Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: ytvMpMQ+8rnr+b1T+BeiRZi2GZfbgTkVEfQ6RXQ/Xm8=
Subject key identifier: 80:C4:61:9E:CC:E9:32:C6:10:79:69:CD:AE:B0:A3:A6:94:78:57:DC
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 019FA93DC71C1DC5FA3835E3B1EFDF4C7EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 12C8
Signing time: Tue 28 Jul 2026 15:00:25 +0000
Manifest this update: Tue 28 Jul 2026 15:00:25 +0000
Manifest next update: Wed 29 Jul 2026 15:00:25 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: lcY+NExEU+9fhn5ZjEvebfgGXsc1OLId+1CX/bew1cg=)
2: VK5J5QXmsEfKr-yeuBSA7pgMRS0.roa (hash: QEOQEZoGmfNdE7eYFQFsPYIivVEyHZdR3wVt3CbFPeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:c7:1c:1d:c5:fa:38:35:e3:b1:ef:df:4c:7e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Jul 28 15:00:25 2026 GMT
Not After : Jul 29 15:00:25 2026 GMT
Subject: CN=80c4619ecce932c6107969cdaeb0a3a6947857dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:8f:1a:a3:83:2d:5e:d1:c4:ba:80:39:e1:
f5:89:1a:a9:c2:6a:a3:38:83:43:12:f3:bf:62:d8:
16:63:44:c7:37:58:ed:b0:a5:72:85:5a:b7:22:43:
7d:36:7e:41:b5:c6:56:93:5f:73:25:b7:26:43:5c:
df:6f:ce:b5:db:e4:ff:b5:c4:3a:eb:5b:85:83:87:
90:0c:b7:2b:45:d5:6b:35:ac:52:6a:9f:2d:57:9d:
65:a2:e2:fc:1c:65:7d:d0:9d:63:49:d3:34:74:f7:
65:91:f9:d3:6a:98:ad:1a:f3:17:39:c3:96:c4:4b:
de:cd:da:55:48:ec:35:7a:2a:f7:a7:ab:5c:1e:a5:
21:9b:3b:1d:6b:8d:d4:4a:01:65:e6:fb:04:24:4b:
e3:7a:7c:83:44:c3:c9:42:7f:c9:d6:7b:c8:8f:43:
71:ca:e4:58:a0:32:49:be:c8:7e:38:70:ec:20:87:
45:2a:63:99:e5:4b:89:51:a6:2e:14:1a:3d:63:96:
8f:df:ac:68:a9:44:c1:06:7f:69:c0:c0:b0:0c:f7:
e9:9d:72:17:a9:75:62:d5:79:7e:71:b4:34:0e:ac:
d6:b0:b9:77:21:e4:83:b9:08:d6:d1:3b:fe:1d:7b:
cc:ba:fe:df:a1:fc:1a:04:58:08:6f:18:22:19:87:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C4:61:9E:CC:E9:32:C6:10:79:69:CD:AE:B0:A3:A6:94:78:57:DC
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d6:8d:6c:64:f6:f5:bd:53:0d:68:1d:72:0b:d2:aa:05:d8:
9b:aa:19:fc:f4:55:32:b0:6e:ad:ed:a3:50:18:46:2a:8f:f0:
09:43:6b:ab:72:9d:dc:f5:4c:ef:95:8a:36:42:67:3e:80:0d:
7c:09:46:58:de:96:4b:8a:31:30:41:3f:a6:5c:69:f5:86:1c:
d3:4a:11:bc:ea:04:a1:8f:6b:c0:46:f4:df:8a:c7:35:b8:59:
35:24:8f:ff:a5:54:ae:84:c0:f3:fa:2f:4d:b1:d6:87:49:22:
81:49:68:7f:c6:98:3c:07:43:24:0a:ff:22:07:84:b2:db:d8:
81:8c:22:5f:26:33:36:a8:40:15:92:bd:a7:4f:14:76:f3:d9:
cd:d6:da:34:f6:0b:de:74:b1:77:8b:ae:38:ef:22:18:d5:d6:
94:f7:fb:77:86:01:70:4b:9c:55:55:05:07:82:a0:54:72:41:
2b:42:47:5b:0d:e9:32:fa:8c:33:b0:6b:f0:9c:ac:eb:c8:b5:
f8:bc:7e:12:c2:59:fa:d6:f5:0c:b5:19:8c:18:96:93:d5:37:
42:06:e6:9a:b4:0e:9d:8c:36:c5:17:19:3d:b8:60:ba:8f:a7:
77:ae:25:df:cb:8d:01:35:28:c8:6a:80:34:c7:55:89:8f:ee:
ba:7b:11:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:48 2026 by rpki-client