Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: 6aDe5EVyPNwYgstcbx2AbSzyLfaGHkz0lHSe+YFd95o=
Subject key identifier: C1:97:D7:9A:E0:62:47:CB:A6:03:08:81:3E:25:9C:0A:46:F8:D6:53
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 019F17C3618CF877E9A2DF12D98053B50F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 09:01:48 +0000
Manifest this update: Tue 30 Jun 2026 09:01:48 +0000
Manifest next update: Wed 01 Jul 2026 09:01:48 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: OpWSDb4ysLcISqqcibT4XAvLng84NKNfswoFSheuCyQ=)
2: _igUKCILIjVQGGkM5QULk2U3nBo.roa (hash: 20wqHq8/cCP5c8/7zi0IPefhfTG7SQ/Exh3yYB/ZfYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:61:8c:f8:77:e9:a2:df:12:d9:80:53:b5:0f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Jun 30 09:01:48 2026 GMT
Not After : Jul 1 09:01:48 2026 GMT
Subject: CN=c197d79ae06247cba60308813e259c0a46f8d653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:58:19:4f:be:b3:0a:13:ab:eb:e9:12:a5:
d7:f5:de:6f:7f:c6:7c:e3:7e:41:7e:dd:87:4c:74:
d1:72:de:ec:e9:7c:a5:ad:6b:7f:5e:d0:b9:32:3d:
5b:c5:20:dc:5b:80:5f:f1:4b:f6:3f:c7:41:33:d6:
31:4d:dc:7f:d4:da:dd:d3:d5:e4:d4:e5:65:fb:f1:
96:fa:60:b9:47:5e:51:43:40:17:c4:d1:3f:2b:81:
49:ed:d3:af:eb:cf:55:d7:d6:4f:7c:9e:3f:94:4f:
02:3a:c8:f8:d8:2e:a4:2d:94:a8:6a:ac:4e:04:4e:
ff:1b:47:1d:d1:1f:39:a6:77:d7:79:f5:7c:83:35:
db:0d:2a:39:ff:22:96:4d:a3:93:71:57:6c:6a:bb:
86:ae:d2:3f:6b:3d:56:ef:ef:86:ba:86:8c:11:0f:
64:21:32:d4:6d:65:24:16:8b:f6:41:d9:20:cd:6c:
ec:ea:80:9b:64:ee:32:a9:13:ff:97:a8:c7:ea:20:
97:51:c1:f4:b9:b9:52:c8:dd:02:00:ec:cf:23:1f:
4c:95:c6:d3:17:b7:e4:ed:16:47:02:4f:93:45:ec:
cc:73:6e:11:b8:42:6b:fc:77:03:9a:86:de:1c:fb:
ef:b4:61:52:78:5b:96:6b:a9:4e:dd:a3:25:2e:a8:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:97:D7:9A:E0:62:47:CB:A6:03:08:81:3E:25:9C:0A:46:F8:D6:53
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8c:1f:b3:bc:f9:ab:1c:42:5a:b4:c6:fa:3c:a9:65:60:51:
32:8b:2b:d7:51:60:ef:8a:fd:12:13:56:b0:33:f5:48:bf:94:
c5:8b:e3:4d:ae:91:5f:b0:e2:d1:9e:94:3b:22:22:7d:e5:c0:
6f:86:90:8b:84:d9:b6:3d:72:f9:e7:19:99:2f:10:38:5d:23:
44:be:ac:86:d0:5a:6a:4b:5c:17:35:bc:8c:d5:f2:5d:fd:19:
7d:81:bd:c4:03:8a:e2:9a:d8:07:e1:86:cb:73:07:b8:e0:0d:
4c:15:99:99:0f:05:bd:02:61:42:9c:14:88:85:aa:36:a9:00:
8d:47:95:97:7c:56:8a:09:c6:b8:ce:d1:4a:35:12:d0:48:33:
d9:53:28:39:b3:e3:fe:e7:9a:59:bc:6f:98:14:8c:0f:38:bf:
64:fe:de:ba:6f:fb:c1:e6:fb:17:2b:5a:77:24:54:06:9f:79:
3d:f8:0b:41:70:60:1c:e7:2f:40:cd:68:eb:6e:76:79:b5:b4:
79:2c:4f:09:78:e5:49:4e:41:0e:b6:5a:73:48:2a:a7:66:a2:
85:53:7a:fe:c2:c5:08:91:fd:12:f9:26:30:0c:1d:69:70:a0:
4c:ed:5b:96:85:02:4e:35:a3:82:ce:01:f1:60:c0:ac:27:f0:
ca:08:48:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:12 2026 by rpki-client