Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier: CiS3IKF7tujlS6ONqgMuVdks2tNkYj5ctZ8Rs4jxSx4=
Subject key identifier: 41:9F:EF:58:55:DE:FD:2E:96:A0:51:37:70:81:7A:49:FD:4E:B9:FA
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial: 019F86446A0E6FE19829C7635472DA50636B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number: 0CB3
Signing time: Tue 21 Jul 2026 20:00:58 +0000
Manifest this update: Tue 21 Jul 2026 20:00:58 +0000
Manifest next update: Wed 22 Jul 2026 20:00:58 +0000
Files and hashes: 1: dOj9E6FS6DEoaUcEFe4gpHgcFuo.roa (hash: dnfO9626LH91ChjEi8apYPGETS9gQAIqmrEgki3RmE4=)
2: s8k12EMWos9WpllXttebevgRpwc.crl (hash: UeWoROAPJQI1AmDC6pAFqc8WPZaJm3GI86bEK8FbqkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:6a:0e:6f:e1:98:29:c7:63:54:72:da:50:63:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Validity
Not Before: Jul 21 20:00:58 2026 GMT
Not After : Jul 22 20:00:58 2026 GMT
Subject: CN=419fef5855defd2e96a0513770817a49fd4eb9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:06:a5:c5:5a:15:2c:be:9b:2f:5d:7e:6e:
c0:ab:4b:92:77:68:1f:80:ea:76:95:61:14:c8:71:
99:ae:b6:ac:b8:cf:26:a4:f4:f4:65:08:7c:5c:d9:
6e:7c:13:2b:e1:71:93:f4:49:65:46:25:1a:45:86:
ff:6c:7a:e1:37:2c:b9:87:bc:30:da:f8:e7:49:55:
f7:21:09:e1:b4:bb:57:db:09:1f:5d:d9:d2:ec:66:
c4:97:71:4d:32:c9:51:63:ae:9f:f1:50:27:4c:fc:
6a:61:40:96:07:43:60:4f:29:40:86:7d:8b:36:7d:
1c:72:74:13:0b:c7:15:77:0b:ff:eb:61:c4:22:b8:
33:14:da:56:d7:6c:18:e7:e8:8d:ca:28:20:cc:4d:
29:a0:d1:07:14:7c:3f:00:27:d8:06:ef:12:b2:c1:
e3:8f:35:02:45:09:38:dc:f4:d8:64:33:50:1e:9e:
45:da:f5:43:55:47:67:06:d1:a9:22:39:c1:cb:a0:
7f:52:d5:39:6b:99:e1:eb:ef:c7:90:80:d6:a1:d6:
38:0c:82:93:ea:ca:c8:55:f1:f2:f6:c7:7a:72:e1:
8d:07:ef:bd:ed:fa:b1:94:4c:33:91:73:b2:40:4c:
ca:50:bb:29:7f:38:88:8c:16:44:e3:08:89:5b:34:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9F:EF:58:55:DE:FD:2E:96:A0:51:37:70:81:7A:49:FD:4E:B9:FA
X509v3 Authority Key Identifier:
keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1c:3e:6d:92:bc:08:5f:85:05:b0:0f:33:7d:3a:65:c7:f1:
21:e2:11:e6:30:82:91:aa:4f:2e:0c:49:79:98:d8:b6:a1:90:
55:70:4b:61:6f:e6:d1:3b:03:73:f3:8e:98:63:d5:b9:fc:cd:
f3:20:9b:a6:3f:c4:98:97:41:08:2b:f7:6e:b7:a9:25:ce:3e:
be:cd:bf:9a:c3:86:f1:24:9a:df:09:63:7e:c1:10:77:90:96:
36:2c:b5:7c:56:43:89:79:af:b3:ca:16:4b:92:d5:b0:3d:20:
2e:ed:b7:ff:8d:54:97:0b:3b:9d:99:93:54:77:3e:74:34:9c:
08:96:56:26:a8:ae:b6:0e:76:2a:58:b6:c9:f5:f2:ec:ed:42:
39:ba:34:47:36:ec:f1:9f:9b:db:3b:c7:13:d5:7a:46:65:57:
20:eb:f3:38:60:85:24:68:15:03:d1:66:ef:74:48:69:68:3e:
d6:1b:65:f8:de:65:c7:4c:67:37:3b:e9:d6:b9:d0:dd:35:67:
5a:2d:d4:1d:12:cb:94:c4:0f:64:b4:99:aa:0d:1f:83:23:c5:
d0:25:25:60:f6:95:1e:c7:48:83:c9:96:6d:c8:ff:33:a3:7a:
8b:77:53:3c:40:9f:4e:fb:35:a4:01:59:f9:12:9d:e5:b3:28:
44:34:48:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:56:39 2026 by rpki-client