Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: N8bAW0erxEv3wSc4hUy/YCsegIGGfQ89Q9sfNa9vqLY=
Subject key identifier: 0A:6E:C2:CF:5E:15:E3:A5:B4:6D:49:AD:A3:FC:3F:50:11:9D:98:67
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 019F823043F9A7076C8361E27971E01495CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 16CF
Signing time: Tue 21 Jul 2026 01:00:28 +0000
Manifest this update: Tue 21 Jul 2026 01:00:28 +0000
Manifest next update: Wed 22 Jul 2026 01:00:28 +0000
Files and hashes: 1: 1-zgZS_oWFjeb_FUaP5rf7CIay9s.roa (hash: oe0GxzRMGYrpk5fK7HR9K3weYFmW/xstDWDPAgUmAy8=)
2: W79nBKhPAzEIedXVT5rNtMV1yOo.roa (hash: mixrNOg93KKzgb3tWB4Qt/opKcOsyCnIL17ZEqCbhik=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: g2dG6yymbkXCMdLnvJGa0GDTSpb+LvIgC3JE4C5rBY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:30:43:f9:a7:07:6c:83:61:e2:79:71:e0:14:95:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Jul 21 01:00:28 2026 GMT
Not After : Jul 22 01:00:28 2026 GMT
Subject: CN=0a6ec2cf5e15e3a5b46d49ada3fc3f50119d9867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:62:f3:d9:5b:df:29:b8:ba:eb:c2:73:37:
c1:a2:d6:71:a1:ee:17:0b:54:ae:e0:7d:6f:8c:be:
fb:a3:8f:43:67:e8:a5:6f:8b:d1:43:35:a4:88:fb:
0f:43:55:e3:3a:86:51:b7:9a:87:81:5f:7c:be:fb:
2e:f9:34:83:06:42:a8:b3:6f:7c:fe:ab:e8:50:24:
f9:9f:78:98:7f:fe:63:c4:fb:be:d8:d8:be:8d:61:
b8:4d:ee:17:68:9f:6a:76:47:2d:fc:29:69:33:9d:
ac:98:a9:fb:63:71:6a:95:fb:f6:59:4c:c9:07:9d:
fe:1a:b4:bd:44:86:18:30:93:33:bf:ab:cc:c3:fb:
96:66:b3:15:b3:67:aa:f0:09:b4:bd:43:07:ae:cb:
4e:e8:71:fc:5f:6d:5b:76:e8:e4:a3:e7:5e:0e:b5:
bf:27:8f:34:ae:4f:92:f5:29:48:e4:4e:f9:f3:49:
a1:7f:76:73:e9:5f:5c:25:f8:6f:54:fe:62:08:6c:
1a:b2:70:b1:4e:54:e0:75:ac:23:f7:10:03:d8:d5:
aa:6f:73:69:b2:d2:ab:12:0c:2e:c8:e0:5d:92:b1:
36:2a:8a:3b:10:23:33:d2:32:47:8b:c8:e0:eb:57:
49:c2:95:8c:90:d5:96:28:17:21:a4:26:52:83:9b:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6E:C2:CF:5E:15:E3:A5:B4:6D:49:AD:A3:FC:3F:50:11:9D:98:67
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:07:3e:99:53:53:08:59:49:22:f6:07:44:eb:78:3e:07:47:
e1:d6:51:bd:74:8b:1e:ff:d7:1c:bd:07:5e:fc:90:88:d6:8f:
f4:27:45:5c:38:d3:ca:4e:ac:19:36:a5:f0:ec:5a:ed:89:d2:
c4:47:e0:fc:39:45:9c:4a:4a:8e:ff:fd:ec:98:47:48:03:41:
f8:97:8a:5b:ad:20:25:d3:79:c7:77:f3:97:69:ec:04:b1:c3:
1e:00:68:07:19:7d:8b:2c:c2:40:15:68:fe:d4:2a:f9:5c:12:
f6:fc:a3:3a:62:04:b9:b9:78:df:ee:3f:01:cc:c3:95:b9:b7:
da:72:09:9f:4e:cb:3b:ed:41:76:c8:6c:ea:81:a8:15:dc:ad:
ef:d5:e7:0e:32:da:9e:9e:f3:93:0c:c1:77:ad:3f:38:ec:ec:
31:76:17:1e:63:1e:00:f7:f9:67:66:11:a9:7b:c0:2e:13:a9:
43:43:e5:a3:db:b3:b7:f1:ff:71:55:b2:d5:45:b6:3c:91:2b:
b7:a2:a3:d1:7d:93:01:6f:3a:ee:14:81:42:c1:1d:78:b9:3b:
cc:be:6b:4d:f4:56:36:45:93:38:5a:da:51:b9:9b:7d:12:05:
e4:16:5c:9b:38:cc:12:2c:b2:3e:d5:d9:c0:c0:7f:27:51:fd:
e1:09:e2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:59:08 2026 by rpki-client