Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: WRotRQrokhDgo1BUpbeJIjLcfxk7s4IfT8KfrhxDYNA=
Subject key identifier: 0E:7C:81:32:37:40:6D:DA:51:30:2D:8A:CA:E8:1E:70:A3:BC:D8:D3
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 019E1CB54DEB7BA1ED2C38CB23358696B41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 15:01:44 +0000
Manifest this update: Tue 12 May 2026 15:01:44 +0000
Manifest next update: Wed 13 May 2026 15:01:44 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: xcz8hOOlZmPTi5bvFLEE+u603K2e1DNcLljEZlzH13c=)
2: ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa (hash: iGCdrPf4Ppnrs4dgUDy3DlxhNj0AHzaCi9s56mQZshU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:4d:eb:7b:a1:ed:2c:38:cb:23:35:86:96:b4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: May 12 15:01:44 2026 GMT
Not After : May 13 15:01:44 2026 GMT
Subject: CN=0e7c813237406dda51302d8acae81e70a3bcd8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:0e:92:4c:94:1a:9e:2e:bd:2c:aa:48:67:
9d:72:8d:7f:e2:b8:f9:b8:84:d3:f4:eb:f5:04:75:
aa:e7:eb:dd:e8:33:da:ce:17:43:8c:dc:6a:15:f1:
e5:92:f3:fa:3c:d8:c7:44:1a:ef:0f:d5:f6:1a:51:
e2:66:84:28:9f:e4:90:92:a6:2d:c6:1a:f2:63:f4:
5a:d6:e1:4b:d4:8c:0a:76:6a:10:91:a5:60:61:19:
96:23:7f:64:0d:7a:58:44:cc:33:4c:21:5a:65:8d:
a9:73:ae:73:36:d1:01:ad:f3:cd:fe:5a:aa:5f:71:
ab:17:28:a4:6c:93:26:67:b9:4e:95:a8:e3:fe:c2:
93:e5:08:ed:c9:dd:56:d2:34:da:e3:f6:b5:65:1e:
44:00:a6:b3:d6:fd:f1:89:ce:02:1a:81:1b:30:77:
3d:56:11:ee:ab:10:79:b9:3b:2a:79:07:93:b7:3b:
2d:9d:c3:80:fc:70:7d:77:b9:87:82:79:5b:bf:60:
05:ed:b5:19:18:d2:d2:30:2b:58:d3:d3:14:b1:75:
a0:d2:5c:d5:c5:df:71:2d:1d:5b:9d:1e:a6:28:9a:
bd:65:11:87:3a:5b:2d:ae:94:b8:1d:31:30:d1:fd:
5c:6d:be:bc:d9:8b:33:40:69:d4:c9:ac:06:ae:7d:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7C:81:32:37:40:6D:DA:51:30:2D:8A:CA:E8:1E:70:A3:BC:D8:D3
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:65:ac:57:05:aa:ad:83:03:0f:ec:ee:ad:a2:e6:63:ff:f6:
28:49:ff:bb:c9:95:e5:01:22:cd:34:56:75:71:70:13:32:3a:
c7:9e:73:88:87:f9:4b:dd:74:86:2c:68:2a:d0:fe:dc:b7:cb:
82:a9:55:0c:f3:3e:cb:fa:91:9a:fe:43:c6:ee:c0:eb:9c:76:
30:7a:b3:40:f1:ab:a7:24:99:ca:0b:e2:33:e1:9d:ab:80:18:
5c:ab:0e:e6:7a:9c:17:a0:82:49:f1:0d:ec:00:78:6a:8c:b5:
ea:25:12:0f:f8:9c:42:b6:a6:c4:24:4d:e4:9f:04:ab:07:02:
54:3d:f1:cc:16:33:10:55:15:9c:50:ab:a0:d5:94:8b:d6:a9:
c1:96:be:c0:03:82:c5:0a:80:c7:3b:68:f0:e0:c3:10:1b:04:
da:0a:a4:ca:f8:af:7f:3c:d1:52:cf:d0:92:ff:2a:e0:5e:47:
82:a5:c9:c8:0a:1b:b4:ab:73:5a:8e:1e:1c:6d:da:bc:ec:b2:
c1:ce:d4:7d:19:16:ae:f7:3a:98:5d:b8:e1:c0:d7:88:2f:26:
58:1d:77:5c:59:ff:c5:a8:28:51:2f:87:50:27:c3:c7:2d:3c:
79:db:f2:2d:d8:79:d2:a1:fd:da:47:68:ab:e5:f8:3c:ff:d3:
49:ca:3d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:49 2026 by rpki-client