Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft
File: _RuNPQUHZm87sDyaWGV9xSl1fZc.mft (raw, json)
Hash identifier: g6s+O4oId7PaEQMIkG4MVVyqHqEBN7IZZT9U5D0+LSA=
Subject key identifier: 8E:F5:58:4C:2E:A3:9F:05:9F:37:50:4D:0D:F5:77:21:7D:0F:22:9A
Authority key identifier: FD:1B:8D:3D:05:07:66:6F:3B:B0:3C:9A:58:65:7D:C5:29:75:7D:97
Certificate issuer: /CN=fd1b8d3d0507666f3bb03c9a58657dc529757d97
Certificate serial: 019FF86C34414FB105D6A4B986D26CDA91CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RuNPQUHZm87sDyaWGV9xSl1fZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft
Manifest number: 24
Signing time: Thu 13 Aug 2026 00:01:08 +0000
Manifest this update: Thu 13 Aug 2026 00:01:08 +0000
Manifest next update: Fri 14 Aug 2026 00:01:08 +0000
Files and hashes: 1: RvRvHV0x6ysxbxULvf_1qstGWqs.roa (hash: s2EDZjdZarn3X1PV3ipDQ4y//AUVQJ/pruUyN3ZV/wo=)
2: YzbLZF0ToPAtbjdb8tZtZBy88eM.asa (hash: JTDOa4hjtdL8/oyK4yg0Bv7JcRJT+zrdH0ws+s0/EA8=)
3: _RuNPQUHZm87sDyaWGV9xSl1fZc.crl (hash: 5QqGt6vb946ZpTRLk0rc0ti4VZcmSr4CwuMgo669+/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RuNPQUHZm87sDyaWGV9xSl1fZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:6c:34:41:4f:b1:05:d6:a4:b9:86:d2:6c:da:91:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1b8d3d0507666f3bb03c9a58657dc529757d97
Validity
Not Before: Aug 13 00:01:08 2026 GMT
Not After : Aug 14 00:01:08 2026 GMT
Subject: CN=8ef5584c2ea39f059f37504d0df577217d0f229a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:37:12:a9:5c:5f:f2:3b:36:a5:73:89:d9:
fe:15:e7:97:cf:2d:8a:1a:65:53:c4:b4:b3:ae:54:
34:01:5c:9a:ca:46:18:18:bb:7c:7a:ce:af:70:ae:
46:d1:a1:ce:a8:1d:9c:20:d1:07:f5:fb:41:79:a9:
bc:84:64:4c:c9:29:ae:b1:b4:3d:16:a7:0d:34:2f:
75:59:24:35:22:a5:f9:fa:52:e3:21:44:bd:a2:19:
14:9b:a5:11:fe:b4:19:ef:80:dd:f5:9c:f9:59:cc:
4c:8a:9d:1e:67:ff:2f:f4:cf:75:9d:59:4a:ad:d6:
59:ec:17:71:5e:10:4c:dd:99:81:06:a5:be:c6:35:
83:93:26:ec:31:86:ce:1a:43:80:dd:3e:86:1e:76:
eb:86:c5:63:ab:d7:d8:53:26:8f:3a:79:0f:2a:d9:
d4:f9:6d:8d:78:e9:86:24:1e:23:e7:f5:7d:07:da:
0b:07:59:e8:49:a2:b5:a5:69:2f:f6:8a:d5:fc:05:
97:5f:34:80:28:50:7d:33:63:19:40:6a:ae:ac:4a:
b2:94:6b:1a:49:6f:8f:16:f2:a4:a0:a2:c5:7e:80:
17:b6:fa:42:54:e7:38:9c:3d:8c:cb:6d:fe:b0:42:
93:e5:58:8a:93:8c:65:d2:77:50:18:dc:3d:38:36:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F5:58:4C:2E:A3:9F:05:9F:37:50:4D:0D:F5:77:21:7D:0F:22:9A
X509v3 Authority Key Identifier:
keyid:FD:1B:8D:3D:05:07:66:6F:3B:B0:3C:9A:58:65:7D:C5:29:75:7D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RuNPQUHZm87sDyaWGV9xSl1fZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e7:9f:c4:65:64:76:f0:e8:c4:84:15:0c:32:31:7d:44:5f:
ec:ec:ed:b4:b2:f1:f0:dd:cf:c9:22:eb:b8:ea:e4:52:06:8c:
2a:9a:60:3b:ec:32:a7:27:01:f5:b1:d2:1b:47:70:19:f3:75:
df:b4:87:88:4c:ee:c9:46:56:93:dd:db:a3:27:37:56:7d:1b:
22:9c:fb:91:9e:d7:36:fe:50:fc:be:27:51:01:0d:c2:00:ca:
88:b9:58:68:23:5c:82:af:e4:90:fb:0c:43:f4:02:94:04:3f:
02:dd:55:3f:f3:66:a0:55:13:b0:c2:26:a3:dd:a9:1c:5c:c4:
ee:28:54:79:95:8d:f3:f7:ec:b8:c8:35:77:df:7a:5e:b9:93:
00:b6:0a:6c:34:24:b2:4e:c4:22:5e:82:22:c9:ef:14:b0:8d:
b2:1d:ef:fc:02:dc:87:20:5b:d4:62:7f:e9:3c:a1:59:6c:22:
e7:f3:e6:d2:bc:44:65:8b:4b:78:b6:53:e8:8d:48:24:e5:3a:
d6:aa:ec:fe:86:6a:5a:0a:33:48:b4:45:0c:46:e1:30:d1:4a:
a8:3c:63:4a:46:2b:95:32:c7:77:74:6e:66:96:4d:b8:af:b6:
94:18:fb:32:44:a9:8a:b2:fd:7e:88:09:4f:12:41:af:06:8e:
f6:4f:d8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:44:52 2026 by rpki-client