Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: GE7fQYIPNdru3dbFkBTy2CRSGY1ibM46cLixzaM0lak=
Subject key identifier: 8E:C6:6D:4D:27:F0:9D:03:2E:01:40:E7:F9:64:CB:6D:33:68:5D:FD
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 019FCC3917FE575F25969FA2D7768B0C3AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 19EF
Signing time: Tue 04 Aug 2026 10:02:01 +0000
Manifest this update: Tue 04 Aug 2026 10:02:01 +0000
Manifest next update: Wed 05 Aug 2026 10:02:01 +0000
Files and hashes: 1: QACcx3bmkYq5FVm71dmit53bn4Q.roa (hash: oQ/m7QfRfNheRWfUqid3dTy2xJX9VnnT62jOhchvHuk=)
2: gux-IxdkibcThQl39PWiMsakK0g.roa (hash: xADBPDkQYtVHScAVn2k1rTwtjm/TxC5Y/n4oo7GBk1E=)
3: jpvZw7M6HWfeaPP7BBGWUfnUPW8.roa (hash: m69AM/qWHvVH8vQjk7f2bA/DtDMk2TIVp7SRlmCI4co=)
4: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: 7/cCorrAtdUfWgAWPC6EZ7ju6KIc3mooR9G2JVklFKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:39:17:fe:57:5f:25:96:9f:a2:d7:76:8b:0c:3a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Aug 4 10:02:01 2026 GMT
Not After : Aug 5 10:02:01 2026 GMT
Subject: CN=8ec66d4d27f09d032e0140e7f964cb6d33685dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d8:19:2e:cf:a4:76:27:6a:01:87:61:17:02:
b2:78:59:b0:c7:01:32:28:62:30:c3:fc:16:b7:9f:
08:30:b2:65:e4:75:65:77:8a:0b:30:40:a1:76:c8:
ef:6b:2c:47:cd:96:56:a1:d6:83:ef:16:ef:7a:68:
af:32:b6:6d:88:76:a0:99:85:f2:59:f3:1d:1d:b2:
74:0d:68:cd:47:5f:2c:79:83:4c:2a:c5:d6:13:ee:
c9:5a:23:14:ba:6c:a9:40:b1:60:82:8a:1d:80:1c:
33:19:26:ae:17:7e:b7:39:e6:5a:5d:36:f8:6c:78:
5c:f1:1d:49:6d:c9:11:a7:92:7e:8d:b8:44:c7:7b:
6a:f5:60:ce:a4:a0:0e:c1:5d:13:2f:40:46:0a:ec:
8c:9e:73:f0:24:47:bf:d4:55:be:2f:a1:74:db:12:
21:ac:32:15:20:d9:b0:af:56:cc:0f:72:cf:04:38:
b9:e0:88:33:17:83:46:1a:ec:51:41:92:aa:5e:22:
e7:e5:76:9b:b4:25:b1:35:da:70:82:34:68:81:92:
bb:fd:2c:41:d7:58:10:56:b9:fd:4b:12:42:c8:0a:
56:5f:0d:34:62:47:5d:d2:7d:4d:54:51:30:98:b7:
cc:3c:c2:22:58:e6:78:d0:3b:1c:e0:c3:ac:43:d3:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C6:6D:4D:27:F0:9D:03:2E:01:40:E7:F9:64:CB:6D:33:68:5D:FD
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:28:82:f6:dc:41:dc:c3:b2:20:6a:1c:de:34:35:7b:c2:84:
d8:fc:3a:61:fa:32:e6:b9:75:8a:9c:25:2b:44:99:e3:56:4a:
d1:0a:a8:aa:2c:9d:bd:31:46:6e:7c:f5:3d:91:f5:80:47:17:
2d:f7:6d:3b:af:6a:8f:c2:40:80:7c:29:ef:30:fd:3e:52:60:
b1:7f:74:8d:d7:50:dd:27:62:60:6a:ac:8f:c2:a9:28:06:26:
3e:36:aa:a3:81:a7:54:77:9e:39:67:31:58:b3:69:b5:79:06:
91:8d:3f:f1:59:e1:e4:01:c1:16:4e:72:ac:40:08:75:66:65:
dd:6e:3a:0f:94:b9:06:10:4f:a3:7e:f4:57:5d:1e:7b:d0:4a:
c8:6f:ec:a1:e4:aa:1c:69:5e:ce:b8:7b:3b:c2:c6:df:ee:1d:
a0:eb:2e:d4:7e:30:73:1b:bd:f9:d0:e7:07:e9:9e:db:0b:07:
a9:cc:34:ce:eb:fe:d2:ca:7a:bf:f1:14:fa:29:74:1d:77:09:
63:a3:1e:81:d4:bf:74:ed:8a:e4:f7:b5:d5:7b:b8:20:a6:8a:
33:9a:e1:af:2c:23:f0:f2:97:b5:f6:61:2f:3d:26:c0:6b:14:
10:9e:ad:c0:00:00:fc:8c:15:8f:ef:8d:c3:48:64:99:3d:a6:
75:cb:78:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:55:22 2026 by rpki-client