Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: XgHL9tiViHvM6Hdrm2yXRHxsXScvqxwIbd+7sWvMsp8=
Subject key identifier: 76:78:4E:C5:85:13:5A:87:A8:FD:84:CA:37:2D:BF:62:0F:E2:BB:62
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 01A0016F83A8355E941D1744A22B8A773A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 18ED
Signing time: Fri 14 Aug 2026 18:01:20 +0000
Manifest this update: Fri 14 Aug 2026 18:01:20 +0000
Manifest next update: Sat 15 Aug 2026 18:01:20 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: aw8SDXySVNUn+am0qR7o+LSoeqnO3p7yfE+AdCVMu5c=)
2: IxS3kvRzUMr-NtO3nifzXWWmSJk.roa (hash: qpDGvej7zkl86WzGIYhDDPadX2GYJjhi3gTeMhgBZQc=)
3: SFE5HwFeeJrezj4ibh1knL4-c9k.roa (hash: sbuJSFJ3P5x9iliJOK4C/RfPfo5sFVvKp2ueiDAMwxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:83:a8:35:5e:94:1d:17:44:a2:2b:8a:77:3a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: Aug 14 18:01:20 2026 GMT
Not After : Aug 15 18:01:20 2026 GMT
Subject: CN=76784ec585135a87a8fd84ca372dbf620fe2bb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:a2:e6:fc:0d:9a:8e:62:ca:ff:c7:b6:06:
97:9b:ba:4f:25:3e:b2:69:e8:a7:14:d5:48:68:dd:
3a:17:35:5c:03:cd:8e:5b:7f:16:8f:41:2f:34:5f:
38:41:41:ac:8e:4f:ca:d9:bf:1d:21:6b:18:9d:78:
58:84:1d:e4:80:e9:b3:27:c5:b2:0b:f0:7e:fa:f9:
f6:cb:31:18:0a:47:86:ff:38:10:61:fc:e5:b9:27:
66:ad:ea:9c:53:7a:3f:4a:1d:9a:f0:02:b6:35:00:
ea:e5:35:bd:b3:6b:27:ad:e7:85:96:25:03:0b:32:
8c:13:f9:a5:c7:42:6a:48:57:6b:4c:ad:65:05:e4:
04:1c:59:c4:a5:2d:88:11:79:f6:0a:59:a6:b2:b5:
23:ca:42:36:d5:3f:29:28:a0:71:7a:11:9e:82:11:
4f:24:d2:46:57:65:f8:a3:17:17:93:67:03:91:2b:
cb:ed:24:3a:6f:c0:af:4b:b1:93:54:1d:ac:77:19:
01:00:24:5a:b1:22:1d:be:52:8e:1d:9c:81:6c:94:
13:0d:e2:24:ec:0c:a7:26:41:07:2f:e5:b4:bb:53:
e8:7e:d0:aa:24:bb:f8:79:13:56:73:b4:5f:b9:54:
b8:a6:b6:e6:87:ae:62:bf:59:bc:25:88:d5:75:f7:
41:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:78:4E:C5:85:13:5A:87:A8:FD:84:CA:37:2D:BF:62:0F:E2:BB:62
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:41:d8:65:74:17:d8:b8:48:96:21:4e:07:75:c8:9b:14:17:
fd:a8:94:a0:cd:fe:16:c1:5d:c0:1c:a5:4b:d7:20:cc:e8:3e:
f9:c3:37:1a:dd:e4:df:27:d7:87:dd:d9:61:48:ee:14:4c:fb:
77:77:fb:c4:0b:2e:82:ab:17:8c:3e:90:ad:ee:37:5a:3b:51:
cb:da:2a:9e:4d:71:9a:66:fe:d0:83:38:d0:b1:e1:38:ca:ee:
c9:37:49:f4:e1:aa:9a:17:b9:d4:68:72:9a:f8:82:d9:95:2e:
2e:67:d7:bd:25:1a:62:65:fc:57:db:b7:9b:4c:a6:88:96:84:
67:8e:66:a8:a4:ec:42:af:cf:c0:b7:97:be:18:ee:f8:ee:e2:
7a:6b:4f:6e:ef:aa:ad:d8:29:d9:c0:d7:44:a2:8e:4e:f7:eb:
c7:4a:58:19:ea:f8:ad:34:86:89:82:9e:5f:1f:2c:c9:ee:4c:
1a:86:a7:e9:01:86:bb:b8:51:6e:eb:87:17:f7:86:fb:48:1e:
be:16:6a:e2:cc:55:74:24:dd:f1:fd:a8:45:cf:7c:4e:a0:a3:
c9:4c:81:2f:c0:06:18:d9:0b:3f:e4:61:3d:cf:ed:06:a0:90:
eb:d7:f9:7c:92:e7:59:f7:d1:03:75:10:b3:4b:60:29:ad:cc:
c1:8f:42:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:58 2026 by rpki-client