Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: 1ZgIWO51w2K7zvYOXIgNeRuUdXKhmZbEwJdkMYsEInI=
Subject key identifier: D6:02:2D:A7:E1:D7:B4:E9:7D:61:0C:64:C0:A0:97:49:6A:A9:EF:40
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 019FA184317057C73F53911CE8EC4B5E7E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 08F5
Signing time: Mon 27 Jul 2026 03:00:22 +0000
Manifest this update: Mon 27 Jul 2026 03:00:22 +0000
Manifest next update: Tue 28 Jul 2026 03:00:22 +0000
Files and hashes: 1: 22Qs5ZZUH-o_UxeMTTaGlozw9ck.roa (hash: dzmFhhN9JFvpfi1wur97KqUtYf7OFbub2fPBQrwEANI=)
2: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: NYcJLkvHE9dob+ufh7v9TkBmXiD5vV2FXJZAL3+immE=)
3: OOmJ-RkbduxK-k7822kHHTnwfho.roa (hash: Zhhmx3+Bddmr+hDQFTAMK3LPfl5DC3igpcEZIPBCFZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:31:70:57:c7:3f:53:91:1c:e8:ec:4b:5e:7e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Jul 27 03:00:22 2026 GMT
Not After : Jul 28 03:00:22 2026 GMT
Subject: CN=d6022da7e1d7b4e97d610c64c0a097496aa9ef40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b1:1e:2c:56:49:7b:b5:95:98:2e:cb:e3:00:
8c:96:ab:96:9d:68:fe:6c:81:1e:76:54:9c:00:0b:
9b:91:20:4b:9d:c2:ed:09:da:fb:d0:f5:f4:aa:df:
64:0a:b8:b4:54:66:a7:04:90:6d:6f:5c:85:4a:96:
4f:33:1e:6d:c4:db:04:91:be:5e:15:7c:46:4f:a6:
bb:6e:39:b1:cc:9c:bc:b6:39:ce:a2:35:92:dd:f1:
95:a4:f9:eb:83:2e:d1:01:b1:cd:88:d8:54:23:7a:
c7:4c:a9:b3:c4:80:d1:f3:09:77:98:44:f1:94:9a:
8f:11:b6:b8:76:51:65:81:30:3e:93:59:5c:19:1b:
fa:4c:58:f5:9a:fb:56:ad:ca:02:d9:a9:be:2b:23:
1e:b7:23:df:c6:5b:23:c6:ab:41:43:ad:05:31:61:
d2:7e:21:d5:65:50:42:9e:66:15:8e:0c:fa:a2:2b:
ab:1a:58:a0:0a:06:18:d6:0e:f3:c2:e3:d7:78:7b:
46:07:bf:50:99:1d:ca:71:38:80:ab:1e:95:64:a8:
fa:fa:08:b4:f8:bd:e9:a0:53:75:27:f4:78:dc:0d:
e3:15:0e:0a:ac:95:14:1b:f4:47:33:96:d8:1a:f6:
24:61:d9:67:a5:94:4d:8e:03:1f:41:de:44:52:9f:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:02:2D:A7:E1:D7:B4:E9:7D:61:0C:64:C0:A0:97:49:6A:A9:EF:40
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4b:d2:fd:e2:24:8a:38:e0:14:fe:5e:f6:ec:ad:87:cd:9f:
a7:f7:ad:6e:f1:0f:90:f7:e2:0c:b1:2f:2a:53:c0:ff:e9:d6:
d9:e6:7b:b6:6c:14:6f:20:22:61:23:e6:dd:b8:4c:ce:cb:4f:
f3:b0:10:89:d6:cc:51:72:c1:db:eb:39:bf:07:a3:6d:d9:6c:
fc:61:8e:f0:49:b6:45:c6:dc:fb:21:a1:10:d0:a0:e6:34:fa:
5b:b0:96:db:58:73:9d:42:43:67:f7:3f:16:d6:d0:97:36:17:
da:da:30:b6:eb:a2:99:bd:24:2b:e4:42:53:2e:2e:a0:ed:ce:
c3:e2:96:dd:1a:bf:84:f3:7a:4d:36:bb:36:22:5c:5d:57:7b:
07:6b:43:73:9c:40:9e:c7:a2:c7:a7:39:a7:c7:c3:f9:bf:d0:
80:a9:83:a8:b9:27:74:74:25:fd:30:0f:9c:84:48:37:2f:71:
5a:93:b0:2c:06:79:5c:0f:40:b2:18:c4:f8:94:0a:6a:e2:52:
b2:83:6e:b9:58:68:98:7d:9f:71:d5:32:02:a1:29:53:68:7b:
b2:7f:1e:d0:fb:53:7f:dd:f1:8f:f1:55:b9:a1:9a:78:24:d7:
7c:c6:0e:ca:10:04:4f:6b:a9:80:7f:2a:7a:c7:87:d0:c6:d1:
c5:17:39:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:30:04 2026 by rpki-client