Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: uNTu+MDGF3oHq1iQpZvkl590N/ib/FnfGWb8RNDaFjA=
Subject key identifier: 3B:14:C4:F7:1A:ED:9F:22:EC:B4:42:FE:6B:D5:51:57:3C:75:7A:BF
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 019FA228E220B50B3288B18B397DE626063F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: 0532
Signing time: Mon 27 Jul 2026 06:00:15 +0000
Manifest this update: Mon 27 Jul 2026 06:00:15 +0000
Manifest next update: Tue 28 Jul 2026 06:00:15 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: vHoB9uDDciVVa712iIeshAOHY+T4mzkXkDR+zIA17nY=)
2: sdMta7c0gW915yu9rkbP8a3pD1A.roa (hash: dpcGKoEnYqxFtG+MmQSOKo58GUsu+Url2Igp0+ElIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:e2:20:b5:0b:32:88:b1:8b:39:7d:e6:26:06:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Jul 27 06:00:15 2026 GMT
Not After : Jul 28 06:00:15 2026 GMT
Subject: CN=3b14c4f71aed9f22ecb442fe6bd551573c757abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:d0:62:52:8a:22:d7:e1:df:a4:fe:05:f7:
99:6c:eb:18:21:5c:f2:f3:0d:3e:7d:b9:02:46:89:
e8:01:95:aa:71:18:61:5a:06:a6:8d:07:37:a4:5e:
2f:a6:88:67:c2:40:b9:8f:9b:de:d2:3a:5d:bb:81:
5e:39:8b:57:05:9a:a5:41:0d:2b:c5:97:65:d8:f1:
ec:54:b4:35:06:ab:e6:67:61:fd:e3:20:41:6d:dd:
d8:49:93:fc:ef:a7:fb:3d:37:c0:d2:b9:f7:c9:c6:
5e:57:69:eb:77:4e:15:80:3f:5d:21:08:41:45:a6:
07:ea:68:0b:a3:96:2e:08:cf:a0:ac:5f:cf:87:14:
85:21:73:b5:1c:6b:42:bc:1b:00:f3:86:1b:5d:a2:
7d:84:f4:41:79:17:f9:09:18:88:73:da:26:e8:1f:
37:25:b8:1c:ce:c0:12:4b:c3:e4:f1:bf:ec:12:1e:
55:d2:54:f2:0c:3e:92:e8:98:25:21:50:38:aa:8a:
a6:0d:c9:6e:21:fc:e4:e4:15:69:b5:fa:b2:0e:85:
0a:62:24:32:c5:bc:4c:db:9a:e5:77:c7:96:45:78:
f6:d3:be:21:af:48:55:47:68:60:db:2e:3b:f7:01:
f1:7f:f4:ad:e0:e1:65:69:57:75:f3:87:4f:01:94:
eb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:14:C4:F7:1A:ED:9F:22:EC:B4:42:FE:6B:D5:51:57:3C:75:7A:BF
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:64:23:e9:c2:b8:a5:fc:33:4b:7e:7b:7a:34:e3:a8:97:cf:
0b:ec:e4:37:e2:4e:e5:a9:7e:14:79:5f:9b:d4:02:dc:2a:07:
d9:4e:f8:5b:df:1a:6d:67:75:32:8f:10:c5:a0:f3:4f:53:96:
09:d1:45:23:27:82:f5:ff:de:cb:c6:8a:91:9e:ba:3a:3b:37:
89:37:67:b4:20:4d:5c:b7:34:7e:f1:5d:41:53:1a:37:60:e7:
5a:a8:b2:0a:b7:01:c0:38:d6:28:ca:68:7e:28:57:69:ce:21:
e3:0a:d9:c8:62:21:68:81:28:a1:b0:9f:99:8a:f0:d4:5f:84:
0a:65:6f:5c:71:4a:9a:3e:ab:be:db:3b:21:fa:54:84:6f:08:
5f:d8:67:ec:8c:80:f7:fc:71:ca:a7:4c:5a:dd:5d:04:54:3c:
c6:ef:fa:9f:76:8f:e9:1a:39:17:e8:52:d3:70:b7:a5:22:07:
67:5f:76:f5:31:f8:0b:4d:da:6b:5f:54:8e:bd:e9:d9:8f:4b:
35:ec:68:37:11:0e:7a:68:9e:3f:a1:ba:49:bd:2e:54:17:78:
76:a2:63:1d:b2:8d:dc:27:64:41:2b:49:28:79:0e:84:90:67:
12:81:e8:6a:52:71:0d:85:91:68:f2:b4:33:bd:12:0c:80:e2:
af:0e:54:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:41:37 2026 by rpki-client