Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File: S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier: yolWfu/0V3dQfaeoYIK5bBMoiYldzTTXiuFXZGpX7ks=
Subject key identifier: D5:5F:9A:2A:DB:96:D0:CF:67:43:60:BC:E5:D5:89:D9:B3:0B:61:EC
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer: /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial: 019FA1BB66284523F516E707126D200738C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number: 0C8D
Signing time: Mon 27 Jul 2026 04:00:40 +0000
Manifest this update: Mon 27 Jul 2026 04:00:40 +0000
Manifest next update: Tue 28 Jul 2026 04:00:40 +0000
Files and hashes: 1: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: CNGHqof7egPqrn/JOmqGUpgdHFDXy0N7hRMLssX+hVE=)
2: hOCqHr0-rwjOn6wU8z8C-ggKXAo.roa (hash: aczilg5expuAqkln7fFu+xj4eV4HRQvyQA+wDQF1/60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:66:28:45:23:f5:16:e7:07:12:6d:20:07:38:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
Validity
Not Before: Jul 27 04:00:40 2026 GMT
Not After : Jul 28 04:00:40 2026 GMT
Subject: CN=d55f9a2adb96d0cf674360bce5d589d9b30b61ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:08:0e:dd:af:43:99:8b:ee:23:0b:40:29:
29:4a:bc:8f:66:ad:ef:ac:12:53:7b:6f:5b:e7:51:
d7:44:68:39:d4:4a:fa:49:c6:24:3b:9f:2e:e5:a0:
dd:b9:b5:a8:0c:87:cf:a4:3e:07:e4:07:f5:36:23:
b2:08:e9:24:60:20:7b:85:e2:8e:94:cc:b6:aa:fe:
98:fe:d7:b8:28:3e:b6:fe:5f:41:be:32:fd:81:4f:
c0:6b:e7:14:87:4e:85:17:2d:e4:4b:1c:ae:56:b6:
b6:fa:94:6c:7d:87:e7:29:d0:2b:aa:2b:15:93:88:
c3:ea:3e:46:b7:a1:b6:fe:7f:f0:6a:d9:20:09:e2:
74:52:05:c5:96:df:cc:c2:d4:0c:0e:c1:4e:74:26:
bf:bc:68:2c:b4:d2:95:d8:cf:78:53:e4:82:a9:aa:
f3:ec:c5:dd:90:50:71:65:80:f8:16:d7:0f:a0:78:
e8:30:78:61:06:15:9c:5c:2e:45:dc:a0:ec:ec:7b:
94:86:e7:4f:82:49:b6:30:7c:dd:2a:08:c5:c5:6e:
1e:20:af:1a:a4:bc:23:4d:8d:f2:36:0c:ed:a6:f5:
a8:ba:1e:63:22:fe:1d:48:60:91:10:26:80:14:d0:
c2:e7:72:16:bb:1a:c4:63:71:1c:95:48:c1:a1:a5:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5F:9A:2A:DB:96:D0:CF:67:43:60:BC:E5:D5:89:D9:B3:0B:61:EC
X509v3 Authority Key Identifier:
keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2d:1f:2a:cd:7d:13:fa:ae:a3:af:67:51:c6:7a:bc:10:8e:
a3:81:f9:98:ba:99:d1:8b:79:2c:69:5f:23:23:36:54:14:e7:
79:5e:8c:7e:24:2f:c1:2d:78:1b:7c:2b:b5:e5:4b:53:57:0b:
f7:e8:ad:a1:dc:59:79:fa:78:68:53:58:97:37:d8:49:27:32:
e2:4d:5b:49:9d:7e:18:96:22:d0:78:32:72:c7:3c:86:82:32:
91:ab:ce:ec:5c:e2:54:7f:a6:6f:a2:93:13:62:84:97:a4:4b:
25:7a:79:cf:6d:d0:1f:9f:a5:1f:77:1d:5c:23:1d:28:ad:a2:
7a:06:98:1f:1e:29:9c:84:85:6e:03:0e:96:9c:d0:a1:4d:9d:
e7:c7:b2:b1:3f:b2:36:1b:ac:c8:45:bb:70:d4:b7:6e:c0:fe:
be:7b:2b:db:75:5e:9d:5d:fd:1d:15:7e:45:c6:41:f6:fb:66:
d0:b0:c9:42:8a:49:03:6b:8f:10:fc:72:0d:d4:99:14:d6:2d:
e5:6e:03:1f:e4:1f:c8:2f:3f:87:e5:f6:38:14:ef:2d:55:0f:
45:0d:9a:4c:1f:d2:d0:f9:6a:a8:23:1f:87:88:ff:a3:72:20:
13:7a:8e:3a:aa:7a:95:59:fa:ed:af:e4:bc:67:2b:41:68:fd:
ce:89:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:23:49 2026 by rpki-client