Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: HrCab0jkgEllodRxrl4KPx7UB2SA+K3JDpRO7xBQDAI=
Subject key identifier: 94:97:65:C6:F0:C6:19:47:25:F8:F6:28:DE:41:57:42:D1:D4:6F:33
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 019FA2CEF1694E7DFBF491594ED1865F208F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 1435
Signing time: Mon 27 Jul 2026 09:01:38 +0000
Manifest this update: Mon 27 Jul 2026 09:01:38 +0000
Manifest next update: Tue 28 Jul 2026 09:01:38 +0000
Files and hashes: 1: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (hash: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs=)
2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: txQxPG39wg5SUcg0l/EK7dFlhnTNhyHTRlenaoGvNmE=)
3: OmODl-Dxgvnfb7lh_C-Zh2V9ocU.roa (hash: PmAaIQqyZcT72p+jMNnZFGobOFfukrUMlowL+LPavOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:f1:69:4e:7d:fb:f4:91:59:4e:d1:86:5f:20:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Jul 27 09:01:38 2026 GMT
Not After : Jul 28 09:01:38 2026 GMT
Subject: CN=949765c6f0c6194725f8f628de415742d1d46f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7e:59:5d:5b:eb:ea:38:b4:f0:27:e6:7f:e8:
92:21:5d:3f:6c:a6:c1:22:d7:54:41:ed:67:1c:86:
3a:4f:d5:99:24:4c:7c:c1:42:7c:f0:d0:12:e7:1b:
f3:51:9f:b1:c0:c6:cc:d6:f9:5c:13:46:e7:2a:35:
84:dc:41:bf:5d:c3:21:44:45:be:b0:72:0d:d4:32:
a0:77:c8:ef:3a:c8:cc:77:6b:12:06:55:b3:24:ee:
96:7f:48:67:94:80:0e:f3:07:40:c2:ff:77:da:13:
a4:17:61:0b:eb:0e:92:12:92:41:ee:1a:c8:7c:61:
ec:7f:e4:f1:24:68:aa:c6:fc:fd:05:16:01:44:d9:
c5:60:1c:9b:70:46:38:75:3b:6f:83:5e:c7:bf:c3:
f3:c2:1e:f0:52:11:95:d0:f3:11:32:ff:64:09:60:
75:dc:9d:75:ed:ce:4a:e5:36:8b:16:d1:31:41:fb:
43:51:a6:80:15:f3:98:be:03:cc:37:79:ca:71:76:
03:d7:bf:14:bc:02:af:18:2f:2a:37:0c:10:d7:ee:
12:82:4a:1f:8a:ea:d2:24:ad:71:f7:33:72:6c:b7:
59:d3:87:04:85:1a:41:33:33:c1:63:65:30:23:c8:
9c:e5:88:1a:a2:c1:ea:85:15:b4:aa:68:de:f6:f6:
4a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:97:65:C6:F0:C6:19:47:25:F8:F6:28:DE:41:57:42:D1:D4:6F:33
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d6:93:2e:e4:de:35:0b:e9:d8:41:00:13:53:b9:c2:11:85:
54:0b:af:39:bd:f3:f3:b0:e7:47:29:64:1e:59:47:b3:72:48:
c1:e1:48:29:88:cf:77:b6:01:25:a3:d0:69:39:be:a6:d4:bf:
ff:d2:8b:0e:8d:9f:9e:69:bb:5b:d2:f3:37:40:33:cc:77:4f:
6d:06:80:d8:af:c1:98:e5:05:f4:c0:32:e7:44:e2:3a:50:59:
61:de:c1:e8:dc:1a:5f:26:20:22:bf:3b:d2:28:b2:3d:ce:79:
d5:bd:bd:fd:a7:e4:6e:c7:4d:47:68:b9:b6:8c:ec:08:13:a4:
c5:83:35:d9:8c:58:1c:d8:57:5b:fd:df:e3:74:75:c3:52:d7:
4a:79:51:55:41:51:24:54:c6:5f:58:50:29:54:31:91:28:57:
bd:9a:c4:3d:6d:74:fb:82:73:26:f9:ec:cf:c0:6c:a8:91:e3:
cc:e5:39:14:21:93:56:1a:0f:a4:eb:e7:56:20:7c:02:bd:45:
32:c6:5d:d8:dc:4a:39:9c:a5:83:85:bb:8f:1b:65:14:07:08:
e6:8a:54:c4:f8:f9:52:37:42:a0:52:d4:8b:1a:89:5a:87:87:
52:3f:c9:7f:5c:60:e9:86:75:0b:dd:8a:7f:57:59:c4:3c:16:
c2:3d:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:28:57 2026 by rpki-client