Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
File: 8AI84rpaHU_QpeIn3nTLxB0rucg.mft (raw, json)
Hash identifier: dgvVGAtNEVtMy4mzrG4hhtwlQNGdefYgmzcUR3SsQlY=
Subject key identifier: 3A:10:E0:51:3E:53:22:D9:D8:C6:C3:17:F7:5C:5A:7E:79:42:7A:1C
Authority key identifier: F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
Certificate issuer: /CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Certificate serial: 019F189E61BDAF37BA41BB19FA9A3D2AC55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
Manifest number: 16D3
Signing time: Tue 30 Jun 2026 13:01:00 +0000
Manifest this update: Tue 30 Jun 2026 13:01:00 +0000
Manifest next update: Wed 01 Jul 2026 13:01:00 +0000
Files and hashes: 1: 8AI84rpaHU_QpeIn3nTLxB0rucg.crl (hash: sSZLr8p5d3Llk9e7sNARPPO0bGKeRTa0lMx8rjwwato=)
2: w2Ta-rPPbmIQNKq-ipxVWX-8dg4.roa (hash: gcIiCCsS3PcYcJA4aDFua+5XE66yaXHV16D0VY59VUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:61:bd:af:37:ba:41:bb:19:fa:9a:3d:2a:c5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Validity
Not Before: Jun 30 13:01:00 2026 GMT
Not After : Jul 1 13:01:00 2026 GMT
Subject: CN=3a10e0513e5322d9d8c6c317f75c5a7e79427a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:eb:3a:f8:0f:18:72:6c:d8:a5:c3:65:ae:c5:
72:65:47:90:ae:34:aa:9f:30:00:84:b8:b2:be:fb:
31:83:da:8f:50:03:f4:ac:31:f6:61:ec:2b:03:55:
47:f4:d8:ae:9b:3d:c1:9a:dd:ba:4e:97:6e:d8:6b:
a2:55:6d:9a:44:b9:8a:64:54:3a:2c:dd:22:a9:4d:
a8:e3:83:06:4b:62:e4:8b:35:1c:14:0c:ec:5f:4b:
6e:52:7f:b5:2c:23:ec:20:2c:9b:6e:2f:5f:bd:a5:
5c:60:93:b3:a2:6a:57:3a:41:89:28:7f:61:93:87:
a9:0a:16:e5:1a:bd:51:f4:e2:ec:a9:f8:af:fd:e6:
ba:a8:16:c3:97:f4:e1:c2:f0:3c:1c:1e:c3:eb:08:
b5:24:9b:e8:2a:50:07:17:17:97:3d:18:e3:67:91:
e7:6a:f1:21:ad:c3:2b:85:4f:a6:2a:1a:f6:71:15:
3e:0a:8b:28:b4:b6:13:5e:54:8d:d7:80:2e:cd:6b:
95:17:78:df:9a:47:87:1b:68:e3:72:47:4b:7c:60:
98:9b:89:07:f0:2c:88:2d:d7:49:c1:3d:8c:e9:ae:
6f:5f:40:4d:ef:37:c1:fb:b8:6f:e9:72:53:67:be:
03:6b:a4:50:a0:28:4b:5d:01:53:39:2b:f8:a9:ef:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:10:E0:51:3E:53:22:D9:D8:C6:C3:17:F7:5C:5A:7E:79:42:7A:1C
X509v3 Authority Key Identifier:
keyid:F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:07:51:16:95:2c:79:b7:e0:f5:71:05:d0:82:8a:d5:67:fb:
e7:ec:be:61:51:dd:e0:78:c4:f2:90:2c:16:72:67:37:dd:6c:
de:c4:50:47:9c:55:16:fc:7e:95:ea:bb:a6:a0:56:31:22:f4:
00:99:69:c6:80:d0:b3:07:2f:e7:a7:11:0c:25:53:bc:56:d9:
e5:69:6b:38:1d:51:7b:d3:b1:e3:d2:c8:56:c1:b3:c5:77:cd:
a5:07:3c:de:8e:15:8b:d9:d9:18:04:7a:b2:a2:82:32:1d:cf:
54:d7:8f:b4:89:59:46:be:a1:3c:9c:52:36:8c:77:d5:16:da:
ce:22:6e:b9:3e:79:f2:4f:50:45:6c:f4:53:9d:cf:49:bb:f7:
b8:f3:93:d4:4f:85:d7:a2:b0:14:6f:fd:19:84:01:fc:2e:75:
c7:5b:19:ff:0d:c4:36:91:0f:97:14:d7:c4:b7:19:11:9d:fc:
5b:bd:e0:8e:30:47:27:a4:56:75:90:f7:2b:08:f0:48:d8:06:
4a:f2:44:6d:41:d8:b2:70:4d:99:9a:76:c2:34:61:f8:0e:a4:
45:b8:ee:d7:92:14:d0:f2:7b:0b:23:5e:e7:df:c8:76:d9:d2:
b5:da:6c:b2:bf:32:1f:49:f9:c3:56:98:50:3a:36:a8:69:50:
30:9c:48:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:54 2026 by rpki-client