Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: PYpJpbLxr1S4hc57mPieOdZocMS8wFd6Ffj+1g35ans=
Subject key identifier: 0E:21:30:23:F3:2F:61:7D:E0:AF:BF:2A:49:29:8F:73:62:14:FA:7E
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 019F197A9B0E6F4D83265804812A1AA69CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 139C
Signing time: Tue 30 Jun 2026 17:01:33 +0000
Manifest this update: Tue 30 Jun 2026 17:01:33 +0000
Manifest next update: Wed 01 Jul 2026 17:01:33 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: nhM3SM9b1UaUQMF+9crkCFWpBd7E3DMDSwZGKrklGvY=)
2: po4crTaA95m-lSpTh_du9PtU6gY.roa (hash: SJ7n/VopAoAzW1zSv/V6X7AVtWxebx5P9AXUE5osTUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:9b:0e:6f:4d:83:26:58:04:81:2a:1a:a6:9c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Jun 30 17:01:33 2026 GMT
Not After : Jul 1 17:01:33 2026 GMT
Subject: CN=0e213023f32f617de0afbf2a49298f736214fa7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:35:d3:38:43:f6:7c:93:86:6e:a4:7f:f0:
8e:ec:ea:73:e5:57:6e:93:fc:97:ca:4b:95:cf:c4:
21:7c:6a:30:7b:f6:74:58:a9:a9:30:6e:a7:35:a7:
09:a7:5e:7f:1e:54:95:69:f1:3e:62:aa:c9:17:78:
4b:87:75:6d:43:2c:f0:94:09:48:08:2b:12:81:b4:
90:fb:5c:cd:8a:e0:dd:cd:61:e8:51:50:a8:e4:c0:
e2:0b:cd:ef:57:2c:a3:0e:14:fa:d1:6e:48:87:b3:
b0:f8:55:7a:6a:2b:63:3c:5e:c9:24:78:5f:32:51:
65:49:ec:93:a3:6f:a4:1e:a3:c7:1b:ab:18:37:92:
38:07:12:ee:71:48:17:93:7f:24:75:03:ac:73:02:
ff:31:c6:12:bf:3e:50:59:9e:a3:6f:2c:15:d2:7e:
bd:d3:94:e6:c0:50:3d:04:10:c4:d0:99:ff:42:ec:
ef:81:67:64:cf:6b:3f:8a:2a:6e:f1:6c:3a:5a:7c:
7a:a9:d4:15:d6:a9:c3:ec:b8:66:f8:cc:ea:29:eb:
27:28:7b:e2:a4:70:bd:5f:cd:fb:89:4d:bc:9b:4c:
2a:d7:fd:5c:60:b9:9a:c3:50:d9:b5:dd:e0:cc:4f:
ab:97:6f:71:cd:60:c7:f3:6e:7c:37:c8:26:95:d8:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:21:30:23:F3:2F:61:7D:E0:AF:BF:2A:49:29:8F:73:62:14:FA:7E
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e2:8b:ba:da:db:c8:73:0c:de:a4:04:be:8a:3c:43:0f:83:
42:6b:4b:89:45:8c:5b:b2:df:c4:ea:40:1f:1c:ef:b8:28:05:
79:a0:da:2c:66:c3:44:f3:75:8c:60:83:58:2a:00:58:61:23:
e9:69:fa:e4:a1:9a:07:82:47:1f:5c:cc:5f:e0:ea:9b:f1:44:
fc:31:b9:37:88:1b:0c:a9:c9:9e:93:24:d2:59:1d:b3:b9:e0:
4c:d0:4f:13:1d:3f:8a:a5:bd:af:93:2d:ef:a7:60:41:98:36:
c8:bb:3e:b3:ec:b6:c1:60:82:f0:36:17:de:79:b4:32:e9:11:
3c:e9:17:9e:77:df:10:63:53:10:05:16:12:f2:01:0a:f2:07:
fb:6b:db:35:79:e3:b5:fb:14:bd:d9:08:eb:d1:74:56:70:98:
a2:4d:ea:75:f4:13:70:50:e0:5a:00:9c:89:f4:af:55:2a:0d:
6f:97:15:84:dc:0e:5c:4c:40:12:87:22:4b:fe:6b:a3:e7:0c:
ec:1d:c4:ea:f7:e6:20:b3:6a:18:89:57:b6:0f:61:04:31:fe:
97:cc:4b:56:0a:2e:4c:18:5d:03:76:22:4b:a5:ab:04:1b:1a:
cd:5c:7e:40:b0:fe:60:94:52:94:36:83:28:d9:f6:d2:f0:27:
f7:37:33:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:20 2026 by rpki-client