Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: oTIps9UC8XcvNbmDaF7wk/BKwxzUHSgqUesaSQHOULs=
Subject key identifier: 7D:E1:03:29:26:5C:06:61:21:2E:E8:4C:FB:E2:FB:E6:9A:6E:6B:15
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 019FAA1AB10FF320F94F0FC8A9B85000A5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 0A94
Signing time: Tue 28 Jul 2026 19:01:43 +0000
Manifest this update: Tue 28 Jul 2026 19:01:43 +0000
Manifest next update: Wed 29 Jul 2026 19:01:43 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: TZ0bEuQt2yy3DpRCqjU/dD0pUkKMcQwbfzgm8ZHxeYw=)
2: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (hash: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ=)
3: iLu5B9aeu4NSBPHA9ivJ0i8Z4AA.roa (hash: acJKMRQ5Omks2WW0pWsL2TS7UwZ6+sYIZuHt+6L6NH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:b1:0f:f3:20:f9:4f:0f:c8:a9:b8:50:00:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Jul 28 19:01:43 2026 GMT
Not After : Jul 29 19:01:43 2026 GMT
Subject: CN=7de10329265c0661212ee84cfbe2fbe69a6e6b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:5c:29:3d:a6:5e:62:30:69:a1:7e:a0:b0:
a8:65:fd:a2:39:6d:69:91:1d:47:e5:19:7f:a9:69:
6c:82:21:a6:b7:01:7c:dd:57:27:ab:a8:7b:be:b9:
78:f7:03:8e:95:7b:df:f8:a6:05:d1:26:ed:43:fc:
1b:0f:ab:5d:27:cf:8a:aa:2f:12:a9:87:6c:1f:fc:
51:b1:de:65:1d:cd:24:c7:09:7e:6e:9a:2f:a0:be:
6e:8c:08:5a:f3:8f:d6:e5:56:a9:fd:cb:af:c8:66:
32:e3:97:d6:9a:e3:1e:43:ef:18:04:03:f4:89:9c:
ac:00:14:73:6c:30:02:88:03:69:e5:48:d6:1c:3d:
de:46:a2:e0:32:17:d6:dd:88:08:b3:c2:df:e3:cd:
13:24:a4:09:bc:aa:60:bc:7b:8c:79:83:25:b0:4e:
77:27:a9:13:f9:4e:0e:fc:29:27:26:d3:31:ad:eb:
fd:63:d7:2e:60:76:cb:fe:8d:7b:0b:38:c3:80:c0:
d8:85:6c:98:c1:48:23:68:ee:7b:bc:83:eb:e6:30:
53:36:15:1e:7a:bb:5f:61:fa:37:39:9a:71:0e:1b:
c0:c5:bd:71:32:7d:aa:be:1b:9e:6f:1d:77:28:1d:
39:54:ee:a8:46:3a:29:73:e6:d3:d5:72:94:7b:40:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E1:03:29:26:5C:06:61:21:2E:E8:4C:FB:E2:FB:E6:9A:6E:6B:15
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4d:01:fc:3f:63:33:66:9b:16:f5:9d:96:89:d0:5c:6e:2e:
fa:07:77:a1:31:d9:63:e3:af:85:47:22:96:f3:7c:25:08:db:
f7:ba:f9:ca:3c:82:02:25:9e:9a:15:2c:96:71:74:38:87:a6:
09:d8:64:84:13:a0:59:26:40:ad:97:64:79:ea:b5:cb:62:5e:
6c:f8:76:55:73:76:91:ec:19:c7:f9:62:ca:33:45:af:bf:51:
43:34:3c:b5:8d:7d:af:6f:8c:c1:39:21:d3:c4:a8:25:88:71:
eb:23:dc:29:8b:52:5d:f6:bf:b9:1b:0f:a7:1e:df:3d:98:81:
e6:fc:60:50:95:05:34:29:2e:b7:20:ee:ee:51:9a:71:6f:a4:
72:0a:ca:4c:81:29:40:8f:13:e2:04:3b:65:cc:6f:40:30:f5:
c6:2f:c5:09:47:2e:51:aa:9a:2f:da:1d:5e:25:e1:77:36:c6:
99:75:9b:11:9e:c7:0b:17:aa:f1:e7:27:01:e4:1a:0b:51:d7:
d1:3a:b1:d3:47:5a:7e:e5:e7:6f:79:0e:e1:d1:99:a3:ff:bc:
6e:8b:f5:40:1c:95:11:a7:f3:00:80:d5:b4:65:da:7f:34:81:
63:de:72:49:1b:74:8e:4e:24:36:bc:fc:0a:6f:3f:93:31:7f:
43:24:cf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:39:01 2026 by rpki-client