Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File: 8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier: SLycL4MIOOwhi2k1mpSoR+m9yEFrJUdXVAH0DCK4OK0=
Subject key identifier: A5:B3:3C:E0:C2:07:00:EF:1A:3E:B2:EA:60:41:CF:24:18:46:91:D1
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer: /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial: 019F1830BFDA55B2994D642D58FFD83A4C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number: 112C
Signing time: Tue 30 Jun 2026 11:01:15 +0000
Manifest this update: Tue 30 Jun 2026 11:01:15 +0000
Manifest next update: Wed 01 Jul 2026 11:01:15 +0000
Files and hashes: 1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: NNpqt8FcTL2/6xVzO6zBtxzh1mfwgHEKMmxhbK7gbVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:bf:da:55:b2:99:4d:64:2d:58:ff:d8:3a:4c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Validity
Not Before: Jun 30 11:01:15 2026 GMT
Not After : Jul 1 11:01:15 2026 GMT
Subject: CN=a5b33ce0c20700ef1a3eb2ea6041cf24184691d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:58:8b:c5:0c:6a:3f:c6:2b:ec:fc:21:49:
cc:13:e9:28:70:fa:f2:d6:c8:65:c1:e3:5c:81:fc:
e5:83:8a:9f:81:02:a6:62:da:66:6a:fe:b5:25:95:
e2:57:30:a0:fd:5d:79:a1:45:6e:f4:fc:a5:67:1c:
07:f4:bb:90:38:78:10:93:cd:fb:0c:8a:c7:95:51:
a9:1a:96:26:ef:eb:f1:d7:bc:f4:3c:e8:21:e5:89:
ad:3f:84:15:9c:41:2b:bc:b8:71:1d:66:ea:3a:b9:
14:5e:ca:73:ed:e7:a5:d9:e3:08:77:08:7c:c6:a4:
9e:9d:c4:a2:61:07:ab:b9:5a:49:4b:c7:29:f7:52:
7e:03:79:ea:75:de:b0:bc:4a:bd:6f:20:3e:28:ae:
19:5a:f5:05:e8:b8:a2:32:f1:7f:77:e0:02:66:d1:
97:8c:63:c9:5a:01:77:de:26:81:a2:0d:3d:4b:31:
bd:91:7e:d3:2e:9d:e3:1f:6c:2f:cf:1d:0a:bc:af:
56:73:54:91:0e:f1:04:e8:7e:13:f3:aa:a6:d3:5e:
20:d6:99:42:a7:04:15:e0:94:0d:40:2a:2f:28:b8:
d8:44:c9:9d:32:cf:52:ca:0e:46:f6:2e:50:8d:3d:
44:aa:34:01:9d:c5:5e:ac:98:9e:cd:6a:25:cb:81:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B3:3C:E0:C2:07:00:EF:1A:3E:B2:EA:60:41:CF:24:18:46:91:D1
X509v3 Authority Key Identifier:
keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:be:88:d1:9a:6e:7a:52:a2:7a:24:5d:92:c0:3e:f4:f1:e7:
4d:71:48:f8:32:58:18:c0:83:00:b2:b5:a1:00:a5:48:a8:96:
0a:ae:28:33:fc:53:5c:b6:f7:de:19:2f:51:9f:fd:8d:5c:1a:
58:72:53:6e:f6:5d:15:65:ea:de:cf:6f:c2:e7:da:ff:62:c7:
a9:58:a3:80:02:50:f6:02:a8:04:a7:3b:0c:08:a8:de:89:a8:
ab:96:e2:0f:15:31:f7:f5:e3:6c:f9:7c:7e:c6:54:c3:55:48:
63:36:19:96:28:b5:6c:d5:50:31:4c:d5:6e:e7:cb:81:07:e6:
29:7c:5c:0b:61:fb:77:64:e2:ca:88:c6:ef:dd:f0:b5:eb:cf:
47:71:f5:87:42:43:47:f6:f6:9e:d9:92:89:94:ec:a3:55:ec:
59:19:79:5b:80:3f:f8:d4:8d:dd:4e:6e:4a:d8:e7:bd:59:51:
78:72:30:01:96:61:ce:69:bf:99:85:fb:3f:c6:4a:06:ed:fa:
85:11:94:cb:54:58:db:23:51:28:37:de:64:0d:41:53:a9:e1:
87:91:52:2d:fb:fe:82:61:96:c8:2d:00:24:a0:1c:50:04:76:
2b:bd:ff:6b:f3:3a:78:b3:86:91:17:08:cf:2e:cf:d1:7d:eb:
ee:6a:fc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:18 2026 by rpki-client