Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
File: 8yRYHkNogl1eE_TyoNb_jkhMleY.mft (raw, json)
Hash identifier: u37cWNTJkV97C5w/jtaxTKDLW1iW46r7vqSKav5NLes=
Subject key identifier: 67:19:94:41:5A:75:0D:07:DA:4D:D7:8F:EF:89:96:15:FC:50:A0:77
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019FA9079F09030212F67934C6B691FB0D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
Manifest number: 0498
Signing time: Tue 28 Jul 2026 14:01:16 +0000
Manifest this update: Tue 28 Jul 2026 14:01:16 +0000
Manifest next update: Wed 29 Jul 2026 14:01:16 +0000
Files and hashes: 1: 8yRYHkNogl1eE_TyoNb_jkhMleY.crl (hash: YA3M1EbfxDmBemgBJ3LSutA0JCo4HW8OaINkcFr+Taw=)
2: _w-VZ8tJf-IJZUAFtjZixIGeh5w.roa (hash: gcMpibnYTXN6TauNcnE1KrGZDPQoj6jVbMfXyvOP7XQ=)
3: wA-2Mk811HDwWzMAHXezWgU-H08.asa (hash: wodJw0HR+VfAMXEdZgwrxh8y4xa/uBa7tq0A0AfsUPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:9f:09:03:02:12:f6:79:34:c6:b6:91:fb:0d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Jul 28 14:01:16 2026 GMT
Not After : Jul 29 14:01:16 2026 GMT
Subject: CN=671994415a750d07da4dd78fef899615fc50a077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:b3:1c:b1:1e:d0:ff:10:f7:23:3a:81:be:
38:96:22:e3:aa:dc:89:ed:06:fe:8b:90:1f:11:29:
5d:85:64:8b:b5:6c:a8:96:6c:1f:a9:41:b8:67:84:
f5:ac:db:6d:dc:3c:73:1b:6f:e3:05:63:17:46:a3:
4c:ed:58:f8:24:78:8b:de:55:0c:07:f8:fb:bd:9c:
75:63:6a:9c:d7:6c:61:e1:31:5e:89:c9:54:b4:30:
19:7c:71:8d:34:a5:26:f0:ad:2d:6f:21:db:ca:99:
fd:b8:19:0c:8b:65:71:29:d0:70:66:be:b2:6f:82:
e6:96:a5:67:76:af:4d:76:a7:c9:54:27:a4:f9:db:
2e:c6:4b:c6:81:d5:ce:c5:ce:c5:2a:13:43:20:63:
b3:aa:5d:8e:96:10:29:89:da:63:05:25:3c:83:77:
a1:b7:f0:92:6e:67:35:e1:cf:06:25:00:3f:e9:f9:
2d:7c:77:5d:3f:e5:41:b0:de:16:07:8d:42:bf:8a:
a5:e8:69:7c:86:9e:c6:14:e4:5f:51:fb:95:ff:7d:
98:aa:d0:57:80:d3:8c:ef:52:45:d6:5b:0d:90:b6:
a1:28:e0:a0:47:8f:52:7f:8c:ce:ee:ec:a0:d2:39:
9d:13:3b:25:69:57:75:93:96:fc:14:42:7d:bd:d4:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:19:94:41:5A:75:0D:07:DA:4D:D7:8F:EF:89:96:15:FC:50:A0:77
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7c:ee:2e:ee:d7:62:33:95:e1:8f:22:73:a5:b6:66:71:62:
13:25:a3:4e:da:28:ce:e7:39:84:48:61:15:37:94:98:b0:e8:
96:38:80:91:25:e7:67:88:44:3d:c0:29:b3:54:ec:2a:2c:51:
6d:cc:f6:56:e7:f3:72:26:3d:89:45:8e:ab:bc:cb:ef:36:f4:
6d:9f:49:39:4e:db:58:04:d1:7c:e2:12:0b:9f:f2:13:cd:9b:
97:d4:8d:bc:57:d8:99:a8:d8:01:30:70:ec:33:c3:7e:9e:e8:
49:e2:d4:43:a3:c4:83:f3:ee:d6:2c:42:d3:18:14:ab:47:3c:
61:72:36:1e:d3:0b:bf:99:a8:95:09:c1:8c:0d:58:b9:c1:1e:
cc:00:0a:c5:c4:93:14:a4:b0:22:f2:75:3c:bc:86:6b:1d:a1:
ef:1d:02:b8:6c:e4:52:5b:7f:68:c7:15:3b:f2:3c:f7:6c:5f:
05:4b:9f:a1:be:aa:e2:ef:c9:fa:b6:6f:cb:ad:c2:48:eb:5b:
c6:1d:e4:6f:65:61:08:09:76:3e:ad:9a:50:ec:34:ef:62:b8:
be:b7:07:93:1f:eb:e2:67:fa:85:4e:4a:43:68:64:09:54:c4:
fe:05:b5:a4:77:0a:b6:99:15:ff:28:d6:5d:ac:71:55:50:6f:
bd:b3:b4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:15 2026 by rpki-client