Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: rRTSoqKsk5Me/zDwVHBBWZoIGzf+Z/b0TcLNBoGodcc=
Subject key identifier: 36:6E:F7:BA:C1:37:4A:87:5B:B9:3D:93:44:E9:84:0A:C4:E3:46:A6
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 019F18D6222634CF448A240D2F1CA5D36D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0E1E
Signing time: Tue 30 Jun 2026 14:01:54 +0000
Manifest this update: Tue 30 Jun 2026 14:01:54 +0000
Manifest next update: Wed 01 Jul 2026 14:01:54 +0000
Files and hashes: 1: 8X-vY96aKKHfj_txGbHwT7KRdWc.roa (hash: 0WIWIIW0b9953A6VR0CU69w8OMoDd9V6tcRbkVExZv4=)
2: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: ViwXQwtAdcQ+UhjCXayhi6inHuD/WP8Kjt9dXEgzZNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:22:26:34:cf:44:8a:24:0d:2f:1c:a5:d3:6d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Jun 30 14:01:54 2026 GMT
Not After : Jul 1 14:01:54 2026 GMT
Subject: CN=366ef7bac1374a875bb93d9344e9840ac4e346a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:05:47:1c:6c:65:bd:34:45:94:e0:3a:65:
91:51:37:fb:2c:f7:56:01:7b:55:84:4a:cd:52:9e:
a1:1f:2e:fe:e2:b9:b5:7b:e2:81:bc:fb:48:74:a8:
34:b8:5d:41:9d:42:34:75:de:ab:6a:22:1d:63:e7:
3a:15:f2:3b:6d:0f:82:e9:80:d4:0f:ac:a1:f0:22:
4a:e8:a3:1e:0b:be:40:d4:30:36:9b:0a:73:c6:bb:
73:bd:cd:d8:19:29:14:26:be:31:e0:be:bd:b9:cd:
88:63:1f:28:24:3c:56:1a:ad:79:f5:86:2d:a2:a4:
a3:31:92:c4:65:84:62:53:52:98:be:c4:a3:34:5f:
bf:5e:0f:f3:7a:32:4f:95:f5:08:54:ff:b4:7a:8d:
5f:b5:f4:70:ea:54:dd:1c:47:c9:7b:38:2b:29:24:
74:fa:d6:11:36:59:93:7c:e2:87:2a:93:f8:8d:49:
0a:db:33:bd:64:f2:a4:8f:96:df:5c:2d:64:2b:0d:
b0:a9:af:88:15:17:e8:ca:9e:d9:08:85:9a:9b:56:
4e:f3:c4:ea:8c:e4:13:db:0d:1a:bd:3d:03:e4:cf:
fc:06:b4:72:bc:7f:59:93:3f:18:42:7e:0f:a8:06:
df:47:e7:f1:90:b1:40:f4:2c:9b:3d:fd:75:c4:ef:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6E:F7:BA:C1:37:4A:87:5B:B9:3D:93:44:E9:84:0A:C4:E3:46:A6
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c3:51:35:12:cf:37:83:f3:c7:b9:56:e0:99:2f:fa:c6:99:
4e:42:ef:3d:fa:30:aa:da:d7:b8:fe:bd:b9:3d:6d:57:7e:64:
de:61:e2:e8:0f:b9:2e:e8:e8:86:b0:d9:b3:32:25:73:11:09:
06:eb:d1:f0:83:c4:6c:74:67:1b:28:6c:b3:e4:d4:12:eb:bb:
87:3b:d7:8b:89:9a:5a:ac:24:fa:c3:0e:8e:b2:9d:29:10:c2:
ff:f0:ce:2d:f8:73:43:a3:da:a8:bc:44:25:f2:aa:25:62:a7:
26:5f:3b:28:27:01:d7:ef:89:d2:bb:4c:e2:71:15:fb:20:2a:
a4:c3:2c:1e:e0:0a:c0:9a:01:ec:01:32:f8:a8:df:ce:17:7c:
f4:5e:55:82:58:32:95:ab:b0:02:38:ff:26:c0:e5:a6:a9:77:
c0:a2:9b:49:de:80:97:7b:a7:60:72:a4:31:cc:dd:31:fc:7a:
bc:01:08:ee:31:bd:55:c7:72:ab:73:f1:c0:29:7e:37:f6:85:
a1:9c:9e:b3:29:65:01:a0:f6:0b:ba:07:7d:ce:af:9c:5d:f6:
62:f4:09:e8:90:a5:c2:ea:26:ff:20:2f:b7:d4:c9:c6:40:75:
34:93:2d:67:32:f1:a4:a8:5f:2e:ab:8e:4b:ff:ec:4f:f5:53:
10:46:9f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:11 2026 by rpki-client