Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: uMD3ZA0BOa/tmaT9lfX9qZubckiMTTZuQfY4V/nfsHk=
Subject key identifier: D0:E5:73:E5:09:8F:31:BD:DE:FA:CC:F9:5C:C3:D4:45:F2:92:24:28
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 019FA2977C55033294B1A577A1E2438EB645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 18BA
Signing time: Mon 27 Jul 2026 08:01:04 +0000
Manifest this update: Mon 27 Jul 2026 08:01:04 +0000
Manifest next update: Tue 28 Jul 2026 08:01:04 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: 2V7XIb5mOVAl6yHKNNDCD2RKeqSJZul8rIUPxQ1d3no=)
2: BmNLDCfpNhMuta2ovEkjhRgE3XE.roa (hash: 8pxnmm0DlGNm9U9Ei6IyeVDeTXCLFrg3l4BtLYG1QcE=)
3: yS5UEuhVvuTniTo0Rp3QBfAIY2w.roa (hash: EwvpzM71As4QzkpNR7WlLGyGWJ5qcNqZIHlrR3sWFGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:7c:55:03:32:94:b1:a5:77:a1:e2:43:8e:b6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Jul 27 08:01:04 2026 GMT
Not After : Jul 28 08:01:04 2026 GMT
Subject: CN=d0e573e5098f31bddefaccf95cc3d445f2922428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:63:5f:aa:f6:11:50:67:b8:d2:17:00:28:
b2:89:4e:fe:69:63:b3:bd:13:ba:81:34:d8:f4:76:
a9:67:dd:82:80:71:4e:8d:98:71:0d:4b:52:70:f5:
dd:21:6b:d5:0d:01:ba:3b:c2:11:de:97:64:ef:f3:
04:27:1d:ac:02:f2:f0:e7:29:3c:b8:4d:b7:17:5d:
e5:ac:c5:02:d6:5c:ef:19:b3:11:06:71:2d:a6:ed:
6a:b0:17:cf:00:cd:d6:4e:d8:9a:4d:1e:57:73:f1:
7f:f8:20:e5:25:1e:9d:cb:a9:02:15:45:f4:87:96:
b1:31:2e:fd:43:a9:77:30:6a:22:e5:41:1e:96:63:
27:20:bf:22:26:09:16:78:70:0d:92:0e:ec:97:61:
fd:4c:3b:09:16:48:cc:54:86:d2:63:23:07:a7:31:
ae:09:2b:49:25:57:78:e0:ca:8c:f7:1b:7f:18:e2:
26:b0:37:10:fe:13:3a:9e:0c:c1:e2:a6:ff:16:fe:
91:f9:30:77:6a:e2:47:b9:e5:1b:0e:42:b9:15:22:
80:38:54:cd:25:67:97:38:0c:93:0c:cc:e0:4b:af:
a6:54:15:44:bc:77:fa:06:ed:ff:3a:22:4b:6d:b3:
6c:69:88:73:51:08:65:9f:f9:66:bd:91:52:77:51:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E5:73:E5:09:8F:31:BD:DE:FA:CC:F9:5C:C3:D4:45:F2:92:24:28
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cc:d9:e5:83:2c:77:1a:30:3e:dd:59:55:74:7e:95:39:b2:
a8:90:fa:e4:51:55:35:82:11:2e:3b:71:12:5f:45:8d:d6:db:
a4:08:0a:01:9e:1d:8a:42:4a:2a:6c:ba:12:41:f3:10:85:af:
91:1d:2d:cc:a6:b3:6a:ba:9d:43:b5:62:d5:aa:cc:f2:98:cd:
6d:bf:4d:86:97:07:6c:73:af:52:9a:6e:a9:81:87:49:fe:22:
a2:39:58:33:1f:ea:c4:25:c8:90:2e:0c:cc:2b:2e:1b:67:42:
96:e7:61:f8:d6:8d:52:70:ee:a9:22:1a:49:4b:56:82:28:b6:
cc:c8:14:1f:e2:8c:31:38:b7:ef:f5:13:22:b0:e5:64:e5:fc:
56:bf:73:e6:99:0d:9e:5e:3d:d9:99:71:53:a6:de:0d:82:09:
f8:39:b2:1f:7a:4f:fc:78:7d:ef:79:23:55:dc:fb:7a:38:47:
6f:3f:ea:0b:8a:2e:a9:0a:e4:af:6b:bf:f0:8c:1b:ee:c0:2c:
71:46:30:9f:25:7a:59:71:ca:42:16:14:3d:6a:85:a5:34:9b:
10:50:59:ee:16:87:c7:65:8e:18:d7:c2:0c:80:0d:7a:2c:db:
05:1c:e5:be:51:b2:c1:a9:a1:05:86:59:17:9e:3e:e6:af:dd:
dc:9e:12:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:51:23 2026 by rpki-client