Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: uwAU57rKVPePyEGB9Vo2KTuUfICskppMuOVATiTFs9Q=
Subject key identifier: DB:BA:4A:92:C9:2D:D3:23:7F:68:6A:14:3F:23:F8:2D:00:38:D6:F5
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 019FAB62FCEF1D35B10E0B478508CEBE8A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 19DE
Signing time: Wed 29 Jul 2026 01:00:18 +0000
Manifest this update: Wed 29 Jul 2026 01:00:18 +0000
Manifest next update: Thu 30 Jul 2026 01:00:18 +0000
Files and hashes: 1: QACcx3bmkYq5FVm71dmit53bn4Q.roa (hash: oQ/m7QfRfNheRWfUqid3dTy2xJX9VnnT62jOhchvHuk=)
2: gux-IxdkibcThQl39PWiMsakK0g.roa (hash: xADBPDkQYtVHScAVn2k1rTwtjm/TxC5Y/n4oo7GBk1E=)
3: jpvZw7M6HWfeaPP7BBGWUfnUPW8.roa (hash: m69AM/qWHvVH8vQjk7f2bA/DtDMk2TIVp7SRlmCI4co=)
4: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: oVFKLLmr1qSLpfNmb29XeJOgSw8ln7jwWM+f8N+iJio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:62:fc:ef:1d:35:b1:0e:0b:47:85:08:ce:be:8a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Jul 29 01:00:18 2026 GMT
Not After : Jul 30 01:00:18 2026 GMT
Subject: CN=dbba4a92c92dd3237f686a143f23f82d0038d6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:ec:87:1d:20:db:c0:04:e3:95:d7:b6:36:
66:97:97:69:b5:a4:92:4e:aa:2f:3f:b1:ae:7e:5d:
92:a6:1d:0a:70:14:ee:27:32:a3:dc:1d:b3:b8:a8:
5a:5a:b8:1c:51:65:b2:ed:c4:e8:8f:2e:9c:fa:f3:
2d:d5:87:26:b2:c7:d2:07:e4:99:90:13:af:d1:00:
a2:0a:2a:68:38:c6:67:d7:6c:86:a5:17:c7:7f:b0:
c6:bd:85:99:05:c2:e0:58:e9:6c:05:0b:f8:84:cf:
06:86:f6:43:20:64:c0:f9:05:89:99:43:39:fc:75:
0a:f1:d3:3d:c6:75:44:f9:ca:db:a8:47:d2:91:24:
6c:74:e1:ae:67:4a:7a:bf:ff:48:22:5e:fd:78:67:
89:aa:b5:ac:19:c1:d1:cf:06:3a:bf:a2:fa:7b:5e:
50:5e:12:7d:89:90:55:5b:fa:30:d0:ea:fc:e3:88:
c3:34:ca:a4:a9:92:40:a4:c2:0b:ed:b6:3f:26:d2:
50:7a:8c:09:83:ab:b1:09:e9:2f:65:a6:76:36:18:
86:e0:9c:a0:71:0c:d5:06:51:90:2a:0d:db:be:5e:
3e:c3:ef:08:8f:d2:8b:70:90:a2:de:f7:b1:3f:76:
42:24:08:85:70:52:bf:2c:65:c6:4f:f9:ee:03:86:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BA:4A:92:C9:2D:D3:23:7F:68:6A:14:3F:23:F8:2D:00:38:D6:F5
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:51:a7:1c:d4:52:06:cf:cc:e6:68:06:6a:9b:49:50:2d:fa:
45:51:c3:c9:1b:3d:11:da:d1:f3:c5:af:db:a3:75:77:01:50:
25:87:9d:bb:bc:81:64:86:4a:01:cb:5a:ba:a3:36:ba:f5:3d:
af:4a:e1:6a:03:da:cd:90:ad:8e:13:54:31:d3:bd:12:f7:67:
ce:4b:3e:9f:49:58:77:73:3b:16:54:82:df:82:71:29:5f:2e:
0b:4d:2d:db:71:12:1e:c9:47:3c:c3:ed:89:05:90:07:c5:26:
d0:da:50:b3:95:3f:6b:d1:be:2b:23:e8:f0:18:10:fd:95:01:
53:d8:eb:93:99:8e:57:3a:2c:35:16:1c:7c:0d:25:1a:8a:9b:
13:06:22:1c:f9:3c:1a:ec:75:bf:3e:69:d0:3a:5e:dc:0a:1e:
72:4b:70:9b:4b:89:ad:57:cd:4a:bf:bc:ac:e9:7c:3d:42:b5:
8f:53:d0:a0:da:8a:a1:47:4b:e3:3c:cb:a2:94:a5:ee:b6:23:
23:53:15:b5:54:97:63:13:27:d7:98:03:a4:a0:95:cb:c0:ad:
ea:52:43:f6:8a:38:ca:d0:f8:a7:e5:7c:c6:6d:ec:e2:c1:15:
b4:c1:48:51:02:e3:b7:fe:79:5f:fe:4e:11:a6:6f:9e:df:12:
53:9c:30:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:53:30 2026 by rpki-client