Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
File: 8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json)
Hash identifier: vo+om8Eb+PU2xXHZheMIdykLeptiWidRi9a0BJVHs1M=
Subject key identifier: D0:47:A5:A2:22:74:14:AE:EA:2A:35:DB:A6:FB:B2:84:24:18:66:70
Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
Certificate issuer: /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Certificate serial: 019FAA1A5F5A727F06EB44A74680AB8753A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
Manifest number: 0692
Signing time: Tue 28 Jul 2026 19:01:22 +0000
Manifest this update: Tue 28 Jul 2026 19:01:22 +0000
Manifest next update: Wed 29 Jul 2026 19:01:22 +0000
Files and hashes: 1: 0tKNTcvutgmi05GASWx0PEyILOY.roa (hash: k6mCxAxzoTinU1/sVxlPB9SrgDwj5jJNmOfkRFaU9RA=)
2: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: 8TovBflFvDkqTxBPNaBF+PjiQXnerwDpqKfVWvJPzjc=)
3: yrmrEDHLdh4dBGFaTpIBDSACdaQ.roa (hash: hNsr3+1Zh+bCK1vX9YSv52aqxq01DCYHfc2YnV/y8Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:5f:5a:72:7f:06:eb:44:a7:46:80:ab:87:53:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Validity
Not Before: Jul 28 19:01:22 2026 GMT
Not After : Jul 29 19:01:22 2026 GMT
Subject: CN=d047a5a2227414aeea2a35dba6fbb28424186670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:a2:45:f1:1f:73:7e:4b:aa:c7:a7:af:93:
74:1b:e5:f1:10:28:89:a0:84:2f:85:c6:51:09:3d:
c2:a2:df:46:32:6d:85:b4:49:73:42:52:fe:ba:bd:
39:c8:44:42:58:9f:19:48:d9:da:5c:a5:a4:0d:4f:
66:c0:1b:17:e2:1d:5a:df:eb:a3:a6:44:85:eb:df:
08:c5:1f:2d:92:79:7d:2d:53:1f:2f:5b:94:a9:94:
60:f3:0d:01:00:e6:ca:5f:66:df:35:79:65:e6:e2:
29:eb:2e:a1:9f:6a:18:f4:6d:9d:00:41:26:8c:ac:
49:12:ee:fe:be:3e:dc:5c:eb:f9:96:e4:61:94:31:
db:12:9a:47:5d:c2:63:a0:90:30:d3:8f:70:84:57:
21:08:5e:ec:91:a1:53:54:f9:fa:ed:b8:06:99:98:
bb:89:ee:38:78:b0:5b:d9:d6:e5:b9:0d:f2:24:6f:
58:4b:32:71:38:ff:ab:1a:99:6d:2a:42:34:1a:91:
cc:04:9d:a1:3f:bf:ca:19:6f:0b:cf:94:bb:d0:94:
57:df:e6:ed:b8:57:55:69:c2:1b:dd:34:e1:68:e6:
b2:ee:84:12:4e:7d:91:4b:6e:2b:f9:d9:9f:c9:61:
76:30:b7:11:f8:c7:97:b1:26:4f:62:e5:ac:bb:cf:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:47:A5:A2:22:74:14:AE:EA:2A:35:DB:A6:FB:B2:84:24:18:66:70
X509v3 Authority Key Identifier:
keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e7:ec:d7:6d:65:18:4f:69:62:51:0e:b2:f1:a6:21:f5:bf:
cb:07:cc:cc:c5:dc:2f:56:5b:9f:bc:a8:d0:75:1b:55:f9:d0:
66:68:66:08:16:ba:00:ac:c1:1c:d6:46:ff:1e:2e:28:8e:82:
2a:6f:0f:76:4a:6d:c8:5b:1e:ef:01:5a:1f:a7:4d:a6:08:39:
c2:6d:c3:2f:01:46:12:47:b8:46:90:98:f7:c9:7f:86:34:a8:
a4:25:03:99:4b:51:1d:e0:8d:ef:91:1c:8d:13:a9:38:74:04:
5e:96:0a:81:e7:83:ee:13:1d:1f:25:25:2d:1c:d9:08:99:45:
04:11:6c:f0:4f:3e:2f:f5:4b:16:d6:85:eb:93:83:5b:de:5f:
da:d0:de:6a:f2:80:07:6d:3f:52:73:b9:60:07:35:83:9e:cb:
9e:4a:20:59:33:ca:f2:83:df:9a:6c:1f:21:7f:a4:a3:fe:a5:
64:ee:a0:dc:32:bd:57:69:83:3c:81:9d:6a:be:ad:8b:61:2a:
4a:9a:fa:4a:49:9e:8d:16:32:33:a1:74:d0:65:22:dc:0e:40:
36:77:47:bc:ea:b8:66:ce:6c:93:a8:13:40:2d:cc:ea:c5:15:
32:01:8a:91:a8:33:4f:7e:b6:b1:41:d5:9f:7a:5e:5e:55:47:
eb:71:17:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:19 2026 by rpki-client