Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: Wn/qz3/s7yD0V9i20Rggtn0xR2bXwampO8l3U0AruAc=
Subject key identifier: 21:7D:7D:83:AB:2E:4D:D8:B7:8F:73:74:D2:39:05:CE:A8:D0:73:38
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019FA86214DA2A1A1790A5AEB1F34DCD24A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 11:00:27 +0000
Manifest this update: Tue 28 Jul 2026 11:00:27 +0000
Manifest next update: Wed 29 Jul 2026 11:00:27 +0000
Files and hashes: 1: 1wC70OGBB84YZ8LzzI7GRE1FXLw.roa (hash: 61O42HPTbjFtxU4oF7cNiKUH0sHQufjgX2XI1LEtyCM=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: YXwqeXEUS9hcDbz3LkkYZwHI7kh/2XeQIh5jChhrQtg=)
3: YVZ-GH3S7Iq0JxeBAHpFVD2_Lx4.roa (hash: kM6UtuYisVsArbzf8eESDr1kRHymSG53rA/gBdAULqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:14:da:2a:1a:17:90:a5:ae:b1:f3:4d:cd:24:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Jul 28 11:00:27 2026 GMT
Not After : Jul 29 11:00:27 2026 GMT
Subject: CN=217d7d83ab2e4dd8b78f7374d23905cea8d07338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:1d:cc:5e:77:41:fe:62:6a:6e:b2:6c:dd:
cd:bb:46:50:6c:1b:f2:ab:85:d9:c9:03:54:c9:81:
0f:8a:eb:d6:d3:33:65:66:fe:59:9a:db:b0:f2:b2:
f3:83:79:b0:f2:56:05:ad:16:01:f3:aa:68:74:e1:
0e:24:f8:05:93:76:e3:b5:b5:0b:8d:32:16:cd:fc:
7c:48:e2:be:e8:d4:55:de:5e:59:67:2f:2f:b4:b7:
b1:15:41:f4:5a:e0:8e:be:60:65:c5:0f:f1:8a:f5:
4a:35:38:29:32:18:71:43:59:27:92:0e:f7:e0:82:
b4:99:af:a0:12:2a:c5:fc:6e:c8:8d:e7:fe:d0:45:
61:18:b7:b3:f3:ce:56:c3:b1:a0:89:5d:4f:bc:ad:
c7:49:22:df:b1:b3:4c:54:85:04:03:50:5b:67:ac:
09:e7:56:dc:cf:19:29:11:bf:5b:3c:cf:04:36:27:
54:0b:07:f3:89:78:7e:ed:ad:0e:2b:22:63:26:da:
bc:58:b6:df:a8:94:1c:76:a8:28:78:a0:cf:cb:b9:
e0:21:84:d2:68:26:d9:60:d6:02:48:77:ad:62:4c:
cd:2c:84:1d:bc:68:35:48:75:05:33:7d:19:62:70:
5d:90:cb:d9:e2:e9:59:ff:01:01:80:9c:c0:c2:eb:
47:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7D:7D:83:AB:2E:4D:D8:B7:8F:73:74:D2:39:05:CE:A8:D0:73:38
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f1:1d:92:9f:b3:d5:33:d9:c2:fe:70:81:47:c7:d7:c2:71:
35:8b:0e:24:4f:7f:c1:61:ab:9a:e0:30:80:19:5e:0d:5c:78:
93:03:2d:e8:12:85:ef:b4:81:c8:46:e5:80:34:0b:cd:0d:bf:
87:36:0e:1b:32:03:84:34:b4:c8:f2:a0:64:b4:a4:e8:bb:9d:
04:75:14:be:0b:60:8d:7d:af:19:d5:77:ea:80:66:b0:0b:b8:
ab:15:7e:15:b8:7e:03:3d:2a:a6:f5:cd:dd:86:74:b5:31:cb:
e3:0e:2f:ba:04:df:7c:8c:77:3a:ed:78:da:09:13:37:fb:ff:
63:cd:27:8d:23:bd:d2:84:7a:e7:a2:37:1c:40:45:5f:5b:19:
25:2c:1e:17:a7:2f:d8:06:d2:5c:27:d1:fe:2a:69:b3:e3:64:
45:5d:23:35:c9:38:1d:2c:7d:b3:67:17:25:18:a6:54:ff:21:
c1:74:64:06:77:78:88:0b:eb:59:41:86:ea:d9:b1:ee:28:e3:
0c:c4:f4:5e:67:81:cf:29:dc:a9:b1:42:08:4d:28:c1:0c:92:
5e:3b:5b:38:b5:ad:e9:29:91:a4:39:c2:c1:f6:a7:fd:fb:f7:
7e:0f:96:26:1c:d2:a7:47:d6:43:7b:9e:ce:63:6a:c5:dd:04:
6e:2e:9b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:59 2026 by rpki-client