Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: bu8/IT04ft4+VFbNBrQovODIy54JmCFLA2b0pNt7BEM=
Subject key identifier: 0F:5C:66:7D:A3:1D:87:0E:AD:62:7F:9B:3C:9F:10:B1:7A:18:7B:D5
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 019F1867E5EB2CC6B3D0D4DD8407ABFE5AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 1398
Signing time: Tue 30 Jun 2026 12:01:29 +0000
Manifest this update: Tue 30 Jun 2026 12:01:29 +0000
Manifest next update: Wed 01 Jul 2026 12:01:29 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: 8JJzn5nGg22Q1xQoSoWi/RdhYyHeCrf/VKbUX4NL80U=)
2: GOJdmQeTfRZxvLli-b1t8ivPIP0.roa (hash: rE4/LNjEHFf2tYypahcaP12dhBhPp76Zx6vdg4QGZdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:e5:eb:2c:c6:b3:d0:d4:dd:84:07:ab:fe:5a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Jun 30 12:01:29 2026 GMT
Not After : Jul 1 12:01:29 2026 GMT
Subject: CN=0f5c667da31d870ead627f9b3c9f10b17a187bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:b4:f7:09:be:a6:ad:02:60:f5:c3:3f:7f:
7a:75:78:cd:7d:43:b1:6b:ca:4b:1f:db:d4:a6:a1:
d5:39:a7:1f:42:cc:ea:05:78:72:40:18:ce:5d:eb:
89:43:25:75:d0:67:8f:41:4a:03:24:a9:b2:9b:94:
71:44:be:cd:54:19:5f:b0:7b:dd:ba:6b:6e:a4:c3:
21:c7:38:42:41:db:63:cb:aa:c1:cb:ff:47:1b:4e:
fb:ce:86:20:07:60:64:d9:8a:34:42:d9:1b:0f:02:
9c:65:64:a4:bd:08:1f:cd:97:65:48:1d:22:08:76:
45:cb:86:f1:26:c0:6d:54:e6:91:7e:04:06:67:f1:
db:ec:7b:73:4a:b1:e2:2b:d0:54:6e:1d:82:96:9e:
0a:77:bf:8c:b2:5a:11:eb:9d:04:0d:9b:86:66:8d:
55:e9:53:51:21:03:b2:25:5f:76:5d:8d:ed:27:a6:
87:4c:34:a6:2c:fe:67:4b:17:e5:e8:15:5f:3a:29:
16:92:59:4f:62:54:d7:3d:a7:25:d6:9a:a3:4f:99:
f5:6c:ff:b2:11:31:84:6d:19:36:7c:9a:6c:9e:ee:
0e:50:03:1f:26:19:14:05:a4:3e:02:40:e7:d4:83:
ee:0f:df:f3:af:ef:08:59:3e:c7:4a:d5:a3:ea:fa:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5C:66:7D:A3:1D:87:0E:AD:62:7F:9B:3C:9F:10:B1:7A:18:7B:D5
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4b:38:b1:8d:df:c8:86:6a:e8:5b:c2:a9:4d:9a:35:1a:ce:
c6:97:dd:61:72:b8:66:35:36:2c:4a:5c:8d:50:f0:5f:2d:a4:
55:69:a1:7f:ec:25:fd:eb:cc:b2:c2:74:86:ab:2f:96:e9:88:
95:0e:dc:0f:a7:9c:b3:a3:19:75:9e:a8:93:b6:b3:ab:63:fd:
7d:a0:b4:f8:e4:d2:52:d5:c5:bf:d3:b8:1c:9e:e0:cb:d6:0f:
57:c8:42:ff:82:03:5d:21:4a:e8:9f:30:cf:fc:db:27:d2:13:
a0:89:9d:6d:1c:4d:5c:7f:17:99:76:5e:9c:8d:34:1f:59:4a:
41:1a:b5:c6:d7:78:88:33:6d:1c:6e:3b:e6:36:cc:30:54:a4:
43:35:1d:7c:01:58:3f:da:7d:34:0b:82:6e:41:62:b4:3b:ac:
fd:45:9f:cc:53:e5:2d:c8:cd:a2:84:1d:fb:92:b4:a0:a4:70:
dc:cd:4a:22:33:62:77:cc:04:5e:30:b7:e9:7d:71:74:dc:56:
07:12:8b:d6:36:d2:40:bd:11:9b:b6:eb:0e:39:a1:1a:ba:cb:
d2:a8:f3:70:eb:24:f5:18:12:2c:d3:b3:e9:d8:ae:74:65:67:
b1:86:ad:b6:c1:4f:20:20:d9:7f:14:2d:a6:01:5f:3b:71:d1:
1e:4c:2a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:37:18 2026 by rpki-client