Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: OjZjCKbXsaCwA2cw5/aHdWRBaq7FWlvtoX+0cRng8DE=
Subject key identifier: 39:D5:EC:ED:FA:1B:12:DD:64:FF:F0:82:32:D3:4D:68:58:CC:D9:73
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 019FA7F4754EE9C58E4A073F66D3C6BA7C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 09:00:43 +0000
Manifest this update: Tue 28 Jul 2026 09:00:43 +0000
Manifest next update: Wed 29 Jul 2026 09:00:43 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: 8mijR9jDNbVkzNEaW5ORscU5OmMPl9px9+0c22GPHSo=)
2: PLcdq8HBbATb33TrLOZuRDuXEVQ.roa (hash: XGsrxoZcwiWsioFa6/X1psR1kn5m17Bl9f4lBLZE5dk=)
3: yYbe2iJW7P_sCDhFY34_L0RrDto.roa (hash: a8JSg8aR8AsTXy0JLCDrOWelsw6IkJ4MgTxTFuy83io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:75:4e:e9:c5:8e:4a:07:3f:66:d3:c6:ba:7c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Jul 28 09:00:43 2026 GMT
Not After : Jul 29 09:00:43 2026 GMT
Subject: CN=39d5ecedfa1b12dd64fff08232d34d6858ccd973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:1a:45:f9:92:ad:d6:38:9c:97:32:19:76:
8a:fc:11:81:42:db:ca:2f:49:d2:8f:9c:20:fb:d6:
93:99:42:99:86:ac:dd:e5:6d:24:1c:89:2a:fc:98:
a0:f0:22:b1:4f:79:de:87:96:91:73:61:58:9d:3e:
5b:1f:2d:6b:4c:bd:11:cc:d0:37:93:e6:7d:47:1a:
39:0b:20:61:42:7b:cd:a5:e4:37:67:c2:cf:f7:28:
4b:2b:ca:a6:35:cc:0c:86:e1:55:eb:1f:e3:70:9a:
81:96:05:94:c3:df:82:26:a3:a1:6d:5d:3c:8d:2c:
73:f4:a7:fa:79:2b:3b:21:4f:d9:8b:1e:64:98:fc:
ef:9e:88:92:3e:7f:c9:23:eb:58:90:37:bf:59:9c:
43:fa:f7:dc:53:45:7c:fb:40:47:7a:0b:68:cb:4a:
64:5c:0d:c9:2e:0e:31:63:8c:bc:c0:48:29:e1:58:
8d:29:2c:c6:53:7f:50:25:17:01:88:51:15:ca:52:
5b:a0:44:86:ee:e2:33:d6:c0:8d:47:5f:d5:5b:84:
ae:f4:64:e1:f1:f4:50:95:1a:da:93:ea:38:3c:c6:
8e:b4:06:3d:db:51:f6:3d:0e:cc:64:aa:b7:c6:0c:
81:1d:39:da:96:56:3c:0c:21:a0:10:94:5e:03:cb:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D5:EC:ED:FA:1B:12:DD:64:FF:F0:82:32:D3:4D:68:58:CC:D9:73
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:88:18:88:96:f6:4c:41:21:7f:b5:1d:30:6b:03:7d:6b:aa:
7a:04:1a:ba:b0:fb:c5:0b:04:c5:ca:9f:1f:49:5a:2a:28:d4:
ba:05:d0:ed:1c:d2:2d:2e:df:6f:8d:af:d9:65:11:9c:c7:d7:
04:eb:82:62:22:91:e2:6e:fa:6f:af:d5:ee:ab:b0:01:3e:ba:
1b:31:e8:e1:03:6e:bc:67:f8:4d:7e:74:e9:40:2b:61:1a:ff:
9e:fc:5d:5b:18:2d:a8:78:50:93:92:2c:93:e8:b8:59:ee:7b:
3f:c6:46:42:be:7c:7f:10:bb:67:d2:02:9f:42:71:85:76:e5:
5b:d4:fb:d8:1a:bf:74:8d:6a:c1:a9:95:28:ec:3b:4a:38:c5:
ec:69:e3:25:e7:ac:fc:0c:88:90:c3:59:01:65:7f:c8:80:5d:
ab:bb:d2:07:53:8c:34:61:15:89:a4:6b:96:bd:6c:6e:93:c8:
20:39:6d:71:6e:9e:e1:48:d2:a2:94:84:e5:0a:30:6a:d4:9e:
69:e0:4a:c9:83:21:bd:68:50:e3:76:35:a3:3e:a1:7d:2d:e6:
93:fd:09:f8:b3:60:39:91:3c:7a:62:87:88:8b:d0:71:03:5c:
da:49:e8:33:35:a4:47:54:7b:37:cb:ed:5c:9a:70:a8:84:4b:
52:19:70:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:57 2026 by rpki-client