Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: /a/GDsxS1FMLxET1heTiSkNdYLpkQlL6Xx70Kq4P/cY=
Subject key identifier: 73:95:31:2E:E2:ED:22:B9:5D:AF:3D:17:B7:BE:A9:10:26:AF:6A:30
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 019F137862D76283FFB4507D3674CA7372C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 1035
Signing time: Mon 29 Jun 2026 13:01:24 +0000
Manifest this update: Mon 29 Jun 2026 13:01:24 +0000
Manifest next update: Tue 30 Jun 2026 13:01:24 +0000
Files and hashes: 1: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: jHrGPpgHUX8DFXfLLeabwGz1ubKM1s4inc9MDlapM/g=)
2: RAC2EIsVMHG6hRns7HbMn17gGls.roa (hash: FF3H1038Rgf//9+NtLOprCe/ZirTllG7HflUAk9dINQ=)
3: nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa (hash: iN63qFqYR+Oirh/aAc/OhTjdpHDfVt7KEG3Iws+eD0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:78:62:d7:62:83:ff:b4:50:7d:36:74:ca:73:72:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Jun 29 13:01:24 2026 GMT
Not After : Jun 30 13:01:24 2026 GMT
Subject: CN=7395312ee2ed22b95daf3d17b7bea91026af6a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:bc:ba:3b:ec:98:ba:fc:38:90:be:3d:ae:
52:12:9d:b3:07:6b:dc:34:c6:b7:50:5d:66:30:cf:
9a:7d:14:21:9e:e8:c0:ba:1d:4f:0a:17:21:bb:f2:
30:00:0d:f6:a3:74:69:aa:17:f1:4e:59:9e:9b:31:
a5:d0:28:3c:0a:0d:24:18:b0:0d:68:39:f4:32:f3:
78:79:8e:f1:c8:8e:de:16:db:96:65:8a:76:5c:f9:
41:a8:87:d1:ca:73:73:0c:16:9e:46:68:83:0d:58:
77:59:0c:77:ce:e8:30:5d:7a:69:59:87:17:ee:b3:
38:b6:5d:87:96:e0:dd:e5:1e:f6:ac:7e:bd:41:11:
b9:87:6d:9d:6e:e5:85:d0:c9:3e:b9:64:1b:24:c6:
55:4c:a2:fc:78:c6:31:db:ed:b0:7b:2f:b1:dd:3c:
e9:dc:d7:20:0f:c4:e1:9a:bd:8c:1d:8c:e2:04:45:
16:89:a4:9e:33:4b:28:63:21:c3:de:49:55:53:24:
70:81:5b:d0:ae:ef:5d:b0:8c:9d:9d:c0:be:c0:db:
fc:9c:29:65:75:14:32:09:b0:85:59:69:ff:53:19:
1b:75:b7:25:f2:d3:49:3b:50:f5:47:91:5f:44:96:
ea:db:c3:9d:f3:61:9c:c0:93:42:e0:9f:d8:07:91:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:95:31:2E:E2:ED:22:B9:5D:AF:3D:17:B7:BE:A9:10:26:AF:6A:30
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5c:dc:c3:14:26:d3:3e:f0:66:48:77:3a:88:72:bb:f0:61:
5c:d3:ac:72:04:22:02:2d:20:5a:86:4e:4d:c9:a8:20:a3:66:
ad:b4:af:98:03:b6:73:8a:1d:f7:cb:46:39:06:14:3b:16:a3:
62:73:0b:89:a6:0f:5e:20:43:3e:53:c7:54:81:58:83:1d:3a:
f1:ef:3d:18:47:a6:7d:96:d1:c2:0f:a2:fc:35:11:4e:b0:4a:
23:e7:70:e4:9d:0d:17:98:e0:85:1a:d0:a0:6a:bb:89:9e:03:
70:2d:e1:17:74:50:93:1b:6d:78:0a:f3:58:8f:44:93:52:a0:
f3:1a:95:16:8f:a7:ca:5e:2c:5a:67:fe:69:a4:bb:ae:11:db:
14:29:2e:cb:24:df:41:54:d8:e8:e1:ad:7c:cc:b0:d5:36:43:
90:a0:cc:2c:2a:a4:e8:ea:a8:cf:4c:ea:3f:19:9a:23:43:e8:
3c:b4:e2:34:cf:81:fc:33:97:26:43:cc:70:e4:bb:3d:2d:6e:
96:8f:d6:ec:7f:8a:3e:a0:80:01:f6:03:4f:c6:4a:c4:06:e3:
cc:db:c9:68:f9:36:f9:22:5e:84:b6:2d:73:b7:24:d3:f1:80:
58:14:a2:9a:4a:d7:9c:14:09:18:99:a1:79:c9:da:61:89:60:
3d:44:85:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:42:36 2026 by rpki-client