Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: KDq5aClVLAIxBsHl3MmNPSeFiZkEFru/CVQkGZpqAYw=
Subject key identifier: 88:2A:67:2C:8F:DC:54:14:CD:A3:28:59:06:C4:57:C8:3E:23:2B:21
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 019FAA87507F62DC3AAF59D38FD5D0A427D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 1439
Signing time: Tue 28 Jul 2026 21:00:22 +0000
Manifest this update: Tue 28 Jul 2026 21:00:22 +0000
Manifest next update: Wed 29 Jul 2026 21:00:22 +0000
Files and hashes: 1: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (hash: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs=)
2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: wMl5rVuu/6S7H53wfQLQwJMIaaIl8DxtvDH9+KjeeBA=)
3: OmODl-Dxgvnfb7lh_C-Zh2V9ocU.roa (hash: PmAaIQqyZcT72p+jMNnZFGobOFfukrUMlowL+LPavOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:50:7f:62:dc:3a:af:59:d3:8f:d5:d0:a4:27:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Jul 28 21:00:22 2026 GMT
Not After : Jul 29 21:00:22 2026 GMT
Subject: CN=882a672c8fdc5414cda3285906c457c83e232b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:bf:05:a7:9c:b7:f6:34:01:26:f5:11:72:
ad:a5:17:b4:ff:c4:6f:86:71:93:ba:19:52:40:8d:
ad:a5:a6:2d:0c:ef:bb:cb:7b:1d:39:04:06:66:81:
ff:e6:c4:ae:74:e5:50:ef:60:8b:4f:11:ac:76:72:
12:eb:04:a3:5d:ba:71:d4:8c:d2:b7:c2:6d:ac:e3:
eb:38:4b:06:0f:36:18:86:ba:de:11:d2:77:79:b3:
32:6d:a1:52:88:19:8b:c3:3a:6f:cb:9e:67:99:67:
7b:bd:d2:a5:7c:fc:26:b1:09:c1:8b:4e:a1:d5:48:
b0:85:58:19:4d:69:99:31:8e:7b:06:74:a7:4c:87:
6b:70:cc:f6:df:e0:55:50:e8:67:3b:85:cb:cb:69:
c0:0a:b0:2b:ce:e9:e2:da:fe:13:08:de:de:7a:24:
5a:67:5f:b7:16:53:a0:d9:cc:7b:0a:42:b6:62:33:
c9:3f:50:db:15:45:5d:17:e3:76:8b:1c:b1:ec:50:
99:d6:d6:42:6a:43:54:9f:ea:da:6c:c7:14:47:af:
ae:9d:ee:84:25:14:9e:89:3b:e6:ed:db:96:53:fc:
1e:cd:f5:a3:c5:b5:41:92:09:81:55:18:a4:f3:7b:
8d:ac:3d:bf:1a:cc:3e:d6:71:fb:70:4e:5a:7c:f4:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2A:67:2C:8F:DC:54:14:CD:A3:28:59:06:C4:57:C8:3E:23:2B:21
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:7a:bf:30:d9:cc:e8:d7:13:c6:5f:e4:b3:a2:1d:99:fb:e5:
43:1f:ae:5c:47:52:29:05:4f:c2:39:3a:c1:3d:a1:b6:d3:09:
71:91:26:a4:f2:91:9a:4d:d4:82:55:64:c8:1c:c2:ee:92:34:
aa:62:c0:6a:0e:a9:ec:e9:04:8e:00:7b:ad:4c:3b:1f:4b:b3:
22:a6:f1:99:1e:03:99:67:8b:8b:40:64:17:54:5e:73:19:cd:
7c:0b:62:c3:d0:3a:d9:2e:80:63:ff:c0:8e:cb:c4:d8:a5:fb:
39:8d:59:cb:78:16:2c:63:b3:1b:e0:31:fc:a0:a6:0d:91:fe:
7a:fc:12:77:6e:fe:9b:72:b0:c2:85:7d:68:c7:17:77:83:f1:
79:00:8f:f7:dc:9a:85:bf:90:ff:71:1b:cd:38:a3:1e:1a:f8:
fb:6a:63:be:d1:ff:4d:db:09:f3:9c:41:d1:a9:3d:9b:e1:7f:
e9:12:63:47:f9:ee:50:72:1c:ba:ed:a7:e9:ae:3f:d9:9c:41:
11:dc:c1:2d:b6:b5:fc:cb:7c:15:83:aa:d8:84:0d:d7:54:e5:
94:fc:81:4e:ad:e0:ec:37:55:1a:ce:45:8c:f5:21:5d:08:ce:
40:29:7c:53:84:13:dc:7f:a4:96:34:f0:3c:c2:6e:99:aa:1f:
76:7a:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:15 2026 by rpki-client