Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: VJFZ8y2tUqyUHtr7/Y/pLSfKMVvvDTeoKourxiehPvM=
Subject key identifier: B4:77:05:64:3E:08:9A:FA:C0:1C:08:FF:64:B3:9D:CB:49:36:D9:30
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 019FA82BAA9F0F33325FA74CD75EE77E6046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 1082
Signing time: Tue 28 Jul 2026 10:01:01 +0000
Manifest this update: Tue 28 Jul 2026 10:01:01 +0000
Manifest next update: Wed 29 Jul 2026 10:01:01 +0000
Files and hashes: 1: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: WLLeqXrco0BmBFUUWzud0hpJg2MW+IxTat+lU/De+/s=)
2: RAC2EIsVMHG6hRns7HbMn17gGls.roa (hash: FF3H1038Rgf//9+NtLOprCe/ZirTllG7HflUAk9dINQ=)
3: nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa (hash: iN63qFqYR+Oirh/aAc/OhTjdpHDfVt7KEG3Iws+eD0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:aa:9f:0f:33:32:5f:a7:4c:d7:5e:e7:7e:60:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Jul 28 10:01:01 2026 GMT
Not After : Jul 29 10:01:01 2026 GMT
Subject: CN=b47705643e089afac01c08ff64b39dcb4936d930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:72:c4:14:cd:5a:cb:99:7c:eb:4c:a3:ee:
57:d7:8a:a3:a7:68:58:bc:a7:07:d7:53:54:b2:c6:
74:b0:45:c0:b8:31:ef:b7:87:29:51:af:ff:9c:8a:
ea:65:19:85:d3:4a:7c:d4:40:aa:66:fa:f3:6b:92:
b9:a0:66:db:80:94:fe:d1:83:79:a6:cc:f0:13:21:
67:51:b3:63:88:26:5b:f8:38:3a:93:e1:99:7f:4e:
5f:f8:5b:96:f8:ba:5a:2c:23:0b:6c:77:d8:2e:96:
56:8d:ba:ca:f3:59:d9:4d:18:07:77:36:da:7e:17:
6e:71:e2:ae:61:b2:b2:2f:22:45:ea:06:a5:f8:61:
fe:2a:f1:80:53:4c:84:d6:78:44:cb:78:cc:9c:f8:
95:8f:cd:0b:fe:ad:7d:7e:6a:8e:a1:5c:74:30:34:
56:ff:de:cd:12:21:a1:cd:9f:62:b1:b6:aa:c1:c5:
42:c6:f4:c3:23:3e:f6:92:3f:17:e1:10:9c:58:9d:
89:37:66:cc:43:14:20:03:d7:e6:a2:2f:e9:5f:cd:
ca:35:f2:51:5d:46:c5:6e:53:dd:09:25:28:63:9d:
a7:af:2f:18:a1:fc:bf:69:b5:8f:ff:a4:d6:82:b6:
a2:3b:e6:1b:89:ff:3b:94:14:83:56:e3:a5:b7:99:
13:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:77:05:64:3E:08:9A:FA:C0:1C:08:FF:64:B3:9D:CB:49:36:D9:30
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ac:a6:95:40:45:e2:02:51:48:fb:24:05:86:93:fc:20:39:
e3:b1:54:4e:30:c8:b8:3f:4d:28:b4:9b:47:62:be:c4:c0:93:
3b:24:0b:30:f6:66:b8:a9:df:d6:7d:99:6b:29:ee:ca:e6:b2:
3d:85:3f:35:e8:45:f4:25:83:e9:a4:48:6a:b3:3f:d4:3e:a6:
37:12:bd:07:48:67:7d:a6:93:7d:eb:63:89:d0:10:4e:99:20:
50:f7:c2:78:03:a0:da:76:f5:5c:3f:d5:46:9d:27:21:80:d0:
c9:2a:23:2a:57:d2:9b:da:34:5f:03:f1:6e:69:c5:47:e7:9c:
29:1b:74:49:78:fe:83:4b:b0:75:e4:7c:58:3c:07:b7:4e:dc:
f6:12:52:29:d7:59:82:8d:61:95:3f:f7:e4:6a:77:c8:a0:b8:
15:45:53:29:d8:79:9b:d3:bd:ff:d1:96:63:53:7d:6e:c1:ac:
dd:2f:ce:4d:a9:1c:31:78:8d:ec:c7:c0:81:e5:c4:6b:8b:41:
df:32:f1:c5:26:dc:08:ab:7c:ff:e8:e8:1b:0c:d2:fb:61:ff:
1d:7f:f0:13:9a:d5:8c:5c:95:0b:f5:a1:40:06:98:cc:6e:2a:
b1:24:eb:ca:a2:c4:19:de:98:ad:ea:4a:85:ec:5d:b1:96:6b:
5d:57:45:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:25 2026 by rpki-client