Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
File: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft (raw, json)
Hash identifier: xRm/86nwHnB+jQ/gMsZ0zEkr2fAsgvpBExQNzpBRZy0=
Subject key identifier: 98:33:09:54:AA:22:CE:AF:85:E4:AF:55:06:30:4C:7F:AC:D5:24:F9
Authority key identifier: F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6
Certificate issuer: /CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
Certificate serial: 019FAB2BFD216723FE7F13A96EE49C69A040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
Manifest number: 130D
Signing time: Wed 29 Jul 2026 00:00:14 +0000
Manifest this update: Wed 29 Jul 2026 00:00:14 +0000
Manifest next update: Thu 30 Jul 2026 00:00:14 +0000
Files and hashes: 1: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl (hash: /088MWrfr5rURUkVA/umjsFWO1xQkCY5mj/GUEi9+/8=)
2: jNP4lkkfBvGwQninx6yZc-naqo8.roa (hash: sz5Qqi9rGFZNr7jIWcNDJD+aLk3iNQT71jM/j1utVDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2b:fd:21:67:23:fe:7f:13:a9:6e:e4:9c:69:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
Validity
Not Before: Jul 29 00:00:14 2026 GMT
Not After : Jul 30 00:00:14 2026 GMT
Subject: CN=98330954aa22ceaf85e4af5506304c7facd524f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:af:55:c8:ad:ff:fc:23:03:c9:37:1d:1f:
23:a9:35:94:ce:f8:60:f2:a4:5b:24:8a:9f:2a:9f:
94:b2:83:0e:4d:96:5d:25:52:45:86:5f:02:20:68:
07:a1:23:fd:63:a6:3d:04:f6:f0:80:fd:9a:8d:cc:
54:09:25:ef:42:a2:f5:c9:25:7b:f8:c2:f7:74:05:
73:dd:9b:3b:bc:bc:df:b7:b8:28:01:a0:83:42:35:
80:f5:c0:47:28:56:86:26:f1:82:4e:a0:b7:ac:d3:
3e:0d:bf:1e:02:b5:dd:39:69:f4:21:41:30:ea:7a:
bf:78:32:c8:d1:70:d3:9b:e7:de:16:3b:95:1a:b6:
cc:e5:4d:d8:21:d7:3c:25:3a:15:51:e7:d1:61:20:
46:42:fa:81:38:a2:89:f8:5f:08:11:04:75:7e:c5:
0e:83:42:03:1f:d2:6e:76:7a:54:83:e6:53:9e:33:
74:16:27:e9:91:e6:37:d5:03:50:81:6f:69:1c:d9:
48:40:fe:70:6d:32:12:62:a5:5e:f6:50:03:29:2e:
bb:46:b3:21:f6:32:90:15:b1:22:a0:f0:ad:a5:03:
07:47:83:f7:30:bf:c3:07:a0:f2:2d:48:f6:bd:d7:
15:a5:d4:14:b8:2a:a4:b0:f4:21:da:0d:b9:67:26:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:33:09:54:AA:22:CE:AF:85:E4:AF:55:06:30:4C:7F:AC:D5:24:F9
X509v3 Authority Key Identifier:
keyid:F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9f:0a:25:06:ad:28:24:ed:c7:44:88:d3:dd:4e:5e:1e:c0:
22:10:f3:c9:89:ab:50:f3:9e:ba:f5:a0:78:be:e1:95:1f:3d:
7e:d9:83:6b:d5:61:02:91:52:7e:e1:7b:d1:4d:f3:33:8b:e0:
d4:2a:ff:51:a1:85:74:19:8f:5d:00:c9:a5:be:25:82:10:97:
b7:00:96:57:3c:3e:71:25:f5:a6:54:83:23:27:54:db:2a:76:
fe:a1:d8:01:30:16:6b:2e:23:dd:eb:a8:bf:75:a5:4c:62:b1:
27:7e:ba:53:9d:40:61:0d:0d:21:f1:46:76:f0:3a:d1:d0:94:
45:8a:2e:e5:de:ce:2b:cd:c2:f0:29:9b:55:1b:d3:4f:83:94:
63:ee:35:f4:6f:ef:e5:1b:44:1a:c4:65:a7:5a:65:6b:cd:64:
c6:85:08:3a:fd:61:68:b2:83:08:a9:1f:2d:1d:84:14:96:19:
1a:8e:ae:1c:09:c0:66:46:cf:83:a7:6e:d0:20:5f:9a:35:ee:
c7:e8:44:f8:d4:b3:8e:ea:af:55:75:5e:13:33:e2:c3:ca:06:
39:0f:5b:e8:d7:ae:4a:d5:24:3b:03:87:e7:27:b4:eb:e3:da:
24:4b:a3:5e:8f:da:cd:7a:70:ec:88:8f:94:ee:84:e8:a3:29:
79:b8:b8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:53:26 2026 by rpki-client