Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: aHBH04L5bGJgN03L5HWNuwV6aL27OBjnLT3wWBUiHYA=
Subject key identifier: 7B:B7:86:D4:93:D0:63:47:38:30:3E:AE:B1:EB:3E:3C:38:5C:3B:16
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 019FA071A59AA99827CDB7441A674A75788A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 0A8F
Signing time: Sun 26 Jul 2026 22:00:30 +0000
Manifest this update: Sun 26 Jul 2026 22:00:30 +0000
Manifest next update: Mon 27 Jul 2026 22:00:30 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: MprOGEiAH/JSsMk0/oggzjGA56Ib3ALhHQhqK86g4e4=)
2: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (hash: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ=)
3: iLu5B9aeu4NSBPHA9ivJ0i8Z4AA.roa (hash: acJKMRQ5Omks2WW0pWsL2TS7UwZ6+sYIZuHt+6L6NH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:a5:9a:a9:98:27:cd:b7:44:1a:67:4a:75:78:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Jul 26 22:00:30 2026 GMT
Not After : Jul 27 22:00:30 2026 GMT
Subject: CN=7bb786d493d0634738303eaeb1eb3e3c385c3b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:0b:c2:b6:ae:99:48:ec:f4:26:9b:8e:8d:
a0:71:e4:56:c6:02:4d:b3:04:2c:3d:7f:a2:1f:9a:
8d:b2:85:ae:41:bf:8c:e4:3a:61:2b:ca:2b:83:55:
f2:c4:eb:35:00:b6:71:93:43:c4:c5:25:e2:8d:3b:
82:1d:be:51:50:f9:c1:c6:6a:ce:4f:2d:a0:07:ab:
29:c3:a3:d3:c1:5c:31:8c:67:e6:5d:f2:c0:a5:78:
4f:a2:70:ab:fb:b1:7b:e4:bd:4e:e4:a9:1d:54:1b:
62:be:10:37:20:8f:25:ef:d6:45:3d:15:51:c5:2c:
92:c7:d8:8a:e0:d1:76:fd:4e:32:2c:38:91:c7:cb:
1b:12:6d:93:ac:58:c0:82:04:3e:18:28:32:68:d8:
de:ea:60:4a:5a:8d:ac:fe:8c:b9:e1:6c:56:12:84:
7f:b2:00:7d:44:55:7d:1f:da:e0:ac:3a:31:5b:3b:
1b:2c:d5:74:5a:51:b7:e7:3f:a2:bf:84:fa:5a:7c:
66:84:ba:7e:bd:65:19:a2:08:70:53:1d:d8:12:26:
6c:44:2e:d4:40:62:96:3a:4b:2d:90:3f:36:da:c0:
47:0f:5f:7f:a5:05:27:2c:25:9a:39:66:92:0c:bd:
4a:f3:1f:08:c8:4d:86:89:3a:c7:c9:75:ad:89:47:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B7:86:D4:93:D0:63:47:38:30:3E:AE:B1:EB:3E:3C:38:5C:3B:16
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f8:8f:89:b9:e9:b3:4e:43:44:7e:ff:e8:92:a4:33:59:31:
c1:8d:a6:47:ff:87:9b:66:53:c9:05:a4:99:51:58:75:e9:27:
39:46:46:78:ce:2e:ac:db:60:2a:24:e3:5b:af:8d:d8:e8:1f:
88:dd:f1:ee:b1:06:be:45:63:c0:e8:1d:f4:8f:a7:44:91:85:
bf:ad:96:8e:b8:39:7c:58:25:31:8e:f3:bc:1a:f8:35:46:d4:
d6:5c:ba:29:70:4e:fc:d0:ed:6a:89:0a:f0:28:6c:1a:f0:4c:
8b:e4:91:05:19:ad:af:48:9a:1f:2d:6d:4f:8e:84:65:39:51:
d9:5f:ab:a8:42:23:6b:3f:12:fe:c0:07:71:0c:8e:59:c8:c8:
fd:17:50:93:76:fe:6e:4d:90:5b:16:b3:38:cf:f3:1f:77:b2:
fb:17:c6:55:7f:5a:01:05:00:20:40:b7:a7:92:7a:e6:f1:f5:
94:5f:09:5f:95:47:b7:e7:36:8a:6a:60:64:00:5b:2e:75:2c:
79:ab:fc:89:55:fb:e6:a4:79:7c:73:f3:93:ec:a5:2b:ca:ff:
42:e0:5a:0b:56:1e:ba:10:28:33:b5:22:ec:fb:6c:a7:ae:b6:
05:0f:1f:ea:5b:f2:50:3f:3c:8e:ba:46:18:b1:4f:97:eb:4f:
1c:7e:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:08:44 2026 by rpki-client