Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: y+Bnsz9Dap1ARhnQnzrcT1dvJ+K6DoQrAJNNIDTe6/0=
Subject key identifier: 21:CC:7D:31:75:D9:56:6B:CB:AB:E3:DA:E6:25:CE:8F:D5:21:E6:B3
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 019FA82B1650B950525FAD570397B0CB030B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 1513
Signing time: Tue 28 Jul 2026 10:00:23 +0000
Manifest this update: Tue 28 Jul 2026 10:00:23 +0000
Manifest next update: Wed 29 Jul 2026 10:00:23 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: gZ5cpG7UxsLAuxce2bIpwVKIrYj4SFqlncUFcN6EBFU=)
2: EMaV_sDtEC3ONnRr_ZacRZkjYek.roa (hash: uEhrTJgtxikjiJZwpMeYSv1aaXx9clVq4b4CFPBvQgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:16:50:b9:50:52:5f:ad:57:03:97:b0:cb:03:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Jul 28 10:00:23 2026 GMT
Not After : Jul 29 10:00:23 2026 GMT
Subject: CN=21cc7d3175d9566bcbabe3dae625ce8fd521e6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9c:f8:0a:eb:c7:94:21:a2:0a:a0:9e:a3:c8:
95:28:ac:bb:27:67:d4:7f:a6:7e:42:7a:ec:56:7c:
34:5a:46:e7:fa:8b:97:7a:c6:fe:9c:00:97:b8:66:
37:f0:94:f9:34:f6:be:3e:a9:e4:47:b9:b9:97:1a:
2a:a9:f8:7e:c9:72:c1:64:85:8d:ca:ef:80:8a:6f:
58:2a:23:a5:21:86:24:1f:7e:54:75:11:01:37:0d:
19:69:d0:1a:6e:7e:bc:46:1b:73:92:9f:ea:58:70:
80:bd:50:b3:73:5b:09:7f:b8:8a:c0:86:a4:ae:93:
cf:7f:5d:9c:27:7e:90:05:46:06:d0:20:19:6e:e9:
01:40:38:d7:5e:38:14:43:df:5f:e5:73:70:12:aa:
a7:6e:b9:c0:85:c2:f8:e7:f6:6e:22:69:fb:21:a9:
f3:9e:b1:c8:26:90:64:00:77:78:e6:5f:f8:51:e6:
b9:fe:57:4a:e8:9b:34:38:d6:10:e4:47:ae:c9:71:
4b:4f:79:a6:fd:40:49:5f:d5:05:6d:e0:bb:af:dd:
5e:ae:f6:07:7c:55:80:a1:59:09:c2:a3:bb:30:40:
07:4c:c3:a8:01:44:69:a8:00:fc:67:01:27:46:0a:
6e:ef:3f:b1:db:f6:0c:12:ca:27:b5:c9:61:82:27:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CC:7D:31:75:D9:56:6B:CB:AB:E3:DA:E6:25:CE:8F:D5:21:E6:B3
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:19:6d:ee:a5:d9:32:e1:9c:f0:20:c3:0f:c8:31:9e:3b:d8:
4f:22:58:08:87:44:f8:f0:9a:45:7b:ff:be:93:74:75:8a:c7:
31:48:fe:1f:38:23:24:41:89:82:c6:8d:e9:d2:29:bd:dd:8a:
5b:27:07:8a:25:54:29:ad:f0:81:11:11:9b:da:4b:26:54:cf:
5a:98:ae:96:c2:aa:10:d0:d7:3d:78:02:fd:56:fc:0f:57:94:
24:d4:14:97:c2:71:af:7b:71:91:81:c3:e6:38:71:e7:20:1e:
d7:13:7c:39:d5:29:f9:ec:27:97:9d:d2:fd:6e:2b:0d:2e:c5:
11:40:18:ec:0d:82:25:8d:3b:87:0f:e3:47:7d:63:0e:c5:c2:
70:71:8d:fb:bf:b6:54:5a:78:29:8f:d8:40:0e:2e:a7:c4:39:
bd:79:0c:48:33:62:46:a3:7d:99:7e:95:16:f0:a4:f3:a7:d2:
a1:d1:57:54:02:ed:a7:0d:0d:ff:5d:0e:e9:c7:ee:5d:e0:a3:
dd:c6:70:3b:36:45:13:23:f6:d0:85:83:c4:c4:ef:22:8c:58:
c7:80:53:2b:35:6f:b8:25:ff:d3:0f:23:a3:4c:10:fd:3e:19:
8c:fd:ee:c5:3e:7a:2b:19:f2:d1:6d:bc:3c:a2:b0:e4:cd:17:
ee:f1:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:29 2026 by rpki-client