Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: YH8sNq4hqx27WJzN4MmABpg9gOLSnBcoWs1IeqFXPLE=
Subject key identifier: 1E:01:33:D7:A2:6B:BD:9D:22:0B:94:CE:26:E7:CA:26:75:1A:C9:B5
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 019F189F0C3DD7082FD3EC9D917A570F8C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 0989
Signing time: Tue 30 Jun 2026 13:01:44 +0000
Manifest this update: Tue 30 Jun 2026 13:01:44 +0000
Manifest next update: Wed 01 Jul 2026 13:01:44 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: JJ7CNAMNu3bM3mYYcaFqAaMEKGIvv3kzwhkVQl6D8Rs=)
2: CJhFdSugh2xrtXcQtigps8wHu28.roa (hash: dLTf/Etn9ztfuP7WaPG+Vc9FZ4tRdTOgYexvxbXPjIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9f:0c:3d:d7:08:2f:d3:ec:9d:91:7a:57:0f:8c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Jun 30 13:01:44 2026 GMT
Not After : Jul 1 13:01:44 2026 GMT
Subject: CN=1e0133d7a26bbd9d220b94ce26e7ca26751ac9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:27:7c:7f:b7:f1:6c:3a:cf:a4:37:ba:b0:
ef:ba:7d:18:a6:2c:a8:f4:b2:92:b8:bc:20:07:c1:
79:04:9b:e5:d9:31:be:85:42:b9:34:16:38:e3:4c:
7b:8d:2d:80:48:f3:75:bd:d4:2c:6c:b1:bd:42:bb:
fb:b4:04:51:85:20:99:14:eb:99:44:14:a5:75:ca:
d9:93:4b:fb:c3:fe:8a:a4:4b:23:26:c1:b5:e2:ee:
5e:95:52:56:6f:49:46:00:06:c5:e5:a0:bc:92:7d:
a1:fc:bf:37:01:2e:e6:b4:c0:bf:e1:25:74:b4:fb:
66:3c:8e:58:e5:0a:5a:b7:ce:d8:51:14:b0:0e:a1:
a6:db:9e:25:7b:46:32:a0:33:36:82:2c:5d:6c:ee:
40:37:85:11:53:f7:3d:0f:43:2e:c5:e8:d8:4e:cb:
43:eb:d7:31:5d:b3:8a:e5:1f:08:cd:2a:ba:9b:11:
2d:74:62:55:03:68:8d:39:97:c9:00:77:cb:ec:35:
73:dc:72:cb:b3:b3:d2:3f:00:b5:19:48:26:68:f2:
70:a7:37:8f:7d:17:f0:2a:19:fe:7b:4e:0c:d3:99:
a0:42:70:fa:0d:2d:2a:3c:43:ae:69:36:86:22:94:
6c:b4:27:4d:0c:73:4a:9d:47:3c:56:b5:c2:9d:c9:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:01:33:D7:A2:6B:BD:9D:22:0B:94:CE:26:E7:CA:26:75:1A:C9:B5
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:af:a6:24:9b:f0:85:06:d4:3a:65:50:dc:d3:96:4a:f9:4a:
91:cb:38:fc:2d:c4:8b:3c:18:89:b1:10:f8:07:d3:1a:d1:8c:
6b:24:7a:6c:c0:d0:45:84:a2:ce:2a:34:8c:03:56:66:38:42:
f6:22:bf:81:22:2f:bd:cc:80:42:df:2d:1c:10:00:60:47:68:
24:66:c4:5a:24:28:5b:d6:fe:c0:54:90:21:0b:b6:3f:59:ca:
1a:35:d4:b0:fc:94:c9:77:c2:a9:e8:0f:26:ac:1b:ff:05:5f:
58:a9:7c:f5:ed:7d:2c:29:9c:fb:74:64:2d:d2:b4:2b:75:bb:
39:5c:fb:3b:22:8b:0e:e9:d5:18:94:c9:d8:e9:1b:32:60:8e:
eb:20:d8:31:14:6d:26:98:36:34:ee:53:81:ea:64:86:a2:96:
e7:5d:f1:01:d2:8a:8b:7f:64:f1:9c:af:21:cb:61:3e:70:e8:
46:18:3f:9b:b7:59:cc:b8:e4:59:f3:43:b6:e2:23:34:b7:87:
3b:f1:84:25:89:ed:ff:b0:e5:8e:96:bb:d1:60:27:c7:07:23:
60:a3:01:60:f3:c8:f4:70:99:18:c8:f3:18:98:d3:ba:9d:5f:
b8:40:52:51:ad:e7:c9:e8:b9:fd:bd:3e:bc:37:dd:c1:4b:2d:
ec:d5:d6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:18 2026 by rpki-client