Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
File: 8zk0PMbVHduONjgpmhu0lfRYCSE.mft (raw, json)
Hash identifier: thaaKpm5lBfwx1hakl/KCQjYxURb5DWDKuZpTPWCOXM=
Subject key identifier: 3D:A6:7F:C6:28:E3:71:9C:C7:C3:EB:64:4E:26:DF:0E:C9:BE:F7:EF
Authority key identifier: F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
Certificate issuer: /CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Certificate serial: 019FA372DC6AE589E39A802906C9E3BD23DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 12:00:41 +0000
Manifest this update: Mon 27 Jul 2026 12:00:41 +0000
Manifest next update: Tue 28 Jul 2026 12:00:41 +0000
Files and hashes: 1: 3ZbP8D4oyhCe4u5mlugxkhUP_G4.roa (hash: mYQ4ggMgVLrFbz01ZBuOhgHTwYfwTmz0/Kv0k+37TBo=)
2: 8zk0PMbVHduONjgpmhu0lfRYCSE.crl (hash: CC66J8x/SdAcISStg0o9prgQEWhkD+I0rn7o77QzrMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:dc:6a:e5:89:e3:9a:80:29:06:c9:e3:bd:23:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Validity
Not Before: Jul 27 12:00:41 2026 GMT
Not After : Jul 28 12:00:41 2026 GMT
Subject: CN=3da67fc628e3719cc7c3eb644e26df0ec9bef7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:24:6c:22:f1:3e:fc:36:5a:ec:89:f5:65:
1f:4e:38:63:6b:a8:75:a2:88:e6:f1:97:06:39:12:
0b:aa:69:8a:80:aa:62:3c:59:bb:0b:1c:3a:6d:ee:
a9:d3:16:7a:12:79:9d:bd:55:a5:11:fd:09:99:51:
47:db:52:97:ee:d8:c7:72:11:28:d4:19:ea:b1:b0:
f4:00:d2:9a:ac:9f:31:a3:a5:b9:0c:cf:6c:70:f2:
b5:51:a9:36:8f:a7:11:c7:4a:4a:d6:3d:36:e4:c7:
e7:69:e3:51:ac:3d:79:2b:7a:24:c1:10:b7:73:03:
1e:f9:eb:aa:0c:1a:5f:b2:6d:fe:30:87:bd:15:3c:
fe:ea:35:50:74:af:79:bd:26:9b:03:9a:ba:49:c7:
83:c9:f2:03:53:4e:00:cc:be:f6:cb:04:9f:57:06:
14:ae:8c:9c:bb:7f:c0:e5:39:9d:3d:e0:a3:d0:e5:
a0:9a:77:c8:23:fe:4b:4d:d5:75:f6:b3:4d:83:fe:
56:1d:78:c3:44:05:3b:ab:c3:92:7c:95:10:aa:22:
c9:ae:b3:64:16:ee:f4:02:0f:cd:7e:8d:1e:05:94:
bf:0e:ab:2a:83:85:9f:94:e0:3f:9c:3d:be:64:69:
81:f1:01:66:f8:c0:84:27:57:db:58:7f:8e:76:9a:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A6:7F:C6:28:E3:71:9C:C7:C3:EB:64:4E:26:DF:0E:C9:BE:F7:EF
X509v3 Authority Key Identifier:
keyid:F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6c:32:a6:ee:1c:54:2a:f3:47:94:86:8b:1f:79:6e:ad:28:
03:79:d1:98:5b:05:72:9b:e1:f0:09:29:81:a9:f8:5d:69:91:
57:2f:9a:c0:ef:eb:25:e5:aa:57:9e:d2:a1:d2:33:25:71:e2:
dc:7a:b9:64:71:a6:b4:d5:8f:46:25:08:51:8b:ca:b8:c2:d7:
3f:98:f9:8d:db:e7:ce:f5:3f:70:8b:3c:47:fe:89:96:62:2b:
c7:7b:53:28:26:8b:70:1d:59:52:b0:cf:c6:63:cc:06:ae:84:
e4:d7:57:4a:f7:88:a2:1b:c5:f3:12:fd:e4:60:a5:7e:5e:64:
24:88:2d:24:44:15:ec:24:7f:aa:02:e7:4b:20:71:3f:86:c0:
7d:c7:8c:28:af:c0:9a:8b:13:fd:f8:5e:8d:81:6a:49:89:72:
37:32:3b:87:e9:2f:12:66:72:3c:27:76:57:a8:7d:f9:51:f3:
3a:aa:ea:1e:bd:22:e6:07:fd:6a:37:55:5c:df:72:0f:d9:a9:
7f:3d:a5:c4:24:62:6e:fe:4d:3c:30:c2:74:7a:35:78:35:64:
a5:e3:30:3f:5c:6d:6a:3e:30:36:ee:73:ef:e4:a9:da:df:57:
68:09:d6:1a:9c:04:96:77:52:55:07:15:73:d8:24:76:95:be:
e4:6c:80:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:36:46 2026 by rpki-client