Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: AkH4hY/TolofOv2Btnuzb344Sluyi7Gf0jd6TE7DpB0=
Subject key identifier: 2B:40:4E:04:2F:ED:BC:A8:80:5A:35:C2:07:A8:15:D7:CD:EC:CE:1B
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 019FA372F12E5C5684CEAAAED33B02D0EF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 1961
Signing time: Mon 27 Jul 2026 12:00:46 +0000
Manifest this update: Mon 27 Jul 2026 12:00:46 +0000
Manifest next update: Tue 28 Jul 2026 12:00:46 +0000
Files and hashes: 1: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: SRsJ0YA7VgSBpvvnZ7kYp+kXOhHkYgutzS7qnAnvHu8=)
2: IVsntpINLVptcAxi9F9OffThDww.roa (hash: lHhfp2KRoCfz9OytgUFCH4dMCm+ma5lnnpotEWvlFIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:f1:2e:5c:56:84:ce:aa:ae:d3:3b:02:d0:ef:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Jul 27 12:00:46 2026 GMT
Not After : Jul 28 12:00:46 2026 GMT
Subject: CN=2b404e042fedbca8805a35c207a815d7cdecce1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:4e:0d:f3:ed:1e:e7:1f:c1:aa:97:d4:fd:
4b:0b:3b:d6:03:17:8e:3b:9b:ef:6d:d7:79:a2:65:
21:42:75:a4:08:68:d3:56:e7:f8:3c:f3:33:37:1a:
30:41:40:cf:03:a7:6b:0f:bd:f0:f5:b7:17:18:f9:
79:0e:c0:91:19:a6:60:a9:09:79:0e:2d:75:44:0e:
d2:3c:5f:ea:7f:b8:c3:f5:f7:5f:b3:94:d3:35:2f:
72:06:7c:63:2d:89:65:df:85:16:a9:0b:10:16:03:
ff:9e:0b:89:ae:71:e8:ea:b4:c0:b0:05:32:d2:32:
4f:f5:20:b3:99:7c:94:92:da:19:57:7c:c9:42:3f:
19:fa:ad:cd:5d:be:c0:ad:2f:0d:51:b4:a8:e0:95:
ea:72:b1:a7:10:df:68:bd:b8:f6:79:27:da:63:6d:
58:4b:8f:8c:af:8b:b5:26:83:db:f7:41:43:a0:76:
1e:a1:a7:62:82:3d:62:21:65:d9:96:fc:1d:60:90:
e9:64:39:44:18:e6:11:40:38:70:6d:46:7f:7e:09:
fa:75:d6:0a:e8:51:f3:30:af:31:b6:0d:c2:d2:8f:
28:4f:ac:f4:bd:07:ba:c8:75:14:af:fb:ce:08:7b:
f3:fc:78:b8:e0:89:f5:bc:5a:cf:b7:98:09:08:ff:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:40:4E:04:2F:ED:BC:A8:80:5A:35:C2:07:A8:15:D7:CD:EC:CE:1B
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:50:b5:51:b4:0f:b8:7e:4d:36:4b:25:58:f8:3e:ed:21:02:
88:96:18:79:10:47:dc:3b:b6:34:a5:54:01:15:1a:92:56:9b:
c3:0b:00:ad:6e:ad:b8:34:58:f0:2f:04:58:df:62:1d:54:df:
45:e1:98:09:59:d2:14:52:24:d5:00:01:0c:a3:d9:2e:a7:d8:
e5:03:77:2f:a7:4f:5d:aa:f2:7c:9a:6b:ab:87:73:a9:4e:84:
db:e9:54:58:06:ab:55:c4:6f:60:d3:86:ab:49:bc:d1:5c:06:
20:44:c1:2c:fa:cd:88:be:87:95:a8:30:ae:72:f8:c7:77:56:
81:dc:8b:56:76:8b:a5:fb:86:3f:1c:77:74:61:d9:e9:35:ae:
45:c6:4d:65:05:79:84:ea:f8:1b:ea:66:f6:2d:b9:51:50:cb:
f0:9f:23:cb:5c:3e:f6:87:e0:9f:52:4c:d3:d7:a2:65:f8:cf:
70:a3:bd:4c:1c:a6:7c:54:38:49:89:d0:e3:52:82:3a:55:23:
36:84:d3:3e:70:e4:61:7f:0e:00:2a:f6:ca:d6:4b:d9:40:42:
70:30:bd:4a:25:8b:ca:ed:82:83:2e:f3:b7:ce:2d:ee:f4:a2:
95:0f:79:f0:bb:83:f8:7e:96:aa:fa:6a:a5:bf:ec:ed:4e:50:
e0:60:b5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:13:26 2026 by rpki-client