Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: inbYEVN8EGzcbkrVqqJzPS919hOLda2JTmNZsFCaoYM=
Subject key identifier: 00:E8:44:24:AF:7B:8A:74:0B:30:AE:36:CE:DF:87:D7:91:BC:C2:93
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 019EC0DBCE9415054FBEF0791429053249D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 12:01:31 +0000
Manifest this update: Sat 13 Jun 2026 12:01:31 +0000
Manifest next update: Sun 14 Jun 2026 12:01:31 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: N9jggJMe0AcHSvhVAa4c3EToCZFspDYBCqZqPhq5pCA=)
2: _igUKCILIjVQGGkM5QULk2U3nBo.roa (hash: 20wqHq8/cCP5c8/7zi0IPefhfTG7SQ/Exh3yYB/ZfYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:ce:94:15:05:4f:be:f0:79:14:29:05:32:49:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Jun 13 12:01:31 2026 GMT
Not After : Jun 14 12:01:31 2026 GMT
Subject: CN=00e84424af7b8a740b30ae36cedf87d791bcc293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c1:7d:cf:d0:5f:8e:ad:e1:29:92:78:d5:97:
28:7b:df:f5:03:b1:05:2b:d5:0f:55:97:79:a2:5d:
35:b9:77:93:fd:d6:2f:44:8d:99:ee:2d:49:07:d2:
11:d3:72:dc:eb:48:56:a4:42:aa:b9:8c:e0:a5:5e:
70:4c:23:16:6b:c7:37:54:a5:3b:5f:26:82:4c:2c:
d5:8a:f4:02:be:05:71:a1:b6:a3:66:81:98:c7:fb:
4d:5c:40:37:d0:97:91:13:27:98:44:a4:58:56:cf:
e5:f2:14:45:e8:9c:09:78:9a:8b:97:36:89:41:16:
fd:86:f6:06:2c:db:6d:fa:60:ee:13:ac:64:0f:43:
47:9e:8a:d2:2f:a7:92:2c:ae:55:eb:d2:d1:3d:29:
18:3c:15:a4:00:48:2e:66:fb:4a:63:f1:26:34:2b:
3a:de:53:e3:b7:cc:c0:07:9e:6f:50:bf:49:d4:07:
1f:b5:3c:fa:27:c6:9d:fc:60:c9:96:22:fb:c2:cc:
9c:49:e0:16:65:a1:e0:8b:19:7e:a9:eb:21:77:c1:
d5:40:1f:b2:fa:a2:87:4f:a1:30:b3:a5:d3:ae:d1:
75:d4:51:22:af:31:a2:e1:25:64:a7:79:38:02:46:
39:13:bb:3a:5d:78:47:5a:02:e9:58:57:e8:69:03:
f9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E8:44:24:AF:7B:8A:74:0B:30:AE:36:CE:DF:87:D7:91:BC:C2:93
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ed:11:7a:30:a6:16:44:8d:e7:64:d8:8d:68:a7:3f:c2:c2:
aa:ca:47:b0:3f:7b:03:17:e4:fe:9a:cd:4b:1d:6c:4f:b4:52:
55:14:e7:26:57:cc:19:78:8a:ab:bb:5a:75:70:8e:0e:55:f5:
43:aa:11:08:b9:54:32:be:e0:12:94:7a:77:6f:f8:31:8b:3e:
4b:ad:bd:80:3a:1b:c9:97:61:44:19:32:4a:8d:96:ef:28:b1:
db:9d:2c:66:95:e1:69:25:a2:a1:6f:76:13:ff:47:b4:a1:c8:
5c:94:6b:cc:b2:5d:20:fb:b3:35:43:43:ba:3b:f4:c0:d2:09:
8d:ea:51:6e:78:11:3e:6e:73:aa:a0:f7:e5:ab:e8:dd:f1:24:
97:88:25:39:c0:64:72:69:7f:0f:20:37:5b:9f:8b:5d:bf:05:
19:9e:69:2a:4e:65:ae:0f:ef:77:2e:9e:a3:40:a2:74:ff:83:
41:0a:c7:c4:d5:01:57:89:41:56:86:d8:cf:32:e2:95:4c:8f:
56:fc:22:74:cf:b9:1d:80:18:72:1f:ae:eb:95:29:95:34:a6:
ad:e7:78:ef:7b:36:f2:54:50:23:1f:e7:78:36:3c:19:21:de:
80:2b:de:7d:77:b4:66:b7:7c:40:cf:3a:4b:53:fc:ec:30:c3:
3c:4e:f7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:23 2026 by rpki-client