Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
File: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft (raw, json)
Hash identifier: 9mCyfPy/6wHB1iym29fb01Zu7gLMfLUnHw3liFdM1Fg=
Subject key identifier: 2A:DD:6D:ED:6C:46:00:3F:D1:22:5F:EF:3C:F1:10:11:1F:1E:C9:7B
Authority key identifier: F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
Certificate issuer: /CN=f0a9005423147453909366c6b4d09c31958acc1c
Certificate serial: 019FABD0FEC30025CD19C8F7A8428DD9FD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
Manifest number: 036E
Signing time: Wed 29 Jul 2026 03:00:28 +0000
Manifest this update: Wed 29 Jul 2026 03:00:28 +0000
Manifest next update: Thu 30 Jul 2026 03:00:28 +0000
Files and hashes: 1: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl (hash: hoTxBhTJ/nryAC2w3jeiNCSPNyQVwOHWP60XiQyjCo8=)
2: XcFf7Up-3gxNLfYQhK3orqJHx2g.roa (hash: QLiEavcgMLadSiCowCkkaoXoMEv3eEuB33IWa6r1pTA=)
3: dHpkVz1qG-AF-2ObL_WKlgFCa5A.roa (hash: pDto/Hqi4osJfNZa1fOxjtdmxoHJy3MfMIgMhgvqHY8=)
4: i2pSpEnVtokJriFjoKmVIGfuRJo.roa (hash: D+Hmz9bjiSh22qk0mMxyTTXET+bcUl31CAB7ub4kHU4=)
5: w3Ce4TCDal1nhbZgs86uVw-EDHA.roa (hash: Y1YtZuc0ZO1egV90xVGx2//JBR2jEYUzSnwVAWKeAz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:fe:c3:00:25:cd:19:c8:f7:a8:42:8d:d9:fd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a9005423147453909366c6b4d09c31958acc1c
Validity
Not Before: Jul 29 03:00:28 2026 GMT
Not After : Jul 30 03:00:28 2026 GMT
Subject: CN=2add6ded6c46003fd1225fef3cf110111f1ec97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:d5:a0:97:79:45:05:9c:1c:fe:1e:64:89:
2c:d2:10:51:88:82:d7:56:3a:9a:07:c3:71:a2:fa:
f7:1a:73:cd:15:14:40:33:3c:1d:2b:d0:31:1a:78:
10:fa:3e:23:ce:27:07:7a:f6:52:96:ea:79:61:88:
35:83:47:94:ae:17:80:88:07:26:c3:90:b8:14:d7:
46:99:44:cb:eb:4c:cb:c9:92:f0:b5:07:41:92:6a:
ee:f4:fe:e5:da:db:e0:5c:d0:07:57:3b:f5:2c:00:
9c:33:66:10:6a:b5:61:bc:21:77:e7:fb:63:85:a5:
ed:e7:33:a3:7a:1e:4d:3b:a9:4c:25:2a:a4:7d:5b:
0b:5c:49:e9:4a:c9:53:70:c4:93:05:e2:b5:0f:8d:
83:b6:4d:53:11:e9:94:95:6f:99:08:56:f3:e6:cd:
13:eb:78:14:ab:e0:d6:cd:52:77:7e:16:60:3c:e8:
7f:0c:25:a4:5f:c4:bc:13:db:4e:53:95:ef:0c:3a:
ea:c0:0a:2c:99:ee:67:32:75:81:ec:93:62:e5:af:
f9:ad:36:66:ad:9a:72:0f:3b:7e:35:d7:e2:a1:68:
88:92:01:93:16:53:53:f1:36:0a:8a:43:12:1f:91:
e8:8c:63:a1:c4:04:f7:90:cb:83:cf:13:22:9f:99:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DD:6D:ED:6C:46:00:3F:D1:22:5F:EF:3C:F1:10:11:1F:1E:C9:7B
X509v3 Authority Key Identifier:
keyid:F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d3:54:61:d4:ab:14:dc:89:cc:e4:29:9f:c5:d3:6c:de:9d:
53:06:91:4d:58:37:bc:f2:f7:06:94:3e:97:45:2e:a1:80:e8:
ce:99:f0:27:b8:a6:43:45:54:50:6f:15:27:ec:d2:40:2f:cb:
43:d0:ca:21:2b:8d:3c:5a:b8:da:08:0f:f5:0c:bd:29:c9:93:
c5:4d:31:cc:19:4a:fa:b4:40:32:50:7d:6d:fb:22:fc:ba:c5:
a8:98:86:82:d6:1f:89:83:92:db:01:80:79:93:93:34:25:85:
7f:a9:84:b9:fe:f8:37:0a:12:8c:7d:90:dd:ba:ab:12:f0:2f:
8b:c4:ef:7b:41:a6:27:2b:14:65:b5:9f:2c:41:43:77:aa:93:
89:9c:96:5c:df:bc:5a:18:4c:d3:92:7e:ca:2a:80:2b:e1:01:
99:5a:63:39:63:84:6a:62:9a:8a:3e:ad:7e:0d:2d:b3:df:bb:
92:ab:4b:e0:63:2c:3e:62:f0:ac:56:1c:8c:83:ee:f5:5d:28:
de:eb:86:3d:51:6f:44:ef:15:c5:78:7b:de:2a:29:fc:ab:8f:
12:38:f2:f8:dd:a5:76:32:11:8d:e3:de:8e:a7:12:27:e2:ad:
a3:c2:36:c4:f8:a6:0f:68:48:53:8a:92:05:65:4d:f6:f0:7b:
ec:c1:b8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:58:26 2026 by rpki-client