Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: VNWA5bS5ZYyTahcYpnTGUdGmI1KfSHE31NSlkLzRqbQ=
Subject key identifier: C6:96:5C:3D:35:1F:E8:BE:3B:78:AB:94:5C:B9:A8:49:F2:B8:2E:9B
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019F66B983FE069800192F32FCBD4FC91951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 19B2
Signing time: Wed 15 Jul 2026 17:01:01 +0000
Manifest this update: Wed 15 Jul 2026 17:01:01 +0000
Manifest next update: Thu 16 Jul 2026 17:01:01 +0000
Files and hashes: 1: 1wC70OGBB84YZ8LzzI7GRE1FXLw.roa (hash: 61O42HPTbjFtxU4oF7cNiKUH0sHQufjgX2XI1LEtyCM=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: anhJJKolod/94Z5pLpV1MSS+tBWFnMJsnT5Eow3wNYw=)
3: YVZ-GH3S7Iq0JxeBAHpFVD2_Lx4.roa (hash: kM6UtuYisVsArbzf8eESDr1kRHymSG53rA/gBdAULqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 14:13:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:b9:83:fe:06:98:00:19:2f:32:fc:bd:4f:c9:19:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Jul 15 17:01:01 2026 GMT
Not After : Jul 16 17:01:01 2026 GMT
Subject: CN=c6965c3d351fe8be3b78ab945cb9a849f2b82e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:6c:88:0d:a7:90:44:96:4f:cd:2e:91:0b:
7b:3c:e0:89:af:8c:7a:d0:77:db:39:a8:da:d8:be:
bc:b7:f9:b0:2c:34:ea:04:de:d6:dd:2f:9d:d9:78:
81:6d:91:ae:a6:7b:f1:d3:c3:42:a0:6e:a0:d6:e9:
bb:0e:ca:32:f9:cd:5e:65:8d:d1:b0:b1:95:8e:aa:
61:87:6e:dc:2c:8e:98:01:4a:d3:16:76:8e:92:68:
44:77:cb:2d:95:30:61:7d:f5:7e:c8:9d:0b:6f:b0:
ab:23:42:02:6e:72:d9:ef:eb:a2:35:64:4c:46:90:
60:d2:ee:f4:87:fa:de:9b:2a:5c:76:61:30:36:2d:
c7:bc:9e:6b:94:6e:b0:b8:b0:0e:00:ba:77:c5:d3:
29:ed:9b:14:ec:36:7f:41:94:65:cd:25:be:b0:9d:
d2:d7:d8:d0:fc:17:74:fc:c5:f5:e9:ff:12:5d:2e:
3a:d4:f1:af:76:16:ad:bb:ef:87:5d:1b:d6:05:9a:
b0:6a:58:82:16:3a:52:75:e7:74:d6:a8:4b:b2:25:
40:12:4d:4d:13:08:75:2a:b8:7b:37:17:ee:be:1a:
e5:8e:f5:25:04:4c:0f:af:f8:31:02:09:5f:0e:08:
67:a9:4c:37:e8:3b:04:69:ed:d7:ac:6d:e3:c2:35:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:96:5C:3D:35:1F:E8:BE:3B:78:AB:94:5C:B9:A8:49:F2:B8:2E:9B
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9d:65:00:99:0a:e2:ce:85:70:c2:3b:fe:83:63:fd:e9:27:
0d:68:41:af:a1:a6:3e:00:ff:5e:ab:fe:9b:77:35:d1:5f:12:
41:dc:15:1d:f3:73:c8:62:86:ea:56:82:53:39:c2:4e:59:ca:
b4:0f:c8:4d:2a:79:36:79:d0:e0:09:5d:a9:c6:bc:7d:7e:dd:
0e:ff:66:78:27:a6:93:bd:79:66:5e:db:b9:f5:20:0a:78:45:
45:e0:e8:ba:44:b8:7c:7f:1c:29:aa:b6:e4:f9:0c:72:e6:2d:
ad:a3:e0:9a:e7:b5:9a:de:96:e4:c8:c1:bd:aa:b9:b3:f5:b7:
a1:0b:48:b6:8d:51:22:4c:44:8a:ae:4a:bf:12:64:83:bf:e4:
a1:6a:90:ce:c2:ac:3c:01:7e:63:83:88:3c:32:c2:98:8b:0b:
d9:96:93:21:70:ba:f9:13:3c:4c:be:c6:15:67:f5:36:d3:4d:
ba:88:35:82:9c:fb:74:ba:d0:0e:67:89:23:cd:b7:19:c8:b7:
a9:3c:37:1e:ae:70:cc:c8:da:10:b0:99:e1:84:bd:a8:18:0e:
e5:38:2a:ba:0e:71:34:5f:0a:b2:78:2f:d8:a3:a7:aa:07:aa:
73:2b:0a:40:9f:c6:1f:cb:d9:bb:a9:6f:27:c1:b7:48:71:58:
da:5d:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 23:54:36 2026 by rpki-client