Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
File: 8457gT6aM4MKE7jBiDhMLcTHXJc.mft (raw, json)
Hash identifier: vtTwN3jtw5JVmHoWAe8pKr4JVaQ1Bhhy4anjY3Ayezc=
Subject key identifier: 61:91:91:2A:71:AA:23:1C:68:CD:A3:8C:7C:51:47:65:F7:E3:09:D0
Authority key identifier: F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
Certificate issuer: /CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Certificate serial: 019F3A867CF5A919639DCF4529E8550F393D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
Manifest number: 13
Signing time: Tue 07 Jul 2026 03:02:00 +0000
Manifest this update: Tue 07 Jul 2026 03:02:00 +0000
Manifest next update: Wed 08 Jul 2026 03:02:00 +0000
Files and hashes: 1: 1lHC3eEb4JgrWUhgQdZGe237xNE.roa (hash: tiibMI6HO4qP8jmiKq9SAdjkuilfWtaVHKPxHUTz4wg=)
2: 8457gT6aM4MKE7jBiDhMLcTHXJc.crl (hash: 5PV8vmWfnQRy08kI+C64vKR56upBfvlmGfSlqHj1SA0=)
3: PYTmdV0F9SG-733WM6hd2UxmEKQ.roa (hash: C/kjeN97nB1/VJQ7m/rVNOnzP/hxeC+2PpOB/KvRfaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:86:7c:f5:a9:19:63:9d:cf:45:29:e8:55:0f:39:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Validity
Not Before: Jul 7 03:02:00 2026 GMT
Not After : Jul 8 03:02:00 2026 GMT
Subject: CN=6191912a71aa231c68cda38c7c514765f7e309d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:08:25:d5:a1:dd:33:38:61:c3:c9:8b:f5:
7e:48:8e:3c:a4:1a:0b:13:07:fa:8a:c9:95:8b:85:
5d:37:b0:df:49:d4:0b:67:62:8c:4d:da:bb:ef:a6:
b3:15:6c:3c:54:6a:b9:d3:a5:f8:ab:05:b3:5d:cf:
8c:5f:00:4c:eb:38:4c:3d:ee:4c:88:2f:4c:1a:d1:
dd:f9:ef:44:ca:6a:ff:f6:3c:b0:ee:9f:4e:67:c7:
77:92:80:26:18:d4:c1:92:e5:6f:f3:66:63:87:71:
21:3f:27:77:7a:61:25:81:02:0f:6b:59:91:31:27:
ae:d9:68:05:58:6b:d9:99:70:ec:15:b9:43:d6:2d:
43:fc:52:5b:0a:75:74:7d:75:67:9b:a9:22:dc:94:
d3:04:66:b5:0f:55:61:dd:98:8c:89:39:d1:c7:8b:
99:c9:3e:66:c2:a0:7a:05:e8:6c:17:49:ad:3a:75:
9b:9d:88:84:de:f3:5e:71:e6:ee:1c:4e:a4:5d:ec:
62:74:a6:3f:13:36:bb:26:4c:19:8b:42:e2:60:db:
6e:49:9e:2b:10:14:93:5c:65:0c:7d:bd:58:bb:aa:
39:8a:eb:82:f5:7e:05:68:93:76:0a:63:06:e5:44:
64:73:62:29:27:a6:0f:f0:c2:7c:19:21:fc:d9:2c:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:91:91:2A:71:AA:23:1C:68:CD:A3:8C:7C:51:47:65:F7:E3:09:D0
X509v3 Authority Key Identifier:
keyid:F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:09:e8:05:d8:8a:9a:23:00:f0:d4:34:56:12:0d:de:a0:70:
aa:47:c4:20:5d:54:96:b9:6b:72:14:4e:69:8b:38:bb:0e:73:
e9:77:b9:bf:72:b2:e0:87:c3:9d:31:f9:0f:af:a5:a2:e8:3e:
18:92:f7:59:e6:cd:45:51:9f:1d:4d:52:3b:bb:9a:36:3c:9f:
5c:46:cb:3f:5c:43:71:bb:c9:be:25:64:ec:c9:47:f8:4e:04:
e7:82:02:70:97:5a:d4:56:e7:4e:7d:83:7f:bc:d3:15:65:48:
e6:53:9d:b2:ed:eb:97:35:40:2a:4e:99:2f:5f:12:73:f4:84:
ae:f0:4f:d6:77:00:c0:bd:ec:c4:0d:7d:52:13:54:84:c3:62:
13:9b:46:b3:f4:0c:97:da:ae:88:21:c5:e3:4f:33:1c:8d:1e:
3d:d1:3d:94:06:46:45:b2:52:fc:26:0d:4a:6b:c4:c5:b0:c4:
8f:b4:bd:49:fa:ca:e1:71:9d:e1:09:af:37:70:86:bc:9a:5d:
b5:24:88:d9:7c:44:4b:20:21:b5:9a:f8:1c:3d:9a:64:4a:ec:
ac:11:eb:05:90:d9:42:b7:27:0b:65:14:a6:33:5c:d2:11:ca:
1b:8f:d6:93:67:36:b8:af:83:e2:85:ea:2f:a8:39:06:dd:a0:
2e:3e:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:40:32 2026 by rpki-client