Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
File: 8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json)
Hash identifier: KZFi5iTO1O/TDzdKMK94WIV8lG+gdc0dAcxOGMMBn4A=
Subject key identifier: 23:DA:94:2A:EC:11:F5:67:E9:A8:C1:FB:97:6E:DD:20:F5:8A:D4:19
Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
Certificate issuer: /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Certificate serial: 019FAA19AD5B056A103F9D0A39E3DC17E5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 19:00:37 +0000
Manifest this update: Tue 28 Jul 2026 19:00:37 +0000
Manifest next update: Wed 29 Jul 2026 19:00:37 +0000
Files and hashes: 1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: jNVShBW04XYRnMRyhWIiDXFvtm8H8G5ZLHOKHz6QxiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:ad:5b:05:6a:10:3f:9d:0a:39:e3:dc:17:e5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Validity
Not Before: Jul 28 19:00:37 2026 GMT
Not After : Jul 29 19:00:37 2026 GMT
Subject: CN=23da942aec11f567e9a8c1fb976edd20f58ad419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:be:e7:6f:8e:98:e9:05:ef:26:a8:19:3f:
fd:cb:75:8c:f1:bb:cf:7b:fa:15:95:c5:77:aa:9e:
cb:b1:ff:53:da:d0:44:ff:c8:24:0b:1b:df:0b:8b:
24:ed:9a:dd:a9:c2:e2:d5:b1:3b:a3:8a:f0:b8:d8:
75:21:98:0b:37:db:be:12:1d:34:1e:6f:df:b0:4d:
21:94:f1:af:11:52:45:57:99:92:5d:ec:b7:75:2f:
c3:46:b3:17:49:e3:c6:13:9a:f7:30:eb:70:a1:af:
f9:b6:0d:a4:58:b3:e2:11:a7:d1:82:55:05:aa:5d:
53:83:3d:e0:76:45:3c:86:bf:d2:08:57:19:88:52:
aa:04:8d:11:6f:04:7b:4d:da:3a:91:3b:b2:6c:c2:
f3:f5:a9:ba:92:d5:f2:b9:38:25:7e:f3:15:ab:17:
29:9b:85:40:80:78:b9:12:3a:ec:70:c6:f0:dd:e8:
3f:c8:66:9f:36:35:24:ec:0d:6e:eb:c7:e4:a0:b3:
00:f1:cb:62:b2:03:a4:ca:8c:11:1a:6d:4e:62:44:
20:8a:b3:1e:98:41:b9:bc:4f:e1:60:c0:28:da:e3:
e5:84:42:aa:75:92:3d:34:1e:9b:69:fa:8c:13:4e:
29:61:c4:33:52:0b:5d:18:0d:56:4e:95:99:5e:3d:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DA:94:2A:EC:11:F5:67:E9:A8:C1:FB:97:6E:DD:20:F5:8A:D4:19
X509v3 Authority Key Identifier:
keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fd:fb:57:6e:90:ea:82:9f:45:cc:6c:d7:ed:90:5f:24:7a:
97:f1:cd:b4:c9:b8:c0:5e:bb:1b:c4:ca:c0:bd:de:bc:9b:35:
5f:5e:97:1a:f7:ec:a1:e4:68:0b:2d:39:f3:1e:84:40:57:22:
c4:97:0b:84:53:10:ef:74:de:62:a9:ab:90:2c:9d:ae:8c:b3:
32:c2:a5:1f:58:f0:3b:59:53:de:c0:0c:c7:2f:0e:95:a0:6e:
75:da:6e:19:45:25:68:52:5f:bc:47:4a:98:17:27:94:c7:02:
2d:56:2e:e2:3e:8e:3f:0b:74:bb:87:17:7f:e4:94:7c:5b:f7:
ef:76:3e:e8:8a:09:d7:a5:43:08:1f:0a:5c:18:6f:c8:e4:ed:
78:d8:ff:e2:67:99:42:d3:20:98:1f:e9:d4:2c:20:8c:8e:d8:
0f:c5:0f:86:88:40:8e:99:5c:bb:30:48:9c:3d:13:b7:dc:c5:
cd:be:e4:e2:1b:35:0c:50:50:86:de:d1:2e:74:c6:86:15:ac:
df:ac:27:d5:98:85:a3:a3:45:62:0f:97:a8:e3:ea:ab:04:59:
31:d5:ab:bb:4a:f9:dd:6b:49:30:f4:f3:dc:4c:38:15:cc:d7:
8f:74:d3:3b:d1:57:f4:7b:63:f4:43:fd:1d:0c:56:8a:63:4d:
bf:27:f4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:21:16 2026 by rpki-client