Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: liIt7+V60BNLmi4BAxw2vjomBDG0SuKJSLe7Mmahv1s=
Subject key identifier: 30:25:41:07:42:F2:68:0F:22:11:2D:EC:33:AB:40:85:48:F5:DA:23
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 019FAB2C31CF7AB71E5EF7D88916EB842FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 1298
Signing time: Wed 29 Jul 2026 00:00:27 +0000
Manifest this update: Wed 29 Jul 2026 00:00:27 +0000
Manifest next update: Thu 30 Jul 2026 00:00:27 +0000
Files and hashes: 1: 7vuFGqZCxLzD91LmtcVrwRVipP0.roa (hash: exBwARjGLtxZJRWm9krMbKUblEEFQ4G0buGpMyQ+bjU=)
2: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: ANMlMiK9YCrfhgQouoaYVdUX9iPnwFedoqIrja6lBUQ=)
3: achjIHDKww_TLSJu-NnrKxU3--A.roa (hash: GHcbBAVqUMC4lX8HAJJpjhpVUyf1FlS4/jLemAj83YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:31:cf:7a:b7:1e:5e:f7:d8:89:16:eb:84:2f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Jul 29 00:00:27 2026 GMT
Not After : Jul 30 00:00:27 2026 GMT
Subject: CN=3025410742f2680f22112dec33ab408548f5da23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:fc:86:76:d5:7b:80:e1:7a:45:f8:b0:d0:
9a:a0:39:f0:da:a3:49:04:eb:51:f6:b5:07:66:49:
ba:c5:3f:90:d3:14:9e:8f:a2:c8:7a:43:9b:c2:a7:
89:79:47:88:0b:13:83:d6:78:59:a1:d0:9d:d3:0c:
67:2d:96:33:6d:49:8a:95:03:56:90:12:e3:27:f5:
93:39:f8:53:68:91:3d:2b:5c:16:2e:2e:9e:75:9c:
e2:ca:15:df:9d:94:fc:d1:a0:fb:aa:69:60:81:34:
d9:3d:d8:65:50:df:c6:ce:15:76:83:b6:4f:df:a4:
a5:a4:bb:77:bf:04:da:37:4e:8b:75:ed:16:13:60:
1f:2e:f7:0d:32:1d:71:a3:a6:f4:db:cf:e1:57:42:
bd:f3:61:73:33:8f:f3:38:6f:de:f4:4b:0b:0e:b7:
db:0e:51:fc:6f:ea:e5:ae:2b:21:47:6f:89:06:39:
54:ef:04:56:57:6b:9b:07:cb:d6:cc:d1:e3:77:e1:
50:fc:15:ef:65:a7:20:8c:6a:1b:81:c7:50:74:e7:
ef:25:0c:03:44:54:82:57:07:c1:44:77:9f:df:4c:
41:60:1c:ff:04:3d:cd:dd:14:6d:d0:31:21:0f:a2:
6d:19:0b:c1:e7:21:fc:5e:a3:b6:76:ea:01:fa:21:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:25:41:07:42:F2:68:0F:22:11:2D:EC:33:AB:40:85:48:F5:DA:23
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8d:9b:1c:16:2b:45:1f:42:a1:07:94:33:bf:93:75:37:8a:
93:31:77:69:57:59:1a:d7:e1:8d:52:d2:12:fa:06:1e:ea:68:
da:51:9a:d6:b7:82:4a:87:38:22:ff:53:1e:48:89:2c:cd:2f:
d1:70:90:5f:3f:26:48:59:23:d5:e9:30:24:a0:48:91:8c:eb:
39:aa:e3:bd:ad:36:71:fc:61:91:bf:51:02:c4:33:41:41:86:
34:2a:4b:2b:2c:0b:12:44:f5:9a:2e:0c:93:4b:4b:b6:32:9f:
4f:34:8d:69:ac:db:52:a2:d0:3b:02:d3:1d:5c:06:d1:60:51:
1b:ec:29:9d:8d:d5:1a:cc:49:41:ed:fd:07:36:f0:4e:77:7b:
32:ec:08:62:9f:b9:14:f5:f1:dd:55:97:68:e3:8a:a2:57:a7:
09:72:13:c9:80:58:a5:24:1c:9c:98:9b:ba:9d:6c:cd:09:6c:
fc:a4:e4:84:e7:3f:f3:bb:54:c4:94:99:3b:e3:c9:fc:73:04:
46:44:3b:b4:b3:00:70:e6:4b:2a:0e:8f:36:33:8e:91:41:25:
2d:10:77:dd:48:85:54:01:ce:9d:b0:c1:ba:e9:2c:40:17:c0:
a7:e1:0b:5c:67:6b:e7:6c:a1:91:cc:b2:93:88:cd:a7:88:a1:
c8:f0:86:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:09 2026 by rpki-client