Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File: 8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier: kLEGs8uUNLqbOwEx/K04BKzbV7F0rFviGLCCPDc4T6c=
Subject key identifier: F7:62:C8:92:04:24:2E:E4:2C:34:CC:BB:4A:23:17:CD:B7:B2:CD:13
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer: /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial: 019FA974BFB10EF264B1B124FBE04E5BFE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number: 07AF
Signing time: Tue 28 Jul 2026 16:00:28 +0000
Manifest this update: Tue 28 Jul 2026 16:00:28 +0000
Manifest next update: Wed 29 Jul 2026 16:00:28 +0000
Files and hashes: 1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: +qUatn8JVSDJ++FqmhngO2+/PRhFZv8YorHCCGjCums=)
2: NpxIGcPNSR7M7Pg5DxBw4oq6qFc.roa (hash: /JiblaBoPoe2nZBA7SVm6e0ExqOkpFSs5xrzKMIO9LU=)
3: kSpQdj4pHKFVSlXJ4ce8DARPvac.roa (hash: kZtsdvWcO2A1I+qg+DhaJ9CEvwXS8FB59+ItpXgZAT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:bf:b1:0e:f2:64:b1:b1:24:fb:e0:4e:5b:fe:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Validity
Not Before: Jul 28 16:00:28 2026 GMT
Not After : Jul 29 16:00:28 2026 GMT
Subject: CN=f762c89204242ee42c34ccbb4a2317cdb7b2cd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:a7:52:c1:14:6d:e5:92:cf:d7:4f:86:e7:
22:42:70:6d:d2:8e:7b:e1:9f:7f:bc:f7:e5:0d:8e:
2d:c7:c6:31:72:b5:b2:dd:f2:0e:ea:57:b4:32:43:
bc:f2:ee:d8:ca:d3:18:80:62:84:3c:38:09:9f:8a:
8e:dd:6f:be:9c:c1:27:cf:fe:fe:40:97:65:90:6a:
d5:5e:17:84:59:88:7a:42:78:d7:f6:3a:b7:c6:00:
11:24:77:69:36:54:ec:b2:ec:f5:c7:58:c7:69:08:
f9:09:20:22:8f:71:86:16:fb:ac:f3:08:cc:b2:9e:
d1:24:fd:86:06:67:61:3e:8b:89:46:af:b6:8a:2d:
29:30:1b:36:0a:21:04:e1:e0:68:a5:9a:15:52:69:
82:88:9a:dc:c7:c9:00:26:e7:3c:07:ea:f7:71:d0:
bd:29:0b:9d:2c:51:1f:76:61:b7:1d:69:5a:df:f1:
6f:92:57:61:47:cc:f6:35:49:0d:5f:32:37:bb:c5:
84:c9:03:79:c8:0a:0b:f6:65:db:72:94:89:0b:43:
95:59:58:63:c4:75:c3:39:83:d0:f0:2e:4a:04:c7:
55:6a:8a:d2:35:f0:d8:5b:6b:7c:3e:ea:c2:2f:86:
fd:4f:37:28:df:32:cb:2d:4d:10:5e:ae:55:e1:b0:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:62:C8:92:04:24:2E:E4:2C:34:CC:BB:4A:23:17:CD:B7:B2:CD:13
X509v3 Authority Key Identifier:
keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c8:ec:e3:27:c5:6f:22:b3:94:78:ac:77:6d:8d:bb:ff:c5:
75:8e:d6:d5:92:ac:ef:f7:73:3e:39:9a:e5:87:01:ea:03:c6:
27:1c:3c:5f:2f:d7:8d:82:74:75:e6:17:56:6f:1d:4d:de:db:
6f:eb:c8:3e:c0:42:1f:e2:f5:55:46:07:a6:b4:27:c4:f0:a8:
48:3d:da:c1:2b:25:6b:f9:21:fb:56:ff:50:e7:18:3e:fe:9a:
4d:c6:c6:14:2c:96:c1:43:1a:e2:80:21:62:55:47:c5:8e:b6:
ad:5c:8b:7d:e9:0a:c2:b2:d4:cf:99:88:88:b4:f2:a0:91:36:
0e:4b:d7:0b:a3:dd:16:07:3b:f6:e9:46:a3:8e:09:6e:d3:ab:
4a:90:43:53:31:4e:ba:ff:35:e0:34:d3:9a:09:41:0c:3a:36:
8c:0e:2a:6d:62:05:b7:60:77:75:96:4d:47:af:df:3f:4c:62:
95:b1:8f:8d:77:fd:6e:c6:7b:7e:d1:f5:7d:95:c9:24:57:93:
c7:f6:30:0a:55:0d:aa:1c:1d:4b:a9:62:c2:de:f6:d5:8f:1c:
36:1d:30:ae:94:e3:8c:9a:3e:ac:df:20:4a:e7:41:7f:55:7c:
14:d2:df:ce:d2:47:5c:6b:66:40:db:48:89:79:9f:40:2a:6b:
85:7f:93:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:45 2026 by rpki-client