
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
File: 8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft (raw, json)
Hash identifier: zJ5vbAzL0BKtwQ1D+49s+jfL7ap2IwhlZ8l9u1/w1as=
Subject key identifier: 22:BD:93:2F:90:6F:93:B7:0A:BE:56:F6:1F:91:C4:DE:E8:97:F6:9A
Authority key identifier: F0:19:8D:5F:BD:25:23:E2:2D:B8:2F:10:C3:DA:37:A9:43:5B:6C:BB
Certificate issuer: /CN=f0198d5fbd2523e22db82f10c3da37a9435b6cbb
Certificate serial: 019FAA885B195A4758104C967241CA2F582F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:30 +0000
Manifest this update: Tue 28 Jul 2026 21:01:30 +0000
Manifest next update: Wed 29 Jul 2026 21:01:30 +0000
Files and hashes: 1: 8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl (hash: ocn4T7eEa+TfLz3ZxVnLcgLrKNBpE2iWPUMYUhw18Ps=)
2: f85ANWeKKEbi4pK19Z060OvY_XI.roa (hash: qV+HKaGs2anI4Q/Iy3DcGeZYfOs1cg3GI50On0iw4rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:5b:19:5a:47:58:10:4c:96:72:41:ca:2f:58:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0198d5fbd2523e22db82f10c3da37a9435b6cbb
Validity
Not Before: Jul 28 21:01:30 2026 GMT
Not After : Jul 29 21:01:30 2026 GMT
Subject: CN=22bd932f906f93b70abe56f61f91c4dee897f69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:f9:b6:a1:d0:9e:d6:c0:4e:52:87:d4:d6:
8e:6d:bd:6c:b8:32:a3:ae:1b:2e:6b:8e:62:50:14:
36:3a:0b:82:b8:24:7d:6d:9f:f6:2c:46:fb:1b:cf:
af:48:80:a2:00:33:42:e8:88:3b:c8:f6:6b:1f:f3:
b2:f5:70:9f:cd:f9:21:a4:82:0e:d6:62:eb:8b:71:
d7:2e:ea:6f:55:85:44:8a:f5:31:6e:b3:63:56:87:
c8:9d:5c:01:9b:58:45:9e:93:6e:6f:61:b8:c5:d2:
8c:97:b6:16:54:98:2e:d0:ae:64:b2:de:6b:d1:05:
90:a9:81:c1:50:0d:c4:b5:ad:36:3a:9a:f7:91:93:
85:bb:7c:9b:00:3f:40:39:39:64:ee:76:c8:f1:c7:
db:83:83:63:a1:93:d4:38:71:cd:47:d3:42:b2:16:
ff:22:df:4c:a9:9e:fc:02:41:04:9a:ca:16:c6:c3:
e9:00:59:f6:31:63:e9:95:9a:b1:ab:bc:a9:99:c6:
ac:09:d4:6b:2b:1d:76:4a:97:e7:30:49:26:31:7c:
28:4f:3b:0e:a5:89:07:9b:5d:85:0b:2a:5a:90:ef:
4d:ff:cc:3d:47:32:7a:d0:ed:69:b8:1e:cf:9a:6d:
b1:5e:c9:60:fd:42:3b:7e:0e:71:51:12:84:bc:81:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BD:93:2F:90:6F:93:B7:0A:BE:56:F6:1F:91:C4:DE:E8:97:F6:9A
X509v3 Authority Key Identifier:
keyid:F0:19:8D:5F:BD:25:23:E2:2D:B8:2F:10:C3:DA:37:A9:43:5B:6C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8a:df:d5:d9:97:be:c2:e9:12:91:e5:e0:5f:be:1a:72:89:
74:06:15:c2:86:d8:6a:af:4c:b2:b9:90:b4:44:65:d2:da:05:
74:be:a5:3d:27:35:e5:f3:76:df:34:44:31:27:4d:d2:49:bf:
18:df:0b:de:be:61:7a:90:44:90:86:57:29:a7:e2:ca:d6:cd:
6f:e0:5b:7a:3c:18:f6:df:7d:f7:e4:f1:2a:bb:0d:c5:79:c2:
06:5d:64:21:07:9c:b9:8f:e6:50:0a:ee:75:79:c7:dd:39:08:
c7:e8:cf:27:29:a1:5b:b8:98:6a:0f:36:fe:25:4c:24:e4:88:
a4:39:4e:54:c7:bb:29:75:7a:5c:87:54:0d:54:29:5d:ea:26:
c3:e8:9a:59:e3:76:c7:88:65:72:3b:82:dd:f5:9f:9d:36:e3:
73:5c:7c:a1:f6:18:da:de:a5:52:7a:71:53:2c:0b:15:52:be:
e8:78:fb:7c:b3:c0:de:da:65:bb:a8:4e:b9:c2:de:1c:67:11:
bc:c2:1c:65:5a:10:a2:72:4e:92:04:dd:39:0a:83:71:a4:1d:
8e:19:1b:cd:a1:01:d0:19:d0:60:96:66:6a:39:9f:c8:65:75:
5a:ec:59:43:46:ee:7e:42:bf:c6:01:39:9c:10:1e:62:7f:ae:
e1:21:a1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:19:27 2026 by rpki-client