Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
File: 8kufSnwM67H5f6JAO2Me5tFuxjM.mft (raw, json)
Hash identifier: w8Y7A0P5/ibzsuZ51fVvjl+FTpaMWiCuCz6SSz1HB6M=
Subject key identifier: 10:7F:D5:CD:FE:44:65:CF:BB:B2:AA:F2:4E:82:B5:7B:CA:04:F6:A3
Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Certificate serial: 019E1D909423B82D31C65360D3A9C87A5F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
Manifest number: 025C
Signing time: Tue 12 May 2026 19:01:14 +0000
Manifest this update: Tue 12 May 2026 19:01:14 +0000
Manifest next update: Wed 13 May 2026 19:01:14 +0000
Files and hashes: 1: 8kufSnwM67H5f6JAO2Me5tFuxjM.crl (hash: 4rUhV25529jnV1GJBK3ydVkWfC4vSdC8aiU/No1CNzM=)
2: l226mFgK6T2Z60Q9UPJ4UVEXvGI.roa (hash: sMVz2G2/suJpzTvieIkpkHigX+RGGXDj8VHYY+8cT9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:94:23:b8:2d:31:c6:53:60:d3:a9:c8:7a:5f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Validity
Not Before: May 12 19:01:14 2026 GMT
Not After : May 13 19:01:14 2026 GMT
Subject: CN=107fd5cdfe4465cfbbb2aaf24e82b57bca04f6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:93:58:5d:63:5f:35:d9:71:04:db:ea:ff:
8a:41:09:1c:e7:a1:d4:96:3d:0a:a7:70:fa:0c:4c:
53:9f:5a:88:56:c4:bb:e0:14:45:89:5e:d4:f2:fb:
e0:eb:70:da:57:31:90:2c:9a:34:b8:79:91:e1:26:
08:99:06:91:da:ad:fe:e9:58:3a:a9:48:7d:b6:36:
85:86:e9:53:40:ba:7d:0d:6e:14:37:62:80:51:64:
ff:4d:d1:e0:3e:9b:c9:07:bb:18:cb:28:2f:0f:55:
18:0f:fa:e8:94:56:01:3d:8a:69:f1:74:2d:3e:ff:
22:9e:50:87:35:88:66:fc:5c:96:45:f4:90:3d:b7:
38:8b:e3:93:34:71:a7:3a:99:08:46:6a:d0:dc:11:
2e:5d:8e:6a:2a:be:bd:f0:38:61:85:40:57:17:ad:
d5:2a:90:b7:da:05:5f:8f:01:22:f4:f4:c5:3c:f7:
96:0a:aa:bd:d8:1a:20:cd:2f:7a:2e:b7:b7:50:33:
15:dd:92:6d:e1:b4:ab:90:01:de:de:e4:1e:06:18:
ec:4a:24:09:3c:5c:f4:7f:84:28:f6:0b:5d:04:e4:
73:f2:ab:39:8f:73:31:3d:6b:47:a1:6d:2a:96:d5:
f7:5e:1f:25:ae:fc:e8:8d:78:c9:c3:a2:6a:a7:3c:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7F:D5:CD:FE:44:65:CF:BB:B2:AA:F2:4E:82:B5:7B:CA:04:F6:A3
X509v3 Authority Key Identifier:
keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:01:a1:1c:b9:ae:fc:f6:53:fc:ea:bb:f8:a0:3c:cd:27:1d:
50:d2:08:db:75:51:d1:6a:fa:b2:59:bb:26:5c:86:cf:44:80:
12:dd:c4:28:cc:55:05:1c:61:3f:94:fe:df:f0:3b:13:ed:be:
8a:6e:8c:af:f2:ab:a6:9f:92:c8:2c:1d:46:fd:75:72:50:fb:
04:56:e4:8a:ac:4c:d9:83:21:75:17:e4:81:1d:81:e9:71:9d:
d2:2c:67:dd:85:c9:90:c7:b3:a4:8f:d7:be:3b:06:67:d1:18:
65:28:45:72:7e:9f:6d:18:e2:0b:4c:4d:ad:c2:60:6a:cc:0a:
87:f6:d0:64:6d:65:e4:f0:e8:7c:9a:e0:77:4c:66:ed:fe:d4:
a2:33:17:e0:66:83:33:05:9a:57:43:88:e2:d6:55:4f:16:09:
21:0a:37:0f:5a:16:58:f9:e4:8f:d1:4a:fc:32:d1:0d:19:b4:
8f:94:d1:15:e3:71:21:34:cd:a2:17:2b:8e:0e:05:c1:9b:ff:
5b:ad:12:74:70:7e:9a:4e:7c:7c:6b:c1:15:e1:bb:74:4f:89:
f1:e5:6e:be:8a:cb:4f:21:fe:7a:83:a1:39:83:7f:d3:b1:4c:
46:5d:3a:9b:2a:d9:5a:da:f5:d7:fd:5f:50:0d:b4:ae:1e:44:
fa:7f:56:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:28 2026 by rpki-client