Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: OH53rQy2wILzcX7/rLIoP2et0arOZPnXw/9uwiFnq+U=
Subject key identifier: 72:9D:D0:1B:6E:95:B0:BF:F7:C3:9A:96:58:DB:9B:10:01:08:00:DC
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 019F81F9B052B81B8F2AEBFD0E8760A2870D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 0AAC
Signing time: Tue 21 Jul 2026 00:00:52 +0000
Manifest this update: Tue 21 Jul 2026 00:00:52 +0000
Manifest next update: Wed 22 Jul 2026 00:00:52 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: h8YSt+WhDTPxk0VqcmpSBt1D/7yCghWQT3vr5dAWIzw=)
2: L2SGUtmn8iVoAZusJiJO0lWPz-c.roa (hash: tzCEkWtWLJDnUs8JcskBJsxe43rrrZgahQVNHwJxPJs=)
3: _p7le5gIIWbAoXoedbYiYmj5NdE.roa (hash: CNMW3XBWI+i2aIdqqxnzyTpertxlov4CAJZZ/pSHhYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:f9:b0:52:b8:1b:8f:2a:eb:fd:0e:87:60:a2:87:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Jul 21 00:00:52 2026 GMT
Not After : Jul 22 00:00:52 2026 GMT
Subject: CN=729dd01b6e95b0bff7c39a9658db9b10010800dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:47:c3:a6:fd:46:f6:70:73:f5:52:aa:04:
2d:8c:2f:c4:fb:74:8f:17:07:80:a1:a0:29:b8:c4:
64:2a:76:39:19:64:b8:cd:0e:6a:0e:1c:79:7e:dd:
54:ad:87:f1:8e:44:ff:c0:9f:a9:47:72:d3:54:ee:
bd:16:49:a3:39:ae:cc:77:8a:de:d8:5c:40:ff:a6:
65:18:e7:14:fe:d3:f2:a4:a4:52:98:21:07:31:f6:
3b:7f:8a:34:03:f1:b4:a2:f7:43:cc:04:9c:cb:7c:
4c:b5:8c:90:27:d3:c6:39:09:2f:a9:48:6e:58:5c:
0b:c5:40:bb:ba:57:92:1d:00:36:00:77:a2:f5:fd:
7b:e5:2c:5a:50:9a:73:6f:35:6e:6a:d9:3f:60:6a:
b8:f4:d6:cc:74:95:02:51:7e:02:db:2e:02:1f:df:
94:3d:5e:60:65:8d:4b:ba:0f:3b:66:92:af:99:be:
bb:f0:c3:92:4a:a7:60:23:51:15:64:f9:6d:98:ef:
77:b6:2e:a9:2d:43:85:4e:6a:8f:c2:b5:e8:20:0b:
34:36:70:53:c4:bd:3f:6f:0e:c7:14:c7:40:1b:47:
12:dc:23:ca:1b:24:2b:a8:2e:14:21:bd:03:65:aa:
3c:2a:12:9b:94:b6:1a:0c:d0:68:61:f2:13:6e:46:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9D:D0:1B:6E:95:B0:BF:F7:C3:9A:96:58:DB:9B:10:01:08:00:DC
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d3:f2:c0:63:ab:3b:32:9c:42:0b:b0:7d:d3:f7:e3:a6:c5:
29:7c:e3:18:47:7e:43:fa:a2:ec:c4:6f:6c:31:7b:b5:15:9b:
bb:f6:2f:1d:c4:2d:be:57:38:f2:d4:d9:87:37:fa:df:f6:3a:
bf:e4:13:a0:48:a6:b1:09:b0:4c:6a:99:97:05:20:b4:0e:df:
d5:90:b6:1d:ec:4d:02:4c:36:f7:37:3f:d9:a2:c3:4e:06:36:
1f:74:59:23:03:62:fe:2b:aa:11:66:bb:6f:24:ca:81:46:4b:
c2:6e:ab:48:e9:d9:95:29:3f:3f:dd:ab:a9:65:45:c0:c4:81:
af:2c:66:91:49:46:d5:d9:4d:1c:d5:fc:4c:49:7d:df:6d:b5:
dc:5a:ba:66:f3:87:c5:19:af:cf:14:bb:34:ae:c4:a8:09:ac:
df:fe:06:f4:52:60:4a:92:ed:39:88:67:ae:65:a1:1a:6b:09:
8c:0b:52:4a:4f:9e:3b:b7:89:b2:86:9b:b1:1a:59:42:32:ef:
1b:93:f6:f3:86:0b:97:f1:0d:ec:14:c0:15:80:50:c2:6d:5e:
f7:a7:e6:90:46:9d:fd:ac:51:31:1d:17:83:d1:b6:73:aa:55:
37:a8:17:78:82:ac:76:a4:38:ac:aa:64:01:56:34:a0:6a:89:
cd:42:55:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:53:17 2026 by rpki-client