Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: ujzpTsDHEBzJ/CcU/ExTezrZQ+XBmItqUk0TywZ6650=
Subject key identifier: 4A:AD:49:90:A6:96:F1:9D:6C:4A:70:18:EE:5C:BD:37:31:BF:4A:6B
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 019F17F96C98305327DA251978D3D01705EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0E07
Signing time: Tue 30 Jun 2026 10:00:49 +0000
Manifest this update: Tue 30 Jun 2026 10:00:49 +0000
Manifest next update: Wed 01 Jul 2026 10:00:49 +0000
Files and hashes: 1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: 0oNyUUF3/nw00yJpZg+n/dLxmmDVcPwcFi7FOSCjEaQ=)
2: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (hash: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:6c:98:30:53:27:da:25:19:78:d3:d0:17:05:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Jun 30 10:00:49 2026 GMT
Not After : Jul 1 10:00:49 2026 GMT
Subject: CN=4aad4990a696f19d6c4a7018ee5cbd3731bf4a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7d:c1:e9:45:e2:10:b3:55:bb:10:b5:eb:26:
9c:ed:a8:0d:2e:21:b6:21:ba:41:16:54:ea:c0:bc:
a8:29:b9:91:6b:96:c1:10:ee:0d:b4:13:26:fd:7d:
c5:ec:5a:41:05:c9:f3:d3:28:76:fc:22:94:c8:80:
50:4f:04:27:a2:be:16:81:a1:bc:a8:ac:76:e4:09:
a9:86:ac:f8:88:1b:34:28:97:a6:59:77:ab:01:99:
a0:2c:b1:41:7c:dd:35:82:68:88:12:97:0a:d8:a8:
a7:fb:a4:c6:a6:74:13:26:3a:91:b2:d9:86:74:0f:
32:96:ad:92:7d:5c:12:02:54:a7:6b:71:82:d8:b0:
a7:62:ab:6f:23:59:c8:0c:3b:67:2a:c0:6f:51:96:
b0:67:2e:fb:94:d2:13:60:6b:e7:da:f9:5f:55:81:
5d:c6:ce:94:23:44:c4:fe:3d:9e:e4:cc:88:f1:9d:
6a:b1:fe:be:9e:dc:8f:50:61:32:1e:55:f4:59:f6:
f1:37:0a:0d:63:23:55:b3:2c:83:ca:cc:24:06:56:
0e:c4:04:b6:c9:0b:62:d0:6e:cf:b9:c7:5f:95:b8:
34:e9:e8:be:88:32:df:64:e2:11:78:3d:36:22:28:
45:7b:47:ad:94:91:df:4e:08:c8:dc:41:66:40:8d:
36:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AD:49:90:A6:96:F1:9D:6C:4A:70:18:EE:5C:BD:37:31:BF:4A:6B
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d6:3a:c7:07:7e:f1:c7:9a:f2:5d:29:14:bf:8a:04:3c:3d:
0a:ec:70:63:07:c9:1e:52:8b:9c:a2:92:30:eb:24:ff:0d:e9:
b6:93:3a:c1:fb:5c:6d:75:c6:4f:81:26:9e:87:48:f3:63:99:
d5:41:e2:49:06:99:2b:57:fd:b4:29:9a:44:62:99:9b:f0:cb:
15:36:8a:2e:24:aa:af:e9:60:05:cc:c6:c8:73:3e:dc:34:53:
6c:86:83:ea:73:8f:e3:05:72:5a:74:d5:6d:f9:72:35:06:37:
dd:8c:4e:e1:bb:3e:1d:52:bc:46:ed:f6:4b:72:26:71:c7:26:
5f:d4:52:e1:cc:7f:01:62:91:9b:27:1e:85:15:9a:43:c1:85:
fe:0a:e2:93:fa:82:ec:0b:1f:34:56:a7:13:c5:31:b9:2a:a4:
f1:d7:0e:6d:08:24:5d:2f:c1:6e:79:82:b0:05:91:50:3c:31:
ac:a8:b1:45:7e:fa:38:79:a4:87:8e:ad:24:d2:9e:41:bb:1e:
f5:c4:93:1c:1a:77:e6:de:4f:e3:83:4a:40:e5:36:d7:cc:c4:
7d:2f:b8:a8:3d:1c:48:87:69:d8:8e:f7:94:75:d3:f0:93:55:
be:34:20:f0:5b:bb:0a:07:d5:61:0f:61:5c:45:16:34:b8:9c:
5b:9b:6a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:08 2026 by rpki-client