Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: MtqMxryxnVeA94WYAG06GlHCKwpvrXGfefjmZTp9ss0=
Subject key identifier: BF:42:AE:A7:C5:7F:8E:2D:CD:B6:AD:44:AE:24:2E:DD:26:25:51:5F
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 019E1D59B77D3ECE00176FB5AE8D298B4117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0D5F
Signing time: Tue 12 May 2026 18:01:19 +0000
Manifest this update: Tue 12 May 2026 18:01:19 +0000
Manifest next update: Wed 13 May 2026 18:01:19 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: UsvplN7FNoROWOnfxbx7y+qzdvxZEt93Kff+ZHQURyM=)
2: ke5BBmP9uJ5If3ItewQloGu8EQA.roa (hash: sg4mup0G5eaNuuse6GfgbbBnUv1YkDhld8yTzOiPKE4=)
3: wmiyGteEO918b1PMxNCpgfoVaDs.roa (hash: ZPhGNaDbDb+DbDzUXj55AFIPAg+DVhgaYwBguflVQCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:b7:7d:3e:ce:00:17:6f:b5:ae:8d:29:8b:41:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: May 12 18:01:19 2026 GMT
Not After : May 13 18:01:19 2026 GMT
Subject: CN=bf42aea7c57f8e2dcdb6ad44ae242edd2625515f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:b0:6b:ad:3e:af:b3:86:52:0b:2a:f2:ea:
d3:20:46:8e:98:69:19:ba:09:64:41:7b:06:d1:94:
50:50:77:09:95:88:b6:0e:b2:e1:05:f1:08:6d:ca:
ce:b3:70:cb:90:73:66:b4:52:f5:d6:ff:ad:31:4f:
a3:d4:96:b2:d9:df:6b:8c:ef:ed:ba:de:a0:31:6c:
fc:e5:a8:84:92:9f:1e:df:84:b2:19:30:32:ce:68:
e4:76:56:75:29:d8:29:a5:48:6b:28:c0:f3:28:e8:
f4:03:f7:2f:f1:c8:c4:ff:7f:f5:dc:77:a2:d4:f9:
0c:6a:ca:70:6b:36:a9:15:43:fe:a4:0f:e4:09:cb:
ca:96:d7:ab:5f:f2:21:41:1a:5d:a3:c4:95:f9:ec:
c8:e7:b0:a9:79:20:dd:10:2d:64:4d:68:d3:15:2a:
7d:02:c0:ff:46:7b:83:9d:c4:8d:5b:76:cf:14:ec:
5b:1f:3d:84:4f:6e:a6:ad:c7:bd:08:e2:77:14:f5:
45:a2:e0:c2:16:f5:7d:48:81:35:80:20:33:8a:5c:
88:c6:12:7a:8d:31:3e:69:6f:2f:21:aa:ca:b6:a2:
8e:47:e8:11:af:df:c7:81:c8:7c:32:bc:ce:7d:02:
06:cf:f8:f0:57:b7:e6:61:8f:d9:58:52:44:8f:a4:
6e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:42:AE:A7:C5:7F:8E:2D:CD:B6:AD:44:AE:24:2E:DD:26:25:51:5F
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d3:20:a2:75:55:16:8a:2e:9b:69:42:0f:b2:5d:d5:70:b8:
05:45:da:99:bc:16:a2:f9:45:1b:45:71:1e:b6:90:af:d7:4e:
dd:72:a1:37:dd:0f:1d:2d:61:1a:b9:50:78:65:51:0a:26:dd:
77:40:8b:9b:07:c6:b9:f2:50:85:bd:02:18:10:23:59:a2:53:
02:ae:86:dd:a4:e0:02:ec:05:a9:33:cf:02:22:52:64:f6:cd:
aa:1f:c7:7a:21:0e:b7:71:1d:b4:74:39:8c:75:55:51:88:32:
b2:6a:fa:93:37:e1:38:40:48:01:54:16:9b:80:83:58:31:aa:
80:2a:21:e8:e4:20:9d:88:bc:c9:1c:4c:39:52:99:b8:1e:34:
8b:87:58:af:55:12:0a:48:be:18:46:93:c0:0b:b3:62:df:c1:
58:53:81:89:a1:9d:79:52:0a:50:c0:52:b2:88:f9:49:bc:7f:
a7:d8:63:9d:ee:b5:64:98:e4:5b:57:4c:58:7a:62:d3:24:ff:
7e:34:b4:24:28:5d:89:e0:38:bf:d9:3a:20:35:8e:8f:c5:04:
f9:1d:35:dd:50:67:42:97:02:dc:cf:e2:ef:04:9c:f3:b6:45:
28:84:26:a4:67:61:42:be:f5:d8:6c:ff:c4:3a:d8:15:50:0a:
88:3a:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:08 2026 by rpki-client