Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: IoT+uceIO9orSqzFwdy3oZsn6mU+Lr2o9KLwBMGzcTM=
Subject key identifier: 15:76:A2:3B:19:86:32:3F:D9:20:70:43:95:7F:8A:68:D4:20:9E:D9
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 019FA86252FAA0B76B8B8B4C8413AC829CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 1421
Signing time: Tue 28 Jul 2026 11:00:43 +0000
Manifest this update: Tue 28 Jul 2026 11:00:43 +0000
Manifest next update: Wed 29 Jul 2026 11:00:43 +0000
Files and hashes: 1: 5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa (hash: 4jlaZxhWTA1CCnRRprrMPJev1XSLyXsPJzXP/xH6h+Q=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: qPGZukAiPuEjONKCbHauIEnIyqXgOmcJojonDxqD5CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:52:fa:a0:b7:6b:8b:8b:4c:84:13:ac:82:9c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Jul 28 11:00:43 2026 GMT
Not After : Jul 29 11:00:43 2026 GMT
Subject: CN=1576a23b1986323fd9207043957f8a68d4209ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:7b:e8:28:88:45:e3:f1:04:43:6d:af:45:
d0:31:e2:84:3d:cf:d6:e3:2c:aa:a7:3d:c1:56:3b:
92:c9:3e:72:ae:f7:98:4c:34:7d:fe:6a:90:01:ff:
81:b0:af:d9:73:aa:a3:a1:07:23:5f:6b:2c:f5:74:
d0:99:3b:77:d1:d0:bd:85:f2:99:60:01:a9:ca:59:
26:83:84:ea:73:a0:61:d2:ea:38:94:8c:e6:b3:d8:
b7:ba:8a:9c:d8:e8:13:37:e8:8b:e4:ff:aa:18:2b:
a3:c0:e6:62:8d:7b:3f:b0:65:cb:39:52:41:fa:6a:
d7:4e:41:38:d7:89:65:a8:08:06:04:b9:b6:ef:4f:
b2:f0:e8:2b:c4:65:68:67:ee:4a:ae:05:0b:72:62:
d4:c4:af:17:5e:f7:8a:73:a1:54:26:c6:ac:4a:49:
1b:0c:f1:7c:7c:d3:07:fc:f4:2c:00:98:19:b7:31:
cd:a6:27:3f:39:0d:a3:04:13:62:02:99:cb:4a:ab:
95:23:69:e8:09:c4:7d:c9:54:11:60:d9:56:c9:4a:
a8:23:f5:98:4e:c5:b7:4a:38:73:1d:9d:2f:d4:64:
ea:1f:bd:f1:02:47:f5:3f:17:41:aa:3c:43:9c:48:
fd:cb:a1:fd:83:e2:7d:e3:30:ab:53:52:ab:0f:47:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:76:A2:3B:19:86:32:3F:D9:20:70:43:95:7F:8A:68:D4:20:9E:D9
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7e:e9:17:b3:ef:8b:ea:d4:2c:ea:7b:5a:73:6c:d2:6d:1e:
f1:2a:d0:0c:23:0b:43:04:ce:8a:bb:17:39:9d:78:b7:4c:bb:
01:9e:91:bd:91:92:e5:1e:f4:88:12:38:07:35:72:46:bc:f0:
4a:19:41:9c:d9:63:d9:db:b2:c1:10:ae:ef:e6:c5:d0:c1:6c:
e4:43:f3:ae:4e:04:06:ba:14:2a:0e:9d:8b:27:c2:08:1a:cf:
dc:c0:15:b6:76:fd:e7:87:41:ea:78:2e:6c:8f:a1:e7:83:72:
88:bf:46:5a:7d:1e:90:c4:42:b6:9a:09:c4:1e:d0:90:30:45:
52:5c:66:96:0f:2e:90:e1:09:13:34:bf:e3:5f:cd:d6:31:6c:
b7:75:0d:91:57:aa:de:01:69:8b:cc:8c:7c:23:cb:36:2f:95:
7b:5c:bf:9d:64:f1:51:14:4c:bd:1b:64:e2:27:40:ad:b7:01:
d9:4a:8d:dd:ce:b2:35:30:bb:09:99:f3:46:ac:8e:d0:9b:76:
3f:22:e7:8a:2b:66:59:15:fc:0e:92:31:bd:00:84:25:6d:f4:
20:77:3c:41:45:01:75:23:fa:cc:3c:89:78:da:fe:fa:a0:0d:
78:4d:5c:ae:09:35:12:d4:c3:86:c9:8c:11:34:a8:d7:e1:c3:
26:4b:3f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:36:11 2026 by rpki-client