Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier: P2N8i8fcWD8sjRn+2I8NI3A3l20gSFoEp+pvVYjSPwY=
Subject key identifier: AE:2A:93:20:C4:54:66:9E:74:BA:B0:04:B9:51:E2:87:5B:2A:B8:32
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial: 019FA93DE04CD6D0264F0757C0CCB4E327DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number: 0D96
Signing time: Tue 28 Jul 2026 15:00:32 +0000
Manifest this update: Tue 28 Jul 2026 15:00:32 +0000
Manifest next update: Wed 29 Jul 2026 15:00:32 +0000
Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: hG2Ua/EWA2+7TPmq1jNf4TpsEoL+1eovghxL4t4sf0c=)
2: oDHRY2p4X6qIRWZRDGncYz0E4F0.roa (hash: DS/v77bYi2U6NujVd5gI6DZQbrS7LjtyuAFDzI6STCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:e0:4c:d6:d0:26:4f:07:57:c0:cc:b4:e3:27:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Validity
Not Before: Jul 28 15:00:32 2026 GMT
Not After : Jul 29 15:00:32 2026 GMT
Subject: CN=ae2a9320c454669e74bab004b951e2875b2ab832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a1:86:48:6a:7e:54:ea:06:48:58:6a:b1:07:
74:ba:79:b3:40:78:2c:b2:d3:9f:8d:ad:e2:7a:67:
35:03:0c:e6:4a:62:25:83:f6:e5:26:a8:dc:45:97:
3d:c9:c3:46:7c:2d:09:af:29:61:ec:e9:b6:06:5d:
57:01:5a:4d:ec:d8:ae:96:90:7a:b4:8c:06:1d:64:
43:68:d0:d2:34:cd:e3:c2:e8:28:2d:fa:5c:69:c8:
2c:44:4f:a5:1d:25:7b:4b:8c:ab:69:df:db:e1:be:
da:56:2c:c5:2e:62:54:93:1d:e1:17:a3:61:d1:32:
9c:fe:c2:0a:48:e0:aa:c4:24:bb:71:77:99:21:50:
97:5a:c6:8c:65:76:43:8e:19:9a:ba:ae:bf:8f:1f:
85:9a:50:ab:06:99:20:75:44:fc:dd:06:7f:8f:ab:
45:d6:6e:c5:86:ef:b9:55:a0:4c:b2:09:9a:1e:41:
f6:fc:d4:6e:89:86:67:b9:f3:bf:b6:ba:09:e8:d4:
e0:f3:92:48:d4:61:d0:6c:68:16:a4:99:ba:99:fa:
7a:86:90:ff:11:02:e8:b8:38:81:3b:ff:28:92:2c:
a0:d6:fd:23:70:6f:75:30:98:d4:54:23:f9:9b:0c:
61:eb:1a:dd:14:54:ce:1b:d0:cc:87:8b:d3:ed:34:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2A:93:20:C4:54:66:9E:74:BA:B0:04:B9:51:E2:87:5B:2A:B8:32
X509v3 Authority Key Identifier:
keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d2:d4:6e:e3:f3:a7:7c:0a:45:e8:f5:0d:63:9b:60:d9:33:
60:d6:42:19:f6:9e:5a:c3:fd:9c:63:98:b6:4c:f5:6c:41:5e:
cc:a1:62:7e:8c:f2:e0:cf:5b:3b:9b:39:a5:b6:af:85:8c:42:
c5:d8:35:62:06:34:45:f7:12:2b:82:da:45:78:8c:86:bb:ff:
67:20:ab:66:f5:5a:5a:18:28:90:29:4a:10:ab:15:be:cf:3d:
2f:62:e7:b4:79:85:8d:d1:84:7f:32:ae:7b:9b:42:48:6b:44:
6f:31:44:81:c1:fb:8d:f5:ff:f8:9a:09:2e:63:71:1e:4b:4e:
42:e2:a8:1c:a7:bc:52:7b:fc:1d:60:1e:ba:50:64:ce:1f:d2:
b2:24:04:f1:24:8f:f4:16:ce:88:01:7a:31:ab:32:50:ba:11:
06:0f:09:dc:8c:df:de:b4:3b:dc:7b:1e:57:77:2f:e0:e8:e3:
66:69:61:c8:69:95:22:b2:f6:4d:76:9f:44:13:23:3b:10:6a:
27:34:a4:38:8f:1e:48:2f:b8:a6:5b:3d:ea:40:ba:06:d1:99:
43:94:8c:c3:74:f9:89:5f:1b:7e:6e:96:e3:66:73:88:3a:f9:
4f:74:73:70:5e:15:1b:00:af:ff:4e:9b:cb:38:a6:4e:61:b5:
d1:e9:63:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:33 2026 by rpki-client