Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: r/4w8O4pkdxyvVO0FZcfdR4t2u3tocl8tVwYUPJVfEE=
Subject key identifier: 86:23:72:EF:BA:64:FC:A4:6F:E3:F4:C0:0E:FA:2A:56:80:42:0F:C8
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 019FAA878E3F7E48BBA4458397D027F072A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 21:00:38 +0000
Manifest this update: Tue 28 Jul 2026 21:00:38 +0000
Manifest next update: Wed 29 Jul 2026 21:00:38 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: cR9d1ij89nkBYoyoB1hNr3By+crTO7Pg3Eeonunq0Ok=)
2: _igUKCILIjVQGGkM5QULk2U3nBo.roa (hash: 20wqHq8/cCP5c8/7zi0IPefhfTG7SQ/Exh3yYB/ZfYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:8e:3f:7e:48:bb:a4:45:83:97:d0:27:f0:72:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Jul 28 21:00:38 2026 GMT
Not After : Jul 29 21:00:38 2026 GMT
Subject: CN=862372efba64fca46fe3f4c00efa2a5680420fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:d4:15:16:5c:20:3f:28:a6:b8:81:af:81:
9a:5b:67:9b:93:09:95:a4:fd:d3:06:c5:e1:88:94:
e1:9d:e2:13:4b:48:ce:af:37:4b:43:d4:63:df:11:
b7:88:5b:74:f2:77:e4:cd:6e:4a:9c:de:1b:7e:72:
75:90:4d:f3:25:46:54:b7:9b:1d:64:f5:b0:27:1b:
eb:81:0f:1c:93:26:84:4d:e5:ec:34:8f:8d:f2:47:
94:b6:31:df:7a:b5:60:14:6e:cb:c7:4d:39:79:55:
c4:89:1f:e5:76:1d:74:75:08:10:54:fd:9d:2f:20:
ff:6e:f9:43:3a:4a:d0:4a:65:fb:50:a0:3f:b0:7e:
e0:b9:93:cd:88:ea:5e:48:db:ed:eb:e6:9d:1d:03:
34:b0:69:85:c3:47:70:24:db:f6:0d:eb:25:e2:45:
bc:38:4c:bc:9e:43:27:b5:3d:35:eb:5a:7a:dc:07:
87:b5:35:15:f0:af:67:d8:0a:ff:2d:67:e5:8d:17:
9b:ce:7f:68:78:f0:07:74:87:83:b3:80:7c:b3:cb:
fa:05:5b:56:45:fb:df:ff:27:70:8b:ba:87:f5:1d:
61:aa:d2:b3:f4:48:bf:15:e6:cd:6f:29:ef:62:f0:
1e:f6:28:d5:8a:69:03:6e:b5:ba:c6:e1:2f:ef:67:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:72:EF:BA:64:FC:A4:6F:E3:F4:C0:0E:FA:2A:56:80:42:0F:C8
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9f:16:c7:e4:eb:90:36:45:6d:e1:65:64:6a:c9:47:98:78:
b5:25:b6:35:03:2d:74:de:82:b1:b7:85:42:ce:98:54:45:6e:
d0:b8:21:de:f9:b3:1f:6e:f4:f2:45:6f:48:73:c3:39:53:08:
71:27:83:27:bf:70:38:d4:85:e2:2e:bf:9b:9a:b8:c7:4b:0a:
93:2d:a1:66:55:1d:5d:71:54:a4:76:67:7a:48:da:88:e0:10:
c3:b2:d6:df:9d:cd:b1:df:a2:93:f4:1e:7f:4f:3b:83:51:91:
3e:52:50:38:3f:d3:2c:d6:02:76:a9:a8:cf:6c:cd:13:4e:13:
7c:3f:ad:24:5b:0d:6b:3b:3f:95:2d:fb:28:ad:e3:46:d7:a7:
cf:75:bf:83:cc:61:f2:96:e3:84:42:45:fa:54:f4:24:1a:f4:
77:f1:25:83:3a:a8:7e:5c:60:cf:54:39:a2:75:9d:cb:1f:7e:
1d:c3:44:90:b8:14:04:34:f4:6e:00:f1:87:48:67:fa:6a:d4:
f3:f4:8e:23:9e:dc:72:16:43:b4:8d:64:d8:69:5e:30:6f:e8:
0d:c9:53:d5:43:8e:c4:c4:9d:1e:fc:1a:eb:ed:ac:e5:cb:1f:
bb:b3:79:8e:44:d6:19:f0:e6:df:79:e3:79:76:fc:86:3d:3c:
e9:96:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:12 2026 by rpki-client