Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: 5TcFjwJ3AUgGM9jmpJtI/GXGeGNtg/xC+8TKac+nZMc=
Subject key identifier: 60:21:87:B9:E1:FA:90:C8:D4:7E:F2:25:FB:9F:D2:00:E3:51:67:4E
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 019E1E35B3FBFD45F798AB43A6EA03CFDCD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 04FC
Signing time: Tue 12 May 2026 22:01:36 +0000
Manifest this update: Tue 12 May 2026 22:01:36 +0000
Manifest next update: Wed 13 May 2026 22:01:36 +0000
Files and hashes: 1: 26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa (hash: i3y/4e612Y8TxwRcGfb+jB6bsawJZiJXB+VOVsYv97E=)
2: 6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa (hash: wloeetK1rz73W5ni+d8ZKgGnFA6OBAZGbgtH0vyx3gM=)
3: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: vdk6yvNacIr7244ZMf6GYuH1L02jrxALYpUIDLOCwH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:b3:fb:fd:45:f7:98:ab:43:a6:ea:03:cf:dc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: May 12 22:01:36 2026 GMT
Not After : May 13 22:01:36 2026 GMT
Subject: CN=602187b9e1fa90c8d47ef225fb9fd200e351674e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:a9:1c:85:f5:72:e6:23:72:47:15:8a:60:
06:bf:f1:77:a6:08:b1:7d:d3:ef:37:50:63:41:f4:
c2:24:e2:dc:e7:d0:41:e2:a3:04:f1:0d:91:23:d8:
c0:5e:b8:80:e1:38:cc:39:ba:30:7e:d3:0f:c9:52:
f3:6f:e9:22:23:13:2d:1d:db:7b:15:29:0c:44:16:
2e:5e:6e:da:34:a7:0e:be:62:37:3e:8f:a5:07:ca:
ad:9a:ab:68:18:04:58:b2:37:a1:9d:78:e5:6d:db:
5c:13:da:9a:ca:49:48:0f:79:f0:4c:bf:bf:ab:04:
de:b5:22:f5:97:9c:ad:71:88:3c:07:59:6e:50:47:
d8:bf:4c:94:bf:6a:83:2f:b6:a0:6b:29:a2:19:f1:
4e:04:3a:df:ea:6c:9a:0f:84:98:9c:95:00:41:3e:
a0:8c:19:7e:d3:6a:98:a5:16:43:f4:b0:07:bb:a6:
75:fb:f5:74:b6:1f:85:c2:ed:f8:d3:20:a8:68:db:
e1:b5:aa:13:92:fd:4f:85:e7:10:e9:20:94:9c:5e:
08:32:f4:c2:52:e9:b6:16:99:b2:65:46:6f:59:dc:
75:89:77:3c:89:34:8a:51:75:35:0c:bc:16:c5:32:
3c:0d:18:b8:f1:69:c3:8e:f1:74:fa:b1:92:47:1b:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:21:87:B9:E1:FA:90:C8:D4:7E:F2:25:FB:9F:D2:00:E3:51:67:4E
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:59:f9:a7:aa:cb:7c:88:f7:8a:92:04:6f:4c:7f:34:51:5c:
5c:52:73:7e:fd:a9:00:49:af:b3:a5:54:e6:08:e2:ec:3a:66:
91:23:f8:de:a1:c0:da:8f:08:77:be:da:6b:a4:ba:00:0b:24:
79:68:04:11:91:72:d3:80:ee:cc:9e:5e:d7:af:4a:d2:14:c9:
99:41:fa:5a:05:47:e2:0f:9e:96:da:37:3e:dc:d3:28:f9:05:
29:d4:f9:35:ed:f6:51:66:40:92:de:ff:ee:2d:b3:2d:d4:bd:
8e:ac:73:57:da:a6:b8:a6:55:e5:af:11:9e:3b:1c:b9:00:53:
e0:b4:f8:d4:5f:20:06:72:c8:60:d5:c3:e2:89:55:f8:c0:24:
3f:5d:51:18:21:98:8c:1d:7b:54:d9:fe:81:b6:ab:ca:46:02:
94:67:d2:6d:77:67:2a:ea:ad:44:8b:b9:85:b5:00:c8:2d:0b:
e2:0d:f7:70:e6:f9:41:72:7e:34:2b:34:35:51:c2:51:1d:12:
0b:11:50:f8:b8:f8:51:da:6f:d8:24:51:78:5a:af:c2:93:2d:
a4:3e:0d:98:29:04:5e:f5:09:46:b4:b5:bf:d7:7d:0e:3d:05:
83:2b:d5:92:eb:8a:1b:82:45:6e:88:c8:00:40:dc:3c:91:e3:
ec:19:2f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:17:41 2026 by rpki-client