Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File: 8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier: VGqX27Am78/YzIUYmer+qRbjU7XA0QxU20RtV2/2Xvo=
Subject key identifier: 12:02:94:B5:DC:A5:8B:DC:DD:97:7D:69:44:6B:F1:14:2E:64:B9:44
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 019FAA50F93703727440D68EF1945A533341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number: 09D9
Signing time: Tue 28 Jul 2026 20:01:01 +0000
Manifest this update: Tue 28 Jul 2026 20:01:01 +0000
Manifest next update: Wed 29 Jul 2026 20:01:01 +0000
Files and hashes: 1: 2GTvWzpclUq6kJYm-wsP_GwJPLY.roa (hash: fYmZ9Cu3/ER+umCuIKfV6emnqQD55csuls9mkFBGOE4=)
2: 5oF3V0rjeL1pJ5lHiFSxxXlRiqk.roa (hash: MY4vTmIm6iMkCfXRGy7HULVmNJlJMi1dSNNh0tuV34c=)
3: 69uCRF0gJPayfWhDtOPkNyE4RrA.roa (hash: zk+4O7C/kwm21uLUwHJKUDfYHP0XyuVnc9Gjvk0nfWs=)
4: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: IvT+kQPdbS/P13FgDC9I2hXCcLeRQyjIDF8a8/TSoj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:f9:37:03:72:74:40:d6:8e:f1:94:5a:53:33:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: Jul 28 20:01:01 2026 GMT
Not After : Jul 29 20:01:01 2026 GMT
Subject: CN=120294b5dca58bdcdd977d69446bf1142e64b944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:15:5f:05:ed:e6:de:99:b7:2c:41:e8:dd:
b5:7f:2b:40:ce:b3:d3:a5:46:b5:a5:c2:67:52:94:
bc:70:66:b1:77:db:38:ef:60:ab:41:d4:b2:36:50:
70:50:51:dc:c3:5e:3f:00:30:55:11:68:07:53:29:
d1:1a:a9:a6:99:d8:70:3e:65:59:45:06:ad:b0:fb:
82:89:3e:93:85:03:0c:51:7a:66:d9:63:f0:50:64:
83:7f:09:04:4f:4d:a6:d3:b5:b1:f2:e3:11:de:89:
c6:d3:68:f0:26:c3:2e:1c:b8:c6:50:bb:28:09:85:
5a:13:be:7d:82:5e:6f:84:fc:42:b0:77:b8:29:06:
06:f9:17:f6:af:76:f6:20:4b:0c:f9:5e:31:f7:3f:
46:19:e8:95:b1:69:a3:b2:46:7c:76:d5:e4:6f:09:
57:39:61:bd:11:bd:f9:eb:58:ac:5d:0c:c2:8b:cb:
0d:eb:74:95:a7:81:37:f8:84:b8:f2:9f:a8:d5:1b:
c6:47:b2:49:94:5a:7e:e6:3f:07:0a:5f:c9:cc:47:
0c:05:f5:e3:26:34:e5:4b:38:3e:c2:da:00:46:1a:
43:11:78:5f:94:a0:24:dc:41:50:af:5b:fd:f9:77:
98:dd:9a:6f:f6:b7:7b:3b:60:12:b2:b4:d5:eb:d1:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:02:94:B5:DC:A5:8B:DC:DD:97:7D:69:44:6B:F1:14:2E:64:B9:44
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a3:86:93:a9:2f:78:19:a0:14:9e:6c:c4:72:57:84:48:23:
17:f7:e2:0e:e9:8f:26:59:5b:f4:63:57:bf:85:b2:23:10:d7:
6c:7f:fe:b5:01:ce:2d:f0:42:c8:4e:22:b7:dd:c6:b7:5a:a8:
bf:a2:7d:c5:4b:a6:8e:2f:f1:5e:27:d5:f5:40:cc:62:da:0c:
66:c8:d5:20:a3:90:c2:29:1e:16:ae:d8:e0:43:fa:4c:7a:c4:
30:a5:4e:91:e1:66:df:fd:c8:83:25:47:fd:1c:84:18:67:b4:
c6:cd:44:8d:b1:2d:69:79:80:a9:cf:c0:84:b6:6c:f7:19:7b:
c9:09:15:c2:49:b4:1c:03:c6:6a:5e:cc:e4:a0:74:46:a7:c0:
62:4b:04:96:16:d8:04:e7:61:28:73:3f:d2:d4:c9:ab:5f:0b:
fa:e4:16:77:ac:17:2d:ae:e5:f0:a1:78:aa:10:ab:be:e7:ac:
18:07:b9:42:42:da:01:aa:2d:ef:ab:9e:1b:c0:1c:da:35:8a:
ba:3b:9e:ff:2c:7e:2a:99:e1:76:f4:15:79:4d:92:2a:a4:50:
14:64:b5:02:7a:b7:41:d1:ee:f3:6c:db:e4:ce:df:7b:98:43:
70:41:61:d8:6f:e6:59:48:30:72:35:02:1a:a8:5e:ca:ff:55:
9f:2c:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:53 2026 by rpki-client