Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
File: 8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json)
Hash identifier: jYPJgLTtAVOVZc43twthIzB/ax8wsmtTakr8E860qy4=
Subject key identifier: D7:FF:F0:7A:93:2F:88:2D:98:46:52:1C:EF:8C:8B:3B:2D:65:1D:22
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial: 019F186797E0E4F98C9E234372BC57A92CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
Manifest number: 0B94
Signing time: Tue 30 Jun 2026 12:01:09 +0000
Manifest this update: Tue 30 Jun 2026 12:01:09 +0000
Manifest next update: Wed 01 Jul 2026 12:01:09 +0000
Files and hashes: 1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: tRJDmj6ye0ySjTB0QGH4uArZaghoIzPHWHkmboobx70=)
2: i2cZnlYGJSDWJ6GKJm4zBpOtiSE.roa (hash: yQNvuB3MUN74TcqegiLU8qLGixGGpPrYKgj9auUBTzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:97:e0:e4:f9:8c:9e:23:43:72:bc:57:a9:2c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Validity
Not Before: Jun 30 12:01:09 2026 GMT
Not After : Jul 1 12:01:09 2026 GMT
Subject: CN=d7fff07a932f882d9846521cef8c8b3b2d651d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:8d:18:90:a0:f9:65:0a:f7:76:99:8f:70:
e7:27:e8:77:85:ce:07:7c:bf:f4:15:d7:b5:06:ff:
02:7d:14:d5:f8:b1:43:91:f7:e5:d9:46:d6:37:39:
f4:9c:fe:51:4c:95:63:e9:fe:ed:83:5f:c0:0c:8f:
d5:54:c4:2f:bd:79:26:fc:c1:fc:65:35:e1:5c:14:
ca:ff:9e:8e:53:84:73:6c:91:a7:6c:91:f8:36:76:
b2:56:dd:14:8c:84:13:af:a9:e0:4f:bf:ed:a5:fb:
d6:da:7c:0a:1a:97:0b:4d:f4:4d:bb:b9:0f:7d:e6:
10:65:32:33:c6:73:75:76:34:2e:e5:fe:5f:2c:e0:
4a:72:21:b2:bb:08:cb:fa:40:2d:71:20:56:9b:f7:
ec:7e:50:11:cc:81:0f:76:4d:09:86:3e:89:58:ae:
ce:26:c1:3b:be:30:19:be:f4:3b:21:af:5e:ad:93:
fe:33:af:5f:e0:18:57:e4:c3:58:a4:91:c5:4a:ca:
3d:d9:c2:38:30:fc:be:5a:74:1a:bc:76:b0:26:f1:
bd:58:b6:93:c1:ac:fd:40:ee:54:77:df:6a:63:eb:
bb:5f:0c:e4:38:91:21:56:42:a5:0d:dc:07:f8:28:
52:42:30:32:85:fb:ac:f2:ff:bb:fa:2d:5a:29:89:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FF:F0:7A:93:2F:88:2D:98:46:52:1C:EF:8C:8B:3B:2D:65:1D:22
X509v3 Authority Key Identifier:
keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8d:6d:4a:a4:6d:a6:0d:04:ab:ea:72:02:df:93:49:aa:e9:
15:23:3e:a0:67:83:a5:20:c6:61:5d:4f:a3:b5:09:bd:f5:1a:
fa:cc:de:a1:8c:6f:f9:53:05:37:58:44:75:e7:a2:78:c5:8e:
93:2b:88:fd:2b:e3:39:4a:07:c9:00:f4:ec:17:95:e2:07:c2:
f9:f1:09:b0:56:f6:2b:68:cf:da:7e:34:60:b5:06:ed:61:ec:
41:ae:60:42:b8:d2:35:66:54:71:09:39:b5:8b:8c:eb:c3:b1:
a3:f8:2c:bd:21:79:2e:f6:d5:8b:37:63:f0:fc:f8:f3:2b:58:
b3:6a:27:29:48:bc:14:a2:90:0e:ee:77:0f:9c:e2:bf:06:0d:
94:a1:b3:04:b5:30:37:64:c0:67:95:d2:9a:e8:6b:30:1f:5d:
41:7c:1c:31:6b:b2:13:39:74:35:c5:ac:62:d6:2b:2e:ab:91:
8d:26:19:2a:67:87:0f:9e:d6:bc:c5:b0:d5:4c:c8:68:af:b8:
37:2c:e8:17:41:b2:a8:72:04:22:98:42:96:e2:4f:70:4c:23:
1a:c1:4f:eb:eb:a4:73:58:cb:07:71:a9:1e:f1:16:76:00:e3:
f7:67:58:64:89:f9:53:0e:13:dd:b0:9d:f6:a4:1b:cc:56:59:
94:ee:3a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:55 2026 by rpki-client