Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json)
Hash identifier: K79FVlW7A/2EZwO73+g3gF+sVN1aGEmshk9LFOjyMCU=
Subject key identifier: 6E:87:41:41:C5:CC:87:54:E0:74:4A:C6:97:13:B9:B6:E3:5E:C0:60
Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424
Certificate serial: 019FADBF62935E1E22ADEB6F0E467CBAEE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
Manifest number: 032B
Signing time: Wed 29 Jul 2026 12:00:28 +0000
Manifest this update: Wed 29 Jul 2026 12:00:28 +0000
Manifest next update: Thu 30 Jul 2026 12:00:28 +0000
Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: Obp2InSPMqsQil6BvBfRpzOAy+nQIbxbW/OpvyiWLBY=)
2: LS1I0LR07OhJxEEUNJqhn1-nNT0.roa (hash: 05VWudDvTZxRagJ/ZMpYgYcO8jy0CMReHlty6IA1+UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:62:93:5e:1e:22:ad:eb:6f:0e:46:7c:ba:ee:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424
Validity
Not Before: Jul 29 12:00:28 2026 GMT
Not After : Jul 30 12:00:28 2026 GMT
Subject: CN=6e874141c5cc8754e0744ac69713b9b6e35ec060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:19:90:71:78:85:e1:ec:9c:d3:f7:af:69:
60:06:e0:0c:c4:60:97:80:85:73:5b:b2:80:40:81:
b9:b1:d3:f1:bd:eb:af:7e:b9:3a:d0:27:3a:f1:97:
fe:52:ed:1f:ee:9e:36:6a:9f:05:b9:ff:1e:65:7a:
02:5e:01:11:29:62:4a:80:bf:4a:f5:60:98:ce:9f:
a7:6a:f3:3e:c2:c4:d6:c4:27:79:5f:ba:59:11:df:
42:a3:0d:b9:ed:77:f6:c7:00:58:5e:a3:85:8d:23:
d6:8b:2c:77:e4:39:55:3b:24:7d:1a:e0:12:c1:71:
b2:6e:b3:af:ad:61:18:0e:97:d2:2c:52:53:da:5f:
01:a0:74:1f:91:ac:ac:a1:e7:9b:2f:f3:64:f6:1c:
f4:94:15:57:35:a6:57:2c:66:8f:b5:00:bf:c8:c7:
18:1b:3c:3c:cc:c8:c9:db:87:e9:2e:96:86:ce:4d:
75:ca:75:0f:0c:54:77:08:8d:d3:91:fa:2c:72:36:
fe:90:fa:02:75:f8:4a:54:9b:d6:ef:48:db:17:07:
63:d4:7d:63:cf:31:cb:c2:64:b1:6e:f5:c9:13:3a:
fd:74:d9:dd:61:a7:0b:25:df:16:d2:7d:95:a7:c7:
32:59:fd:52:37:aa:d0:9c:0b:5b:16:a1:06:b4:0b:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:87:41:41:C5:CC:87:54:E0:74:4A:C6:97:13:B9:B6:E3:5E:C0:60
X509v3 Authority Key Identifier:
keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4e:dc:0c:c9:65:c6:96:b9:9d:10:9d:93:e2:37:59:29:c7:
53:49:d6:e5:9b:0b:70:e4:6f:7f:ad:ad:67:c2:8e:a7:37:a5:
1b:76:20:6e:e6:d9:ad:0c:7c:15:3f:26:13:3a:b7:44:65:fd:
86:b1:11:27:3d:a6:f9:4b:f2:39:23:39:ca:fb:fd:79:5a:f8:
55:6e:e0:22:84:f4:0f:29:40:39:23:ea:2a:49:6a:77:d5:00:
3d:62:41:b1:f0:14:30:51:cd:b6:82:0a:21:d3:8d:00:26:34:
2b:60:e9:97:f4:13:e2:9d:57:8e:80:22:b6:44:cf:f9:f1:2f:
7f:e7:54:50:77:f6:90:17:d9:fd:f5:2f:2d:8c:47:06:e7:6e:
4e:47:99:e1:40:19:09:85:20:ea:90:39:ce:f1:65:32:ce:28:
77:44:93:e8:dc:32:84:ba:dc:36:3c:85:77:95:e8:cd:0f:14:
0c:8d:e0:1b:56:f7:44:ea:d9:6f:96:f4:dc:47:6b:18:41:85:
73:33:35:09:49:ca:d3:4f:42:39:e6:9d:0e:11:d2:ea:7d:0f:
47:b1:5c:27:28:06:6b:83:59:a3:0d:20:0d:e2:d9:c8:dc:8c:
bf:6f:ed:10:b2:1a:be:68:64:41:93:85:99:c7:74:94:7b:d9:
92:bd:56:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:13:43 2026 by rpki-client