Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
File: K8hpV3Lw5k87mhYhczzAJQb3RwI.mft (raw, json)
Hash identifier: ZkQVbWCD5+aQKvsMX9iUWDse/JOydhjsKLksm3ttBAQ=
Subject key identifier: 08:6D:7C:08:82:D3:B7:8C:C2:07:E9:D7:39:C4:84:1F:12:99:1B:C0
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Certificate issuer: /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial: 019FAABE8315F996464B09BFF1042949925E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
Manifest number: 19E8
Signing time: Tue 28 Jul 2026 22:00:39 +0000
Manifest this update: Tue 28 Jul 2026 22:00:39 +0000
Manifest next update: Wed 29 Jul 2026 22:00:39 +0000
Files and hashes: 1: 5CrZJSgU3umnhBpv3SBW8GVEgqE.roa (hash: 2gixcHV7KBq6bvuQpRe8OX0ebav7J2q4kd7P6HGr740=)
2: 66eo3bJdi9RGbEdDXS4tD5cqq_o.roa (hash: 5t8peN4WCQBgYdxTrPyY0DXm3aBeHyQsSo4GmYIKBxg=)
3: K8hpV3Lw5k87mhYhczzAJQb3RwI.crl (hash: hWuCzc5cQpBL/OdXE6/sSGLTqJJwFqrLyv7c/uKblqM=)
4: K_ZSiUHd1rB1pcqdi19och0DGOM.roa (hash: 8mJ7F1VxOqtPJAA3HEixFXJNyvdHfHViy/fRZXdsxig=)
5: QPcZtk0DXKyMJbNEz2ZuJuMfm00.roa (hash: umOLljeZUfmplY2DajwQdgANFJvFzfTBHi6UK1dXAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:83:15:f9:96:46:4b:09:bf:f1:04:29:49:92:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Validity
Not Before: Jul 28 22:00:39 2026 GMT
Not After : Jul 29 22:00:39 2026 GMT
Subject: CN=086d7c0882d3b78cc207e9d739c4841f12991bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:68:6e:68:e6:75:6c:bd:4e:a1:28:04:33:
c9:7c:6d:f0:db:08:c9:1d:87:3a:cc:d2:2c:a7:54:
80:f7:46:6b:78:46:e3:5f:00:23:e3:74:63:8f:f2:
35:36:31:48:aa:5e:b6:3b:71:40:20:51:88:5a:25:
4c:80:53:88:ef:f9:6c:31:1e:a0:a9:59:99:d5:f5:
5e:c6:4e:eb:73:9e:01:8a:96:78:a3:40:b2:64:8d:
fc:40:d8:f5:ca:d7:11:e1:84:e6:1e:b6:19:25:9c:
85:bd:7b:17:da:29:ae:54:ff:48:ab:ec:12:db:aa:
29:45:ba:88:49:81:d8:ac:ec:18:38:a7:4c:f0:e2:
45:b0:c5:cd:84:24:1d:54:d5:67:7a:71:66:57:c3:
b8:16:f0:11:b7:d3:cd:c8:b9:e5:eb:a3:f3:83:52:
a5:48:59:a6:f1:c5:fb:18:bf:60:80:1e:3c:e9:da:
07:91:5a:ad:2f:d8:f6:e6:ec:2f:70:a1:c6:7e:8a:
7b:09:17:29:bf:0e:4b:e2:10:48:d3:1a:18:0f:4f:
50:50:a2:35:45:3b:bf:cf:bf:fb:48:be:f2:99:89:
8c:f3:06:30:af:90:b9:4c:b9:8c:2c:b6:7b:6c:4d:
1d:b6:60:e9:2c:f8:32:b1:20:0c:82:b7:f6:77:9f:
86:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6D:7C:08:82:D3:B7:8C:C2:07:E9:D7:39:C4:84:1F:12:99:1B:C0
X509v3 Authority Key Identifier:
keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:01:28:38:5b:1e:c9:fd:9c:cb:a0:86:e5:2f:45:d2:9d:01:
31:dd:18:0e:bb:b7:09:26:4e:a5:28:32:d2:52:f5:71:b4:a0:
2d:a0:0b:d1:cc:df:ba:61:2e:49:7b:32:3a:da:bb:e3:b2:ca:
38:e6:1d:e5:22:de:5e:70:a1:f7:a4:e2:a1:d9:41:39:32:8d:
ac:78:84:4e:fc:b6:78:b8:6a:9e:f4:3e:fa:e9:21:35:c5:69:
2c:f5:84:41:50:4a:91:67:ad:4f:73:6b:bc:48:ee:cb:e6:3a:
36:c1:70:6d:18:34:58:17:31:45:92:df:8f:91:1a:f6:c3:12:
1b:96:0d:2e:07:55:3d:99:1b:f2:c5:1a:9f:9b:b6:1e:1d:7b:
cb:f3:9b:f8:12:cc:3b:9b:bb:94:16:6e:56:4c:92:ac:40:7b:
6f:a0:61:89:37:db:35:a7:9e:76:3d:d3:5e:fd:ae:0d:2f:29:
46:29:a7:bc:e9:02:42:e7:a4:31:2e:f8:50:4f:52:a7:2a:e6:
45:25:85:00:6f:3a:1c:03:c2:c8:3c:9a:67:4b:d8:f4:61:6a:
3a:f2:e8:f5:69:66:3f:ba:08:3b:86:96:fd:0e:9a:bc:9d:31:
f3:fd:65:54:90:f5:29:76:5c:14:21:9a:f3:fc:87:61:8f:9e:
43:91:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:55:25 2026 by rpki-client