpmhu0lfRYCSE.crl (hash: I6pL7Rz9pV36Bwqg4d2isJpOZ5hXnVao/HAsTMEMc6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:56:72:4e:30:75:97:48:e0:e3:5d:35:55:d9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Validity
Not Before: Jul 29 00:00:37 2026 GMT
Not After : Jul 30 00:00:37 2026 GMT
Subject: CN=e5aa1cbb5d7bbe87526a88930f83d5e653a80690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0d:17:b3:31:2a:60:26:15:99:d8:cb:42:df:
6d:15:41:6c:a8:d4:56:17:d5:08:4f:e5:80:5c:fe:
e8:1c:bb:07:fa:c3:46:b8:e7:63:6b:c4:1a:17:23:
bc:1d:4b:b6:ab:44:bb:f4:f5:72:c6:f6:28:25:ca:
ac:d6:49:0c:df:e4:c6:4d:da:42:55:0b:92:24:e5:
d0:16:3a:7a:a1:6a:c9:8f:6d:1e:1e:b7:30:fb:e4:
11:1c:69:1e:ed:94:84:74:0e:f3:ea:ef:54:34:10:
74:9a:9c:1a:9c:21:63:58:d1:09:6b:de:bf:db:46:
51:38:9c:a8:05:c8:0d:fd:42:2b:e8:d2:7c:54:f4:
d2:78:46:b5:b8:7b:c0:d4:dd:f9:5e:43:af:37:8c:
77:21:64:81:c6:4e:d5:0b:6f:33:99:c9:55:95:9f:
5d:1e:00:db:8c:11:e4:14:f3:ed:02:95:bb:41:7b:
53:47:ca:9f:a8:5b:9b:ae:eb:bf:d7:47:d6:73:82:
10:11:6d:a8:4a:29:77:54:05:22:b7:94:c7:02:09:
db:07:7d:48:c6:1e:17:01:ba:4d:fd:1b:91:41:06:
78:c9:5b:0d:8e:f4:73:50:b3:fb:62:af:8b:6d:92:
46:1c:9d:49:a8:65:61:73:62:72:ff:d2:18:08:26:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AA:1C:BB:5D:7B:BE:87:52:6A:88:93:0F:83:D5:E6:53:A8:06:90
X509v3 Authority Key Identifier:
keyid:F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4e:7c:96:c5:a1:67:3c:69:8b:d9:90:8d:80:38:1b:bb:81:
88:ec:f4:37:c3:42:fd:1d:64:81:f8:f0:20:fe:6a:49:63:d0:
2f:d3:cc:7c:fd:27:9f:27:e6:cc:2d:ee:7f:91:81:79:84:86:
94:2d:a7:8d:3d:fc:74:ec:15:0f:d4:33:25:ab:88:81:13:39:
34:6c:7a:e2:4b:ab:18:97:a3:4b:2f:b6:cc:3c:90:7a:53:e2:
40:85:0c:a4:97:33:61:39:b2:5f:69:72:90:ca:e3:df:1e:20:
6d:68:95:32:84:0a:44:20:8c:a9:e5:6b:48:7b:48:8e:c6:9e:
55:2d:60:ab:3f:0e:5e:c0:9b:b5:4f:4e:16:59:ff:40:aa:c8:
49:de:88:6b:d5:23:c9:63:65:0d:40:ac:50:b3:0d:c2:03:95:
66:03:84:6a:30:fe:86:b7:48:98:7e:1f:b2:44:97:b7:8e:3a:
72:0d:03:8b:9f:2c:41:ce:a4:ce:b1:bb:b6:19:4a:61:e1:0f:
ec:27:f9:a3:8b:bc:e4:ae:56:a5:73:8f:cd:61:c6:4d:79:9f:
34:33:19:ed:cc:21:57:ed:e9:08:df:ab:2e:cd:3f:b1:ae:7b:
01:17:78:38:87:46:6d:7b:1d:c6:fb:92:65:dd:d2:32:31:b9:
d7:97:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:26 2026 by rpki-client