Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: Jke3u4bmCcNRSZehKHAquR12955nWEV9g/1Cu9b8xOI=
Subject key identifier: A3:BD:60:80:57:E6:70:C0:10:F9:AB:12:3F:C3:99:4C:31:F2:5A:17
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 019FAABE46BDDEA40F281C01C635D68DCF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 141D
Signing time: Tue 28 Jul 2026 22:00:23 +0000
Manifest this update: Tue 28 Jul 2026 22:00:23 +0000
Manifest next update: Wed 29 Jul 2026 22:00:23 +0000
Files and hashes: 1: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: wpw2yfEJN+ks8kaaCwEJ+A2CvJznf/pzW1ACddcl68k=)
2: iir-MP9u--5X9N6sLaapXHQB96w.roa (hash: KYgiiMZkt1y8OXMvRPUfLQi6b3EsUMCv28kMOUxnz3s=)
3: l8WM5SXhhLHZk6-0rTuPZujifDU.roa (hash: OwasY0cE4RjsEomhMQYGit6AbKnSUZ5M+37Aov/WE20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:46:bd:de:a4:0f:28:1c:01:c6:35:d6:8d:cf:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Jul 28 22:00:23 2026 GMT
Not After : Jul 29 22:00:23 2026 GMT
Subject: CN=a3bd608057e670c010f9ab123fc3994c31f25a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:6c:9a:54:1f:0f:cb:dd:15:64:80:80:fd:
69:0f:a2:c1:be:81:a8:fa:ac:aa:b8:7a:a9:5b:da:
f8:b6:06:04:85:ad:f6:a7:bd:47:d6:39:88:31:04:
36:f0:75:9a:74:a5:1f:ad:ef:62:61:43:75:fa:94:
5d:7b:53:04:b1:84:b3:17:24:0d:9d:9c:b5:93:80:
48:27:64:75:96:70:09:7a:ca:a3:02:ca:25:a6:4f:
86:d6:c3:d4:41:27:f9:3b:c1:7c:99:30:b2:83:39:
01:4e:4b:fb:d5:f0:ab:c9:6e:8a:c1:ad:e9:a6:cb:
69:2b:70:20:97:9d:a8:87:ed:22:7d:df:e0:c3:9b:
86:dc:14:23:29:ca:49:bd:c1:8f:e3:f6:0b:1b:ba:
17:1e:3a:10:08:63:96:4c:df:67:f4:cd:0d:76:e2:
34:53:4e:02:77:aa:1c:b8:b1:c4:7e:71:0b:83:90:
b0:69:2a:63:37:ba:4e:fc:44:c0:15:b2:b9:93:2d:
db:2a:1f:61:1d:91:1b:08:93:c4:72:8d:49:af:cc:
9c:a8:c2:d5:60:bf:37:55:aa:85:03:a9:dc:14:59:
bd:c8:67:c4:e5:2c:b7:28:3c:31:a9:c3:64:3e:83:
4f:31:3a:3e:62:fa:80:27:ed:73:ec:3e:f6:5b:b4:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BD:60:80:57:E6:70:C0:10:F9:AB:12:3F:C3:99:4C:31:F2:5A:17
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1e:e0:40:e8:3a:68:66:21:7b:54:01:c8:ad:8d:d4:6d:8d:
08:08:f2:48:61:5c:bc:07:90:b7:9f:4e:5b:bd:3d:49:9f:d6:
19:86:6c:d8:82:87:56:ae:1b:29:75:4b:32:bc:9f:ef:ac:f3:
e8:a7:bd:46:82:da:f7:da:84:4b:76:31:f5:64:8d:67:a5:97:
76:94:9c:3c:27:29:6b:ab:21:90:9c:ee:2d:97:38:43:d0:ba:
19:38:f3:0d:8f:12:f8:db:ae:45:86:41:11:28:ed:90:43:b1:
f5:31:46:3d:05:0a:fe:e6:dc:2f:94:38:ad:fa:32:a6:d4:8b:
10:36:18:c6:c3:07:ea:6d:e4:ef:0e:50:99:c0:ea:17:b6:8a:
a9:90:e6:f5:9b:9c:b8:ad:b8:ba:ee:13:d7:27:f8:5a:99:6c:
be:03:c9:38:29:11:f5:92:f9:93:45:74:b6:2d:87:13:95:56:
54:ee:90:bc:c9:24:37:ed:19:d4:1e:1d:be:ad:fc:30:c1:ea:
17:46:39:4b:e1:05:77:20:0d:2c:5f:ba:7b:6f:8f:ef:55:c2:
9b:4a:21:66:83:d8:57:19:a3:90:95:c0:4e:97:13:fd:dd:69:
ba:0d:3c:9a:50:59:40:5f:78:df:47:c5:75:2b:ef:12:6d:8e:
d8:60:ec:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:04:56 2026 by rpki-client