Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: RpyGIl/Zw9qrztvaHSkiK41TnPpRZZ5uo4HwtZSO0r4=
Subject key identifier: DF:D3:ED:FA:4A:08:58:A3:28:29:96:1C:AC:F6:EF:35:CA:F9:94:CF
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 019F867AFAC030B12302CB3325177BDCF19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0E1A
Signing time: Tue 21 Jul 2026 21:00:34 +0000
Manifest this update: Tue 21 Jul 2026 21:00:34 +0000
Manifest next update: Wed 22 Jul 2026 21:00:34 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: 0c2G3NX1YWiEwf0+TbnPocN2B6JvP9ftW/ySc8TCS1o=)
2: ke5BBmP9uJ5If3ItewQloGu8EQA.roa (hash: sg4mup0G5eaNuuse6GfgbbBnUv1YkDhld8yTzOiPKE4=)
3: wmiyGteEO918b1PMxNCpgfoVaDs.roa (hash: ZPhGNaDbDb+DbDzUXj55AFIPAg+DVhgaYwBguflVQCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7a:fa:c0:30:b1:23:02:cb:33:25:17:7b:dc:f1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Jul 21 21:00:34 2026 GMT
Not After : Jul 22 21:00:34 2026 GMT
Subject: CN=dfd3edfa4a0858a32829961cacf6ef35caf994cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:67:60:37:ee:1c:fd:e9:8a:1b:c3:85:0b:73:
23:6a:db:95:76:f4:b6:79:3a:79:52:9e:4c:94:c9:
99:e8:81:57:4e:d2:00:c8:a6:23:1e:58:d1:0c:c7:
1a:7c:d5:4f:dd:f5:dd:a9:8f:8a:29:72:6e:bf:5c:
7a:91:0c:78:1b:e1:ef:a2:23:fd:db:92:b8:31:71:
df:c4:fe:fa:c4:44:57:85:0f:54:3b:cd:f0:d4:3d:
8c:f8:04:d4:6a:0b:bc:b5:ec:8c:cd:c6:e9:2e:db:
8c:33:6c:7c:23:26:a1:e9:46:ac:10:21:41:ee:cb:
e1:61:4a:bb:90:ed:ea:df:27:19:cf:5b:bb:13:24:
7d:ab:2e:98:eb:51:66:a1:e4:79:1f:6c:ed:88:d1:
80:6a:23:f5:7e:4a:d0:dd:83:16:8f:a2:65:6c:84:
10:4d:d2:8e:1a:e6:e2:e5:97:22:26:23:55:ec:ec:
88:39:5e:98:f7:08:99:b5:e8:ba:e3:18:a9:4e:87:
7a:4a:59:1e:3e:49:33:19:ba:05:b6:f3:6b:0b:82:
28:17:9b:0f:76:4e:96:72:76:35:60:78:ec:15:46:
22:4f:15:c7:26:2d:ab:aa:78:2c:a3:bc:dd:ec:cd:
67:f7:ea:de:ac:ab:12:13:fe:c1:92:71:45:91:e5:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D3:ED:FA:4A:08:58:A3:28:29:96:1C:AC:F6:EF:35:CA:F9:94:CF
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bf:22:e5:77:a1:6c:1c:b2:41:0a:36:2f:54:3a:08:f7:a3:
53:2f:5d:d0:07:16:ee:df:ff:f9:4e:e5:3d:16:ea:3d:40:0f:
d7:7b:de:75:ed:23:b3:3e:ce:e2:b6:3d:a0:9f:a3:04:9a:fd:
1c:65:ca:e0:ae:60:05:4d:6f:ab:54:44:6b:16:f4:6d:b9:a2:
f4:d5:25:c0:06:61:59:f7:0c:a8:46:6f:a5:89:17:f0:14:54:
3c:43:f3:bb:37:ce:f6:23:5a:ea:76:13:60:f8:60:12:46:e7:
2c:6d:2b:f2:75:04:c6:0f:0c:5b:49:63:3b:34:eb:8c:eb:48:
16:90:f8:54:6e:26:5a:e0:2c:f4:72:be:07:5e:f9:9a:57:04:
7e:74:42:4c:b2:4e:91:60:da:54:dc:fb:7f:f9:1c:ca:a0:8f:
5b:ea:3f:19:87:93:85:3f:67:84:06:e7:4b:99:ae:2f:7f:1f:
4f:a2:ec:fe:06:33:bc:d0:3f:4e:7b:3d:5b:8a:a9:1f:ab:b3:
00:ef:af:69:a1:12:30:9e:0d:00:8a:af:3a:16:a1:56:1c:c7:
83:6a:34:cf:e5:b9:de:a1:5b:6a:10:0d:9a:f2:0f:2d:9e:2a:
1e:4b:98:e1:c7:c4:c5:15:36:db:8d:5a:f4:ca:f8:11:d3:27:
27:89:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:35:13 2026 by rpki-client