Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
File: vI6RiHZmXLWDii99KNdHYRM5bvQ.mft (raw, json)
Hash identifier: uk0WDSYss5gfuYga9UIpHb++HGBisVeR0fOrjKkuFCw=
Subject key identifier: 9C:98:73:10:02:D8:52:3A:ED:0A:B2:25:A4:AE:F1:F0:7C:3C:99:2E
Authority key identifier: BC:8E:91:88:76:66:5C:B5:83:8A:2F:7D:28:D7:47:61:13:39:6E:F4
Certificate issuer: /CN=bc8e918876665cb5838a2f7d28d7476113396ef4
Certificate serial: 019FAA876EE98EEDB53F61D0F34742E1DB1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
Manifest number: 01A8
Signing time: Tue 28 Jul 2026 21:00:29 +0000
Manifest this update: Tue 28 Jul 2026 21:00:29 +0000
Manifest next update: Wed 29 Jul 2026 21:00:29 +0000
Files and hashes: 1: WvZUTqnUJrfxPwj7etIyxS5XtG0.roa (hash: tjBBu94qUSlvnCT5HDdgFpmfyKhqmKvNYxBumfbCE8U=)
2: vI6RiHZmXLWDii99KNdHYRM5bvQ.crl (hash: LEyOlCZ05zvoljN0jM6/15ZUQokugORyzZF32pHhCsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:6e:e9:8e:ed:b5:3f:61:d0:f3:47:42:e1:db:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8e918876665cb5838a2f7d28d7476113396ef4
Validity
Not Before: Jul 28 21:00:29 2026 GMT
Not After : Jul 29 21:00:29 2026 GMT
Subject: CN=9c98731002d8523aed0ab225a4aef1f07c3c992e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d5:18:e9:87:8c:82:36:45:50:5a:9c:9c:6a:
fa:8e:41:d8:c4:65:11:62:03:bd:97:32:e6:e4:35:
c1:29:ae:3f:de:ba:03:6d:1b:bd:2a:9f:bf:8b:93:
a2:57:48:b3:0d:0e:c5:76:58:d9:0e:32:aa:2d:6e:
bc:f2:54:1e:4d:2f:82:22:d6:74:36:1b:37:1f:7d:
2c:97:b6:2c:e5:bc:0f:cc:a3:68:af:57:1d:c6:29:
a5:1f:17:79:4e:a3:0d:19:75:f2:37:5f:cc:a0:8f:
c3:d9:dc:77:d8:3f:f5:50:69:88:ba:51:fd:01:fd:
90:50:39:de:7b:ca:6c:7d:e9:38:39:1f:a0:7a:e7:
08:8c:00:39:68:b5:df:13:d0:fd:fa:6b:d9:f7:b9:
76:63:9d:98:31:4b:10:65:93:29:43:b4:e4:18:9d:
10:30:fc:cd:0e:af:6d:a1:ad:6c:df:51:cb:4e:63:
30:c3:02:98:17:ef:da:9b:22:02:27:69:b3:cf:71:
d7:5b:d4:b4:79:95:85:93:c1:94:5b:4b:06:1d:f9:
c8:fd:60:2f:e7:14:0b:66:05:6c:c1:60:a9:dc:8f:
42:fb:01:49:18:37:97:b5:3d:5d:26:6d:89:37:15:
c3:a3:1a:b3:b2:98:fd:8f:9d:0c:e4:35:c3:17:6f:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:98:73:10:02:D8:52:3A:ED:0A:B2:25:A4:AE:F1:F0:7C:3C:99:2E
X509v3 Authority Key Identifier:
keyid:BC:8E:91:88:76:66:5C:B5:83:8A:2F:7D:28:D7:47:61:13:39:6E:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:dc:11:ed:8f:19:59:54:bb:03:38:9a:72:06:98:37:ec:e8:
6f:7c:7a:2f:b3:7f:44:eb:08:7e:2c:0d:5d:6e:90:4c:49:4d:
a4:13:ca:4d:fe:e9:41:89:c7:b2:9a:15:22:8d:40:59:86:7a:
d4:c0:bf:df:db:65:99:94:b7:da:46:ff:7f:49:df:a0:5c:10:
09:54:5d:82:d9:cc:55:98:b8:77:e8:41:90:24:dd:29:73:94:
70:62:8a:c6:b1:0d:e8:8f:97:7e:63:c0:b7:2c:ce:32:3f:48:
3a:97:60:97:8e:e7:b2:f6:18:d2:3c:6c:60:51:af:9c:f6:2a:
3e:37:2d:ff:74:45:78:a5:cc:09:52:e5:1b:15:9d:f9:7b:59:
0b:07:2c:f4:29:cd:af:d2:3e:bc:d2:d6:bb:dd:2c:8c:fa:e3:
13:05:67:41:77:17:ac:3b:03:d1:07:eb:25:26:1d:1c:8b:3f:
9b:e4:f5:da:01:06:f5:89:8b:d1:43:10:87:74:c1:00:37:52:
81:2c:9d:0c:d8:9a:0c:ce:2f:9b:13:4a:d7:46:fe:11:a0:64:
73:fe:a2:1b:cb:12:97:bc:d3:3e:34:18:0a:2b:0d:0d:18:8a:
6e:7d:df:2b:6b:e3:c8:87:44:e0:e0:0d:c5:76:98:78:55:40:
38:2d:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:32 2026 by rpki-client