Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: RSjVSZgmhuwC+xOpTftOe0UFgRUZDYYXJEmAb1HRPG8=
Subject key identifier: 52:33:6A:14:F9:13:60:34:D8:0A:30:F8:0F:04:27:51:98:81:04:25
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 019FCC386C877C2DBBF9DB4BAA5F4E9F8150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 15DB
Signing time: Tue 04 Aug 2026 10:01:17 +0000
Manifest this update: Tue 04 Aug 2026 10:01:17 +0000
Manifest next update: Wed 05 Aug 2026 10:01:17 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: 2TtCsuJusLiGLACoBnsrfonvjUz6VZyYuCgqKmMnO94=)
2: Fj143MGHKktmJd-EbkW5Fscgq7Q.roa (hash: qVq1ZDi68rbqJdslxCJ44DoiVXJKtqjpcHKrD37I/Xk=)
3: HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa (hash: Lh+MTs7zk3xzxtVQ8DETff3QLgsLbSUualTWlhIFivY=)
4: WHeuBr41SRHYb97wRA-9N6rZlYY.roa (hash: JKr5DtUCS/MHFFPv5d8SACsCIRv8QZPYpdOpKjP/pqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:38:6c:87:7c:2d:bb:f9:db:4b:aa:5f:4e:9f:81:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Aug 4 10:01:17 2026 GMT
Not After : Aug 5 10:01:17 2026 GMT
Subject: CN=52336a14f9136034d80a30f80f04275198810425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:f1:ad:a7:ea:fb:00:ea:a7:b7:d0:ce:6f:
71:ad:bc:38:6b:36:c0:b5:d0:cb:f2:8e:4f:f9:0c:
25:e7:78:ad:45:74:12:2f:19:f7:8c:dc:0a:3d:63:
91:81:cf:5e:44:09:ce:58:50:e8:93:7b:07:2b:ec:
25:a2:2a:b4:dd:e8:3b:ea:f7:3f:b5:3f:e4:aa:f3:
bd:95:1a:98:8a:15:cc:8c:7d:8e:33:97:c2:50:7f:
6a:f5:ca:09:33:88:35:ce:ad:79:7f:7d:32:ad:8f:
3e:1a:2f:7d:de:3e:75:40:c0:81:2c:fb:78:52:e8:
16:83:10:bc:d3:3e:e3:45:c6:a4:56:07:67:ce:8d:
64:d5:2e:9e:85:76:58:e0:38:75:94:34:e4:cb:7b:
e8:fe:05:cc:09:f7:7f:0b:89:0f:e2:90:61:ff:fb:
d9:fc:6d:7d:20:17:a9:a4:01:a5:03:4b:1d:39:2e:
9a:ba:4e:73:eb:4d:8d:b8:89:3e:86:cc:d2:bd:c4:
50:1a:26:a4:0b:b7:a7:40:64:9d:31:c1:bc:97:3c:
8d:b4:4a:e4:e9:92:50:9c:d7:6a:ed:55:89:ae:9c:
cc:e5:ce:e9:f5:78:a5:e0:68:96:b1:a2:05:ca:12:
b0:b7:33:49:e4:c4:57:96:f1:ab:f1:3b:5e:20:d5:
d6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:33:6A:14:F9:13:60:34:D8:0A:30:F8:0F:04:27:51:98:81:04:25
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:45:7f:1b:b4:19:91:e8:96:c6:43:55:f4:20:da:3e:85:fa:
f4:29:d8:48:d6:6b:fd:ba:ba:03:48:d4:aa:0c:59:0e:75:d2:
d1:0d:d9:b1:7a:ac:58:f7:a8:01:09:73:15:f7:6c:f7:6f:b6:
8a:ef:42:64:b5:9e:f7:e6:4b:5d:8c:98:a1:52:56:f9:c3:e0:
45:f1:da:b3:37:04:0d:35:08:e4:e8:3a:42:4d:bd:e9:9e:aa:
36:f5:03:96:58:a4:87:41:d4:17:e3:70:e3:82:fd:73:a5:b0:
65:fc:44:2c:c9:88:8b:d7:36:f5:5c:be:97:ce:c5:f5:00:29:
62:0c:6d:f1:c4:a2:47:05:ca:70:86:e8:04:2b:e3:b6:42:30:
c1:9e:eb:5f:c0:64:3f:f6:a7:5a:2a:30:06:0f:04:7e:fc:9b:
d1:09:40:dc:84:f7:a6:51:96:3e:9f:90:ac:d7:92:f4:bd:81:
78:bb:47:70:68:8b:78:53:3e:ba:a4:b8:37:b0:0d:55:86:6e:
92:4d:34:10:61:2c:15:0f:05:40:4c:9e:88:ff:11:39:35:0a:
d6:17:99:92:c0:24:21:93:9d:3e:ca:75:ec:41:10:ad:fb:08:
9a:c2:ec:95:cc:f4:41:5f:8f:76:22:6a:2e:cb:36:b9:3e:b7:
de:cc:ee:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:38:45 2026 by rpki-client