Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier: S47b9dBLA27tX64QIy/fxjQ83LQQ3FZgJI1JAYbcR+A=
Subject key identifier: 1E:53:3D:57:7D:19:EE:D0:02:A8:1B:B4:70:53:66:42:04:B4:B2:F8
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 019F183080A19868A44D8EE9F86F2295CA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number: 1997
Signing time: Tue 30 Jun 2026 11:00:59 +0000
Manifest this update: Tue 30 Jun 2026 11:00:59 +0000
Manifest next update: Wed 01 Jul 2026 11:00:59 +0000
Files and hashes: 1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: umfTx3LC28jMlEAsiHSRfvXADPXlCHKbOvqR+ODvn9M=)
2: unUyBQz8XFF2OcgZ1f90_tl9Ad4.roa (hash: Q3zQczsKFUa5DCI4QfqsevX6E5xk3SVGs2WbjqkExHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:80:a1:98:68:a4:4d:8e:e9:f8:6f:22:95:ca:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Jun 30 11:00:59 2026 GMT
Not After : Jul 1 11:00:59 2026 GMT
Subject: CN=1e533d577d19eed002a81bb47053664204b4b2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:25:45:fa:ec:6f:0d:4c:d6:86:b3:80:a5:2e:
a0:60:3d:a6:98:a4:9c:e9:3d:a3:73:d0:25:d5:f1:
6b:7d:d1:08:8b:37:e0:64:66:bc:07:4b:69:ea:90:
95:46:7e:d4:02:e2:69:37:b8:6b:74:89:47:07:c8:
53:6a:e3:14:05:3f:d2:2d:cd:16:0e:fd:07:ce:7e:
b3:db:dc:d8:44:82:34:e3:b0:36:dc:14:2c:87:7a:
5a:48:15:d2:77:6f:2a:63:51:a9:74:f2:7b:8d:61:
b2:42:a9:e8:f6:7a:19:0b:03:ab:f8:d9:e6:c5:c3:
53:45:91:12:90:2a:bf:a3:ea:04:7e:a9:4e:0a:21:
c8:82:d7:73:aa:24:5d:5f:34:f2:72:77:df:02:b6:
f1:38:f8:ff:57:79:77:aa:96:5e:21:f4:10:f4:ab:
0a:6b:31:88:fa:f6:dd:e3:80:f2:d6:e6:fc:fb:ed:
cf:df:ef:94:f5:6c:f4:e4:29:dd:cf:4b:97:54:b2:
37:c4:f4:5d:dc:77:33:7a:93:9d:7b:45:d7:f4:5b:
23:2d:38:48:f6:3c:82:3d:ed:1a:8f:6c:a9:f9:02:
55:1f:96:62:9d:fb:5c:be:f3:3f:4f:16:e4:18:21:
0f:62:03:26:01:61:4d:92:bf:eb:c7:e4:d8:9e:99:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:53:3D:57:7D:19:EE:D0:02:A8:1B:B4:70:53:66:42:04:B4:B2:F8
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2b:32:7d:c4:83:d5:a8:c7:d4:3d:4e:e4:f8:3b:99:27:71:
99:c4:f2:28:5f:21:5a:71:45:6c:de:f8:f4:59:ec:76:84:49:
9f:20:10:92:e3:fe:f0:c6:ee:9f:1b:de:cd:61:a3:63:0c:46:
30:29:69:d4:05:9c:10:4f:70:c8:34:ec:1f:ad:9a:91:23:e3:
e5:83:a5:3d:be:2e:f7:66:c2:3e:9a:de:29:66:90:c3:9d:e3:
d1:f7:a7:4f:89:39:57:94:d8:e6:fb:5e:56:d6:0a:9a:de:8d:
de:90:a4:14:ff:ca:a7:8d:5d:cd:63:6a:ae:61:41:05:91:93:
05:68:d6:96:c6:12:cb:24:f9:d9:fb:5a:2a:ce:30:0c:a1:67:
cf:6d:ea:47:8d:ec:3f:44:0e:2a:c3:f7:e5:be:40:81:82:46:
20:70:eb:09:73:78:f2:0a:74:c6:78:77:57:73:90:0a:da:30:
d4:ee:89:c1:38:d3:ef:c1:72:0e:a9:c2:30:ea:d7:00:3c:ee:
e4:66:12:5e:6e:9d:f5:cd:9a:ac:ff:9a:82:12:67:d6:a5:e1:
c8:11:5b:23:8d:f0:70:6b:3a:67:44:98:eb:5e:95:c7:f8:d9:
42:6c:70:0d:72:2d:63:4c:82:43:ab:56:23:54:20:3b:92:c6:
61:1f:5b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:31 2026 by rpki-client