Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: EwdTIxPwne9te23n8dWkSEcQtDyxk2fC6FsuRE/PFHo=
Subject key identifier: 24:69:8A:76:3C:F0:A7:70:41:0F:64:8D:2C:B7:D1:AB:CA:D9:35:33
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 019F18D699A51A0400EA8FD7763F318869F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 1432
Signing time: Tue 30 Jun 2026 14:02:24 +0000
Manifest this update: Tue 30 Jun 2026 14:02:24 +0000
Manifest next update: Wed 01 Jul 2026 14:02:24 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: XV84ew02PX76N2//4o8epzppDmBwZ80KdlHk07uS4k0=)
2: 9hD2ERgxFZRceTwyPk94l0SmsBw.roa (hash: 7W+094dJdVnFZLMoB+fr0KNBxnfuASm7T/kRouyIeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:99:a5:1a:04:00:ea:8f:d7:76:3f:31:88:69:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Jun 30 14:02:24 2026 GMT
Not After : Jul 1 14:02:24 2026 GMT
Subject: CN=24698a763cf0a770410f648d2cb7d1abcad93533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:dd:a2:bb:21:1b:c7:d3:c7:21:1d:85:a0:
59:45:67:13:a2:e2:9c:01:31:c9:74:3a:b5:84:b2:
e4:93:23:93:c0:eb:ea:57:50:a0:21:ee:06:a9:19:
da:34:aa:b8:13:5f:cf:c0:23:2d:28:5a:e6:51:06:
b9:6a:a0:17:25:27:17:8b:0b:59:b5:f4:ba:99:d7:
ca:50:f6:80:04:ca:4e:3b:45:bd:ef:6d:55:49:b6:
db:79:73:5d:1a:4b:be:84:ea:31:1b:7a:4d:9f:95:
c2:fe:25:e2:48:76:4c:15:c3:c8:ca:87:27:51:b4:
df:5b:5a:29:09:34:58:ae:52:51:92:3a:35:4c:5c:
3b:8f:61:ca:ff:e2:86:8b:65:77:6a:5f:47:2c:7d:
e1:97:9c:1a:46:97:13:53:e3:48:c8:4a:25:2c:f9:
ab:ac:3a:59:09:aa:56:96:62:eb:dd:2c:29:83:b5:
50:37:20:f2:65:72:c4:a8:a0:d0:54:fd:1c:73:0a:
46:a5:f7:65:40:ad:32:d2:de:be:a6:13:96:62:ae:
f7:07:d6:9f:d6:f8:dc:70:18:91:70:35:e3:19:89:
9f:99:c5:f8:2a:b9:91:6d:33:14:86:18:f5:39:84:
1e:0a:8c:ec:3e:cd:f7:5d:d2:0a:7d:4d:a0:ff:c0:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:69:8A:76:3C:F0:A7:70:41:0F:64:8D:2C:B7:D1:AB:CA:D9:35:33
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:26:ad:c5:c0:1a:68:ad:ea:18:9f:9c:b1:22:45:29:53:be:
e1:9c:46:6c:c3:fb:7c:ba:62:53:b0:18:62:e0:3c:cc:8f:e4:
79:da:eb:17:67:d0:88:f1:06:8e:9d:d3:1e:34:28:cd:a2:6a:
41:f9:d2:15:a9:3d:89:bc:bb:05:22:e1:7a:ec:25:5e:73:e7:
97:c2:0b:9a:29:f3:d9:6f:ec:bc:40:1e:48:65:43:13:eb:66:
28:a4:9c:7b:a2:5a:8e:5f:23:0c:d1:c7:84:61:c4:9f:7f:97:
e7:67:7f:a7:0a:50:2e:a9:6c:8d:1c:7c:0b:65:7b:76:2f:9b:
3f:10:ba:16:74:8b:6b:48:b0:fb:2c:17:3e:45:c3:08:00:a8:
c3:27:79:e9:62:09:c6:55:f2:49:a3:06:e8:4e:c6:75:85:ae:
45:da:92:08:21:b4:8d:77:2b:10:9e:ce:1b:79:be:44:f1:96:
39:a0:d4:33:78:91:7d:58:26:88:78:59:7f:d3:82:3b:53:13:
8f:e2:51:37:55:a3:48:f6:99:10:66:04:8a:17:d7:e9:8e:b7:
10:b7:f9:ec:68:c3:c7:cc:5b:b9:97:17:70:95:78:49:80:1c:
59:be:ce:95:c4:8a:31:60:3e:66:91:50:f3:d8:f2:29:e9:63:
9c:e6:34:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:24 2026 by rpki-client