Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
File: 8ZJhuvRuQzbW8EWjgwKAehURTyg.mft (raw, json)
Hash identifier: e7h/ZDuEuaeZw8QAwYPd7MTAvf/WqIRzFWkghefw18E=
Subject key identifier: DB:85:F6:12:DB:86:EF:5E:AA:F5:8D:07:48:E0:8F:25:68:F2:5A:29
Authority key identifier: F1:92:61:BA:F4:6E:43:36:D6:F0:45:A3:83:02:80:7A:15:11:4F:28
Certificate issuer: /CN=f19261baf46e4336d6f045a38302807a15114f28
Certificate serial: 019FA8996F465DB957B1B1C3E14E53381476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:55 +0000
Manifest this update: Tue 28 Jul 2026 12:00:55 +0000
Manifest next update: Wed 29 Jul 2026 12:00:55 +0000
Files and hashes: 1: 0dzIupdacm-aCqCGq2QSpXGCV4c.asa (hash: fTBdrFA+5FfSS6HVVY/nQqoQczCTiBJXR4OeqKHGbOk=)
2: 8ZJhuvRuQzbW8EWjgwKAehURTyg.crl (hash: 9GgJB1g8PB0LRjEAAOg4UAfDRM7AVDKum+AFJrsk8pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:6f:46:5d:b9:57:b1:b1:c3:e1:4e:53:38:14:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19261baf46e4336d6f045a38302807a15114f28
Validity
Not Before: Jul 28 12:00:55 2026 GMT
Not After : Jul 29 12:00:55 2026 GMT
Subject: CN=db85f612db86ef5eaaf58d0748e08f2568f25a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:3b:5e:a8:90:ac:60:51:7c:a7:aa:26:90:
b7:13:8f:f1:92:2d:52:0f:00:a2:f4:cf:a3:24:71:
ad:e0:5c:bc:54:fc:f2:2b:99:4b:6b:e6:0b:60:ed:
b7:e6:3b:88:5a:71:f0:a9:9e:15:2f:2b:cc:8b:1a:
0b:96:b7:ff:50:a9:5a:70:46:8a:bd:e6:4f:16:c5:
af:aa:3e:fb:ed:16:f2:64:83:e5:c2:b8:8b:0a:04:
ad:7f:85:50:a3:8a:f7:dd:77:fa:41:0e:12:f2:ee:
c4:98:65:37:ab:54:49:71:42:83:48:df:5a:97:91:
f3:dc:44:72:e8:31:ce:70:77:de:af:f6:52:69:50:
8a:39:76:b4:35:6d:ab:55:89:26:f2:49:0d:d0:23:
ca:20:0f:5a:ac:c6:4c:59:b0:e1:7b:b1:8d:69:39:
7a:c1:d2:19:5b:b9:87:1d:e8:0e:56:85:82:4d:aa:
0e:36:4b:8f:25:0d:f0:9e:03:a6:90:dd:9d:15:15:
e3:71:a7:04:d9:6a:57:4c:07:9e:ba:a1:65:51:90:
df:3d:0e:c2:38:1c:0a:3c:52:e5:df:44:c4:cb:95:
1c:fc:f6:2b:ee:83:0c:46:37:67:6f:97:20:3a:10:
89:e5:2f:c3:62:62:6d:a1:4c:46:f6:3d:03:35:c7:
a1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:85:F6:12:DB:86:EF:5E:AA:F5:8D:07:48:E0:8F:25:68:F2:5A:29
X509v3 Authority Key Identifier:
keyid:F1:92:61:BA:F4:6E:43:36:D6:F0:45:A3:83:02:80:7A:15:11:4F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:89:2d:41:ff:e8:7e:cc:11:6c:c4:a8:35:fa:1c:ab:64:4b:
c0:97:85:40:e5:9f:69:c5:c5:a8:74:e8:89:06:09:41:8e:29:
e1:92:1d:ee:eb:1f:6f:23:59:f9:ea:da:2b:81:84:e5:30:65:
e7:a9:fe:46:c1:ea:a9:26:a5:a3:10:2f:55:de:bb:a0:65:cf:
0d:ef:04:1f:a5:62:89:c2:ee:2c:0c:e0:d5:14:06:a6:bc:e7:
69:86:98:e1:48:9b:33:8b:20:88:de:0f:b9:d9:32:a1:7d:81:
df:5a:8e:b2:4f:1c:3c:f5:86:59:1b:e0:a9:21:8c:fe:0e:c3:
ce:52:dd:8a:9d:9c:fc:cf:80:d0:75:14:48:2b:4c:a9:f7:05:
cf:3c:17:af:5e:e3:61:35:bf:ba:90:b0:59:75:5c:7a:e6:2e:
bf:6b:1e:9a:93:06:22:df:ff:41:7c:f9:16:74:a6:ca:73:f0:
94:ea:ad:db:a2:6c:49:52:58:75:1a:d3:09:f5:51:49:dc:eb:
4c:ae:d2:33:43:bd:24:87:7a:d4:61:34:74:a8:77:0a:ac:4d:
99:09:fa:73:3a:48:a9:f4:cb:b8:35:28:92:52:e9:19:a9:25:
1c:39:d7:85:1f:5b:64:79:ed:75:57:dd:38:8c:25:62:1c:59:
88:9f:c9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:43:08 2026 by rpki-client