Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier: asUcRX3HIIqVc1HdnPm6eJhHpmZkaafBI/op9zhWNhA=
Subject key identifier: 5B:08:9C:FF:10:FF:C4:09:0D:88:B6:C1:2D:C5:F0:1F:64:99:62:A5
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 019FAB6310E72C6EAB8F9591FBD487F6DEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number: 14E9
Signing time: Wed 29 Jul 2026 01:00:23 +0000
Manifest this update: Wed 29 Jul 2026 01:00:23 +0000
Manifest next update: Thu 30 Jul 2026 01:00:23 +0000
Files and hashes: 1: 4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa (hash: mR/ntepXIb3AfkywKQIADTaonFHTRbi9R2FQyBq3dKQ=)
2: 6PhblOAO9xa7zmIjxvlxnMtK7uQ.roa (hash: NWDITDoerQYCt5AOvDev1r+3TmGT8RmUVJIwjMd0YRE=)
3: FtNNeWImNsRtEKSUkKACM6lSmvc.roa (hash: 1b2HDz6Lo28/yROcDiHE0/pvPJHPVJCUsiCcT/vyD5E=)
4: H_IwdjQek-TxkIwNQc7QdhJFGTY.roa (hash: jds0yEe3zRWI3cu0lRDYUFLph76il4rNQy+a1D0VpZk=)
5: LiIvmL2jPb5CXm2fcW48pwl6IHs.roa (hash: nIYaySFJM8B7djJy1Ih3Y/KEycQQlbGH8uUci8K6W9k=)
6: fjWmsnTuw0Jy6MrhqYJr2902xYw.roa (hash: EbbXPkLE6w+CuqoWFnM8NOi9yq48EFyTEgcSWpqKxTw=)
7: rTQMpwKCtdAUeKgHOzQABtMHsGI.roa (hash: NFKvVLShqUI7IOwsmc2G6/b+0920aDWMbWSkjC2hmss=)
8: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: w9necflF05byxtoR1j6ADpsofBZVlBZ0D/pw90a7Lt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:10:e7:2c:6e:ab:8f:95:91:fb:d4:87:f6:de:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Jul 29 01:00:23 2026 GMT
Not After : Jul 30 01:00:23 2026 GMT
Subject: CN=5b089cff10ffc4090d88b6c12dc5f01f649962a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:79:1d:4c:cc:3b:8c:37:e7:ad:5c:4d:d2:
d7:3c:73:34:e3:53:c9:8c:ef:e0:32:cc:ec:35:2b:
e1:2d:63:b7:35:ea:18:f0:10:a6:e1:c4:51:b6:db:
f7:ce:f1:4d:0f:19:5f:60:d6:a7:fa:68:d1:90:09:
ed:6f:2e:5a:be:13:39:07:3c:d0:01:30:02:74:fa:
38:49:7d:ce:93:0c:5e:5a:8b:85:7e:d4:64:18:75:
fd:c4:59:ff:9d:24:74:a4:2d:0c:4f:f6:b2:c2:32:
92:0a:ba:4a:82:bc:9a:f1:7c:55:c9:9d:5a:70:c2:
ae:62:0b:19:56:80:ae:81:e5:37:3d:aa:4f:d2:45:
c3:c8:99:9f:08:3e:1a:e6:e1:ef:9c:6b:46:67:23:
2a:84:c2:12:33:a4:5d:84:a6:d6:13:d8:ae:92:b2:
69:a2:92:07:30:e6:ae:2c:0a:4b:38:93:c9:92:93:
70:e0:3c:71:b9:da:0d:59:6c:c1:bd:42:fc:c6:15:
43:01:a3:41:40:c5:72:b6:e8:8c:7a:e7:79:ba:76:
08:f3:44:dd:b4:6e:43:c5:66:bb:2a:16:b7:70:39:
c3:1a:ef:b0:e2:95:e0:83:7e:bf:a8:48:13:6a:cd:
04:17:4a:5a:fd:b2:d2:cf:a8:6a:e0:4b:3f:7f:48:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:9C:FF:10:FF:C4:09:0D:88:B6:C1:2D:C5:F0:1F:64:99:62:A5
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:27:a9:5e:2e:20:76:45:d2:5e:0e:d2:76:bd:37:7d:13:c0:
29:d0:e3:a2:a1:b2:0f:5e:d9:5f:e5:15:bd:e4:70:70:66:74:
3b:5c:17:0d:3d:4c:c8:7c:5c:d4:c9:1a:de:d2:ff:18:a7:92:
6a:13:8d:2d:4f:c1:ee:85:af:d8:76:67:a0:9f:bb:d6:38:f9:
74:87:f8:cd:40:e1:12:92:f8:25:c2:d1:8a:6c:28:c4:23:b3:
6c:bf:d4:c4:29:fa:b4:38:52:3d:74:09:dd:f3:5e:94:97:23:
0b:df:20:ad:ff:c5:2c:d9:00:33:1d:fa:bc:80:15:ba:f1:ef:
ee:5b:5d:8a:d3:65:1c:2c:fb:19:06:0d:11:73:7d:01:3a:bc:
51:4a:d0:68:51:cb:c9:78:c5:89:1c:61:e2:d5:06:ff:fc:f4:
03:c6:d4:07:34:fe:52:94:e6:81:03:8c:4a:ad:c8:df:fd:a3:
09:35:5b:ee:44:ca:c7:08:28:b9:86:b8:85:20:74:f1:10:d6:
35:16:4e:9c:b5:96:66:7b:c9:0b:b7:f2:d6:18:a2:59:00:95:
06:84:6d:7b:f0:be:83:09:18:e6:1d:6c:cb:25:ed:04:60:27:
ca:fb:a1:ea:03:05:9a:dc:06:9f:e2:f1:6e:19:e2:3c:b2:05:
58:09:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:47:22 2026 by rpki-client