
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: /98NPKirA5gGPLT/yxQ67dp40S9A1RWHYJxvEpUMUf8=
Subject key identifier: A6:03:DE:63:26:4D:AE:9C:6F:52:7F:BF:C0:D5:5F:50:65:D8:33:85
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 019FBA69779CD39C2AD68B15FB2D21F35203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 1650
Signing time: Fri 31 Jul 2026 23:01:41 +0000
Manifest this update: Fri 31 Jul 2026 23:01:41 +0000
Manifest next update: Sat 01 Aug 2026 23:01:41 +0000
Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: qovwi3q5Cy6qNut/8rytOP4X3Y1Yf8zuduYxRcols7E=)
2: sizGPo8KqP7LWpt91yMVuV_G2qY.roa (hash: LlMndqzEsit0QQGqlcQ6a+BkfwsI2hJIMaOg8c0+sWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 23:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ba:69:77:9c:d3:9c:2a:d6:8b:15:fb:2d:21:f3:52:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Jul 31 23:01:41 2026 GMT
Not After : Aug 1 23:01:41 2026 GMT
Subject: CN=a603de63264dae9c6f527fbfc0d55f5065d83385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:b7:f0:7f:31:6b:8b:9b:61:32:ad:cf:70:
ef:15:af:b6:99:82:90:f0:d2:0a:fd:5d:81:7c:b4:
e0:c2:01:df:78:d2:b9:90:97:75:52:30:5a:b3:57:
5a:c1:82:68:b1:54:2f:1f:e2:65:d7:ac:00:20:45:
c1:3e:af:b4:ff:b1:2c:6c:6c:e4:2b:24:1d:38:07:
01:c3:15:6f:38:3b:39:a4:11:6d:0c:37:8c:bb:39:
58:ca:5f:05:81:1d:03:88:7a:00:0a:63:21:7f:87:
88:01:34:15:b2:aa:85:69:28:cf:9d:b1:47:17:a4:
66:22:17:a8:18:17:e8:ec:d4:ec:04:8f:3a:1a:5f:
89:07:32:ac:7c:d2:ca:5b:c5:7f:ad:14:9f:e9:7a:
cd:d4:f0:45:35:7b:25:0b:4d:cd:64:2d:29:50:7b:
95:3c:78:7b:f5:c9:72:21:f2:99:e4:fc:1a:74:24:
f3:ef:05:46:bd:55:81:08:52:a6:61:bb:08:f5:53:
6b:fc:6f:bf:8f:c8:da:10:ef:64:45:6e:6e:86:18:
10:31:46:84:1e:bb:4e:0b:1f:d8:1c:44:d1:99:99:
5e:c0:a8:2b:7d:61:39:7e:e7:e3:e2:10:48:dc:02:
a1:88:fd:3d:51:6e:ce:e2:58:51:cf:d9:94:3e:24:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:03:DE:63:26:4D:AE:9C:6F:52:7F:BF:C0:D5:5F:50:65:D8:33:85
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:04:9f:85:2d:28:10:57:d9:9e:84:ce:52:8c:92:a4:6f:4a:
31:dc:ee:53:55:ee:16:6b:54:a1:4d:95:29:fe:3d:09:87:6b:
17:8e:8a:1d:da:e9:be:30:0c:2c:0b:97:79:64:61:12:d5:61:
03:cd:d6:a6:46:87:bf:38:fd:8a:3c:b5:7a:6a:64:68:73:05:
7b:a4:85:ab:9e:6c:6a:c9:67:15:66:e3:46:81:5f:bb:de:23:
66:c4:6a:85:26:a4:4d:b3:5d:b1:2e:79:73:31:d9:6f:ba:2b:
b6:1d:b0:bb:2a:34:5d:39:9f:29:fe:65:30:44:62:12:e8:5d:
c5:7c:a7:a6:b9:59:cd:29:15:7b:3a:23:39:34:9f:0a:de:2c:
61:5a:02:55:37:28:34:cb:91:9b:9b:97:0f:a7:41:f4:0a:b5:
96:d9:53:d7:59:fe:bf:66:84:04:15:ae:fb:28:03:fc:a4:28:
78:3d:47:48:41:1b:66:27:69:d3:89:64:04:0e:ed:87:af:af:
ef:c6:db:58:7c:5f:04:4a:8e:5e:bd:37:ed:2a:ed:86:35:7b:
12:3c:df:73:a2:8b:36:15:7c:11:b8:56:74:88:b7:14:a3:12:
fb:84:12:d2:8a:18:89:25:93:de:52:cb:88:46:9a:ff:c1:35:
46:18:b2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 05:47:57 2026 by rpki-client