Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
File: 8lizqXQbQx177NZChrnmvODpddo.mft (raw, json)
Hash identifier: 2ZcoL49X6yPoi40zyY6gvfZnUBu4o1S15A8hjsKTnLU=
Subject key identifier: BF:66:C2:C6:1B:4A:BF:C7:B2:F4:18:08:F5:ED:DB:DD:AE:07:A3:AB
Authority key identifier: F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
Certificate issuer: /CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Certificate serial: 01A0005CD9EE49DAA886448787AFFE086371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
Manifest number: 19CF
Signing time: Fri 14 Aug 2026 13:01:20 +0000
Manifest this update: Fri 14 Aug 2026 13:01:20 +0000
Manifest next update: Sat 15 Aug 2026 13:01:20 +0000
Files and hashes: 1: 8lizqXQbQx177NZChrnmvODpddo.crl (hash: K8fF0UHGRjJUPqazO7VndH9HXCy4Q/DyVIEZhKHTljM=)
2: 9vmezDMgMLAYgubj0dZwQBpw7Zo.roa (hash: QLo0rxDXf9m7rqbC9zynXdEyUGpcYsQ8wFalcr82vIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:d9:ee:49:da:a8:86:44:87:87:af:fe:08:63:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Validity
Not Before: Aug 14 13:01:20 2026 GMT
Not After : Aug 15 13:01:20 2026 GMT
Subject: CN=bf66c2c61b4abfc7b2f41808f5eddbddae07a3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:94:d9:b1:52:5d:6d:5f:7c:65:d0:6b:75:7a:
96:be:6a:86:1e:71:44:2a:30:f1:97:f0:59:57:47:
3f:ed:ea:62:b6:9d:bd:2b:51:75:92:8e:e4:da:3b:
5c:12:7f:3f:ad:fa:da:5d:cb:7f:2a:ec:67:97:27:
64:47:3d:ec:3b:76:09:cc:4a:90:6d:20:53:4e:53:
4a:ec:4e:b3:e0:f3:b7:44:91:b5:36:ab:a3:62:67:
43:9a:00:b2:be:47:54:1b:7a:82:84:30:2e:36:d4:
61:58:f1:1e:96:2f:dd:0f:ef:88:cf:b1:08:c2:d0:
0a:fe:4a:44:c3:ef:cd:75:5f:93:df:05:08:83:4c:
cd:b9:17:86:14:ae:c7:77:cb:22:9e:2c:34:9b:cf:
3d:c8:77:be:a6:e4:3f:a6:30:e7:68:02:fb:a5:19:
9f:fa:00:92:d5:c4:ed:f3:c9:65:03:85:3b:f4:13:
d6:15:9c:76:96:99:0d:23:37:8c:a9:c8:63:9f:69:
e2:a0:de:d6:3e:c4:ed:24:0e:26:1d:af:53:cd:c9:
d8:51:2d:cf:48:f0:93:e0:9a:4c:43:eb:94:3d:ae:
f1:e7:f3:17:0b:6f:22:dc:ba:db:89:a6:95:91:0c:
2c:45:81:fa:09:4e:3d:7d:fd:39:e5:9b:fb:26:4e:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:66:C2:C6:1B:4A:BF:C7:B2:F4:18:08:F5:ED:DB:DD:AE:07:A3:AB
X509v3 Authority Key Identifier:
keyid:F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d4:2d:89:8e:cb:ab:93:68:1c:e8:ef:13:db:d9:a0:ca:ff:
06:90:d2:ae:32:a9:85:b9:77:3d:c0:32:86:8a:f7:1b:ed:b6:
45:a8:98:0a:35:2b:9c:f8:1a:c1:cb:b5:82:08:40:43:ed:8b:
91:99:69:1c:bb:22:7c:ce:1c:e3:38:48:7e:ad:9e:e1:36:4a:
0f:7a:92:a2:80:da:dc:9a:ae:4c:00:f0:4c:5b:a2:46:b4:33:
61:c9:0b:8d:36:1b:eb:a7:f9:72:f9:e6:71:87:e1:0c:ed:38:
48:8d:76:a8:92:53:1a:a1:a5:2c:45:16:09:ef:47:c1:01:d9:
77:92:a6:09:a7:42:b4:29:63:2b:12:42:b2:f9:15:a3:69:a1:
b3:ac:2b:7f:c2:e9:e0:76:d5:72:0b:52:2a:c1:6a:ea:ae:4d:
d6:f1:75:8d:a0:c8:b4:72:65:e1:2f:38:6a:ac:88:b7:39:e6:
3e:e9:99:ef:ab:5a:4b:13:97:ce:6c:c4:50:38:f7:91:5a:0a:
29:03:35:2c:62:a9:fc:2e:a9:0a:70:8c:b6:0f:21:f8:67:bb:
70:77:b4:46:31:9e:00:f3:8d:18:11:c7:48:47:42:1a:87:b4:
a5:1c:90:f2:d1:34:c5:59:01:a8:f4:3f:3e:6b:f5:af:53:0a:
f7:ef:b4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:55 2026 by rpki-client