Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: 5UGcAZqPEHZNwnxaKTf/wnnuGe8cM47VxcT/Nec2av4=
Subject key identifier: 13:F3:64:24:D2:9C:31:05:20:A8:4E:44:14:F2:1A:FE:BA:95:85:BF
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 019FA9ABBF2A40D29332093648E5273C9D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 147D
Signing time: Tue 28 Jul 2026 17:00:32 +0000
Manifest this update: Tue 28 Jul 2026 17:00:32 +0000
Manifest next update: Wed 29 Jul 2026 17:00:32 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: Iz467uKUzYwBjGOXQErjBDEWXPJf0b5KGR3JLe/1QwA=)
2: 9hD2ERgxFZRceTwyPk94l0SmsBw.roa (hash: 7W+094dJdVnFZLMoB+fr0KNBxnfuASm7T/kRouyIeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:bf:2a:40:d2:93:32:09:36:48:e5:27:3c:9d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Jul 28 17:00:32 2026 GMT
Not After : Jul 29 17:00:32 2026 GMT
Subject: CN=13f36424d29c310520a84e4414f21afeba9585bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:c9:a5:1d:87:51:d4:41:df:84:5b:3b:68:
3f:1a:7e:20:f7:e4:2b:36:8b:01:04:c4:79:c0:8a:
30:ba:65:12:72:43:b5:42:7b:dc:59:58:f5:b7:41:
73:83:d3:2d:ab:56:8e:6f:1a:09:79:40:c7:08:94:
70:a6:b0:d2:fa:29:da:d6:38:f1:68:04:3e:7d:4a:
59:d1:17:8a:34:fa:f7:6f:a8:75:b3:2e:df:b2:29:
47:0b:94:c3:e2:66:99:65:9c:64:58:ef:83:13:42:
c8:e1:91:0d:4a:6c:f4:af:90:7e:86:34:5b:14:d9:
0f:b2:fe:ef:da:9e:5e:c5:ac:f6:05:0a:01:89:a3:
bd:33:be:4a:ea:69:9c:38:71:f3:79:1d:a9:7c:37:
99:b0:ba:c3:3d:e8:2e:cc:1b:46:7f:16:f4:7b:4d:
b8:8e:70:2d:21:63:f5:6d:52:8c:5a:18:4d:d3:cf:
fc:b2:7a:a9:f5:a6:94:e5:f7:85:b3:e8:44:08:bc:
97:51:c8:1c:ea:cc:52:a4:cc:95:98:94:68:95:a9:
16:d5:22:8b:02:c4:bf:88:73:b0:fc:c6:47:7a:57:
80:b9:cd:05:27:02:07:8a:69:ce:b1:5b:1c:07:16:
d0:36:d7:74:63:ac:25:d6:5e:54:ab:68:82:c7:54:
e7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F3:64:24:D2:9C:31:05:20:A8:4E:44:14:F2:1A:FE:BA:95:85:BF
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d4:9b:cb:4b:77:af:bd:c7:43:4b:eb:2f:2f:3f:a2:27:d4:
50:8e:c4:5a:85:4d:54:b3:3d:75:ed:32:d2:a6:20:83:a3:21:
8e:01:0e:3b:1b:02:39:60:9e:7f:01:f6:6b:82:c4:f8:2d:9c:
7d:85:55:38:4d:e3:24:c6:83:99:1b:22:a3:b2:d7:90:6e:32:
04:52:13:03:96:a9:0b:25:b5:9d:61:fd:97:87:43:c9:b4:8e:
13:70:14:48:fa:d9:28:97:20:f5:66:e0:77:f2:33:3f:1d:a0:
9e:f8:99:cc:a7:90:60:34:9a:52:0a:9b:c7:36:8f:bd:1b:38:
eb:35:44:ab:fe:f4:b1:c8:69:fa:57:f2:03:4d:8c:a8:a7:56:
c2:62:36:fb:9f:9b:31:30:74:66:c4:e0:95:38:19:7c:81:84:
fe:6a:9b:43:17:3a:0c:1a:80:cf:7c:f0:06:5f:57:09:6b:7d:
4b:d8:d2:d9:bb:d5:46:41:35:f7:cd:46:e3:4a:75:45:4a:a7:
ae:36:85:72:47:14:54:71:65:eb:66:f3:8b:09:e2:dc:4b:e5:
35:b8:2c:93:ae:71:2a:3f:84:e2:97:00:9a:f0:3b:5a:3b:fc:
55:8f:cd:f0:71:42:df:42:ff:6e:9c:a0:c0:79:d4:2d:52:05:
ac:2e:8c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:21:52 2026 by rpki-client