Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File: 8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier: gH9CJ/O2bXx9Y2nEiOFqILXObcpngRRQRw2tVtRVdw4=
Subject key identifier: B6:11:71:AF:3A:21:F3:AE:33:E6:52:BB:49:7D:E2:CE:61:7A:8F:1C
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 019F17F993FB6C8280C8C564FB5EBECE43E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 10:00:59 +0000
Manifest this update: Tue 30 Jun 2026 10:00:59 +0000
Manifest next update: Wed 01 Jul 2026 10:00:59 +0000
Files and hashes: 1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: H5L1q9XApYLD/6IXO0+Oh8s7EdDIGZQ4HD2CM5auV2s=)
2: XXKVsIY0HbIJymCv56HgZpurwFA.roa (hash: Sk/E2nAzU4UxwMsd952VhcruaPuVHKtKy3ii+1Myr2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:93:fb:6c:82:80:c8:c5:64:fb:5e:be:ce:43:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Jun 30 10:00:59 2026 GMT
Not After : Jul 1 10:00:59 2026 GMT
Subject: CN=b61171af3a21f3ae33e652bb497de2ce617a8f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:76:5c:05:0f:db:d5:cb:d6:42:ef:a7:61:
61:13:24:e2:78:2e:eb:af:bc:d8:56:5f:94:fe:24:
d7:1e:17:d7:2a:ff:4f:38:3e:5c:84:86:8a:5f:fe:
ea:c8:1c:7e:45:fa:fb:f4:c5:f9:a0:09:75:82:d2:
db:a9:8f:38:89:a2:b8:c5:af:2e:d3:96:cf:c2:11:
25:23:c7:ac:2e:74:2f:64:b8:9f:28:2c:a0:b9:8c:
6c:89:4f:d6:fa:fe:c0:b5:c1:02:9f:28:72:ab:b8:
76:36:d8:bb:f8:2f:ab:98:b8:9a:31:91:4b:36:12:
84:de:45:0c:2f:2d:41:38:bc:e3:ec:bf:b5:fb:9c:
d4:cf:f1:7e:3c:09:22:28:e2:03:20:3e:12:d2:7f:
aa:d3:a3:0e:a6:1c:5c:3e:20:65:38:4b:5c:4b:cf:
a3:82:54:9f:7e:87:17:15:43:68:e2:63:a6:0b:5d:
d1:7b:58:a6:22:82:7c:ba:1b:91:d3:64:71:3d:f7:
8e:89:81:c8:1e:d8:14:10:91:b4:10:e6:7f:d8:0e:
c0:dc:31:e3:cc:ee:5c:55:ac:94:a0:f9:56:c5:ac:
9b:da:ce:9e:f3:23:6e:23:b7:68:58:fa:10:b0:0f:
8f:68:5b:2b:c2:31:29:fe:e1:00:ac:05:ef:ce:e2:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:11:71:AF:3A:21:F3:AE:33:E6:52:BB:49:7D:E2:CE:61:7A:8F:1C
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:27:25:35:d1:cf:fb:01:2a:15:b0:cd:d2:d8:bb:39:7d:17:
7b:e3:56:89:3a:51:96:c0:dd:2a:51:20:52:54:1a:90:8c:2d:
83:e4:b8:36:da:2f:44:2d:c5:6a:9b:b9:01:c9:9a:2a:f6:11:
1b:7d:fd:5d:fa:8a:06:5c:ee:99:9f:0f:29:60:2a:ed:1a:6f:
65:a0:fe:e3:a3:d1:19:f1:af:10:74:ad:53:8b:d2:6c:2f:2e:
cb:e8:0b:08:2e:1b:40:d9:51:00:e1:3d:17:c6:43:97:90:c3:
5f:90:44:18:83:03:1c:23:86:9b:1d:47:de:dd:b9:70:1c:a7:
f9:1f:90:f9:2e:63:0a:a3:5f:c2:97:b8:8c:da:a4:e8:ef:45:
2b:0a:fc:5a:5f:a6:1e:6a:46:8a:68:fa:a8:fb:a3:d4:a8:3f:
d4:2f:b8:eb:78:d5:e0:9e:d7:2b:b6:91:27:e2:5e:e3:2f:4d:
e3:85:6a:a0:91:7e:65:bc:d1:e4:19:69:bd:bb:ac:75:bd:ce:
9f:7f:bf:aa:8f:f4:9e:a2:4a:68:14:9b:06:d0:46:91:29:bf:
a3:1a:6d:23:3e:86:46:fb:50:17:22:41:1b:68:b3:84:fa:bc:
ba:4b:c8:8f:ef:6e:c9:a4:c5:b6:d8:86:e9:cb:25:dc:a2:86:
bc:01:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:07 2026 by rpki-client