Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: OOXcQRFm+eFB53qPC81XHQmIVOw+ZE/hXj2iDtJC/yw=
Subject key identifier: F9:E0:BB:0F:6D:09:F3:12:54:0F:5E:C6:38:BB:FB:A4:7B:09:97:6F
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 019F82D514B618FFEBD61B51354D40FF3928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 0828
Signing time: Tue 21 Jul 2026 04:00:30 +0000
Manifest this update: Tue 21 Jul 2026 04:00:30 +0000
Manifest next update: Wed 22 Jul 2026 04:00:30 +0000
Files and hashes: 1: 6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa (hash: H1Tpf8B6yk+21S4AcVHmhmY0uxxPu+V39L+M+Ee8RSU=)
2: da64birjCL1XOPzp_ziknWIOF3Y.roa (hash: QMnviuNiCANn1NxPMK2JmFlgecXmL0gQbTXvBPWsqD4=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: GiuedOmWpV76t4lIox+V7D18uKeqGOZQSpW+ZTpNVTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:d5:14:b6:18:ff:eb:d6:1b:51:35:4d:40:ff:39:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Jul 21 04:00:30 2026 GMT
Not After : Jul 22 04:00:30 2026 GMT
Subject: CN=f9e0bb0f6d09f312540f5ec638bbfba47b09976f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:9e:14:40:e8:ab:cc:87:54:c0:64:56:8e:
58:bf:f9:bd:b4:b3:73:c4:0a:4c:9d:50:ff:b5:0a:
32:f4:15:76:b5:12:38:af:aa:d7:71:1a:84:7d:48:
7d:b4:1f:73:62:ea:14:c4:57:73:ae:b6:2f:4b:0d:
56:29:18:3a:24:eb:75:44:c1:90:77:aa:3d:9e:ac:
ff:ec:a9:41:4c:cf:47:8c:06:2a:1a:48:5e:84:90:
c5:6e:f9:f7:d3:38:b3:68:cc:6f:1c:e6:f2:ac:50:
bf:81:bd:75:9c:74:a7:99:48:41:75:cf:61:d3:41:
68:e0:07:3c:43:36:77:2e:22:af:cb:18:45:c5:0b:
ac:fb:7f:0d:7d:d4:c8:9c:2f:ab:8b:6b:aa:47:e5:
ff:df:8a:43:d9:e1:08:19:36:94:9b:2d:e9:11:24:
6e:21:91:86:5e:ba:39:78:59:09:b9:93:3a:52:03:
00:87:36:10:be:ea:50:bc:9a:ac:20:9e:ee:06:46:
e0:5c:78:0e:5a:d9:5e:8a:82:8b:20:1f:34:ca:49:
28:61:58:86:82:4e:3a:68:b6:fd:3b:0a:5c:81:b7:
86:b2:7a:e3:51:bc:2e:a6:30:fb:07:e8:00:42:94:
ce:25:2e:6c:68:8c:f1:42:b8:21:a7:1c:a3:0f:bf:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E0:BB:0F:6D:09:F3:12:54:0F:5E:C6:38:BB:FB:A4:7B:09:97:6F
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1b:f1:c5:58:51:39:ce:32:4c:30:8b:7f:86:04:42:cd:19:
5a:07:7d:45:da:99:88:df:4a:de:70:fb:9a:b2:ab:4c:a9:af:
32:06:19:4d:12:32:4c:c6:b1:b7:fb:63:a1:7a:39:89:4f:d5:
53:cd:84:77:94:01:77:b0:59:f1:eb:b0:59:c0:3c:1b:e4:47:
0a:d4:46:3f:37:98:ca:a5:70:53:83:d7:6b:12:81:73:a3:c3:
2b:69:8b:ca:08:22:97:8a:51:ea:01:2e:f7:7b:02:74:a8:47:
be:50:4e:2f:ef:ac:df:2b:08:f3:25:21:12:d0:b8:87:ca:6d:
33:3a:d7:9f:37:d9:1a:3b:ff:56:3e:20:66:f7:ea:76:e4:c8:
33:6c:9b:75:e7:f9:d9:72:d3:06:b7:63:f0:53:56:eb:58:22:
d2:68:57:80:50:f3:a9:aa:4f:ea:2e:70:f1:ae:3d:0e:74:d0:
78:47:9e:79:da:7c:6b:ab:cc:bf:d3:77:7e:81:cb:c3:83:8e:
84:e5:2b:13:ce:8e:b0:8e:00:2a:32:75:3b:75:f2:94:3a:0b:
50:f5:bf:bf:47:d7:cc:0a:1d:3a:3b:b0:7f:62:94:48:8e:a6:
e1:52:bb:9b:15:b4:6e:a2:43:f6:65:41:ea:a2:39:d8:95:4a:
a5:ce:d1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:56:55 2026 by rpki-client