Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: JW0SWBcdJyNR7/BKmMWkas9kpuw1qILoCOllhl1TkIQ=
Subject key identifier: CB:4A:F3:7E:67:8D:00:83:A3:53:72:A4:F9:2E:B9:C0:A4:7A:7A:D4
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 019E1EA2EEB6BB6B16E38487A3A9D128978B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:00:54 +0000
Manifest this update: Wed 13 May 2026 00:00:54 +0000
Manifest next update: Thu 14 May 2026 00:00:54 +0000
Files and hashes: 1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: qEI2WAJ+tZi+iT9bwbVazaNknDMrTH0EV1DwoztI9Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:ee:b6:bb:6b:16:e3:84:87:a3:a9:d1:28:97:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: May 13 00:00:54 2026 GMT
Not After : May 14 00:00:54 2026 GMT
Subject: CN=cb4af37e678d0083a35372a4f92eb9c0a47a7ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:29:ff:5b:ad:c6:fc:e8:9b:93:76:0b:89:
f3:a9:45:23:a8:18:e2:73:69:b6:86:de:db:71:83:
2f:5c:f3:c3:18:4b:2e:20:b8:79:75:e3:da:42:38:
09:32:e9:04:13:05:8a:36:a5:aa:77:62:fa:2b:3f:
21:80:84:92:a2:1e:96:69:42:b6:76:e8:2c:d5:50:
54:ba:d8:dc:4f:a2:60:f5:23:ee:1a:1e:b4:57:cb:
15:cf:47:21:9c:65:50:fe:35:20:39:2f:c8:03:93:
f4:31:f3:31:78:0b:99:03:a4:ea:ed:21:c3:5c:d2:
65:0c:83:d2:bc:1d:c2:82:46:59:f5:8e:89:73:20:
3d:6b:1c:c3:11:e6:54:fb:66:ee:c9:bc:63:c1:43:
44:48:30:a3:43:09:eb:26:c2:2a:86:f2:79:e7:37:
7d:e3:c6:4b:08:61:bd:bc:1b:cd:e9:0e:f4:92:de:
e0:63:2a:8b:eb:e6:c2:07:de:b6:6e:7f:f6:b7:57:
24:37:d1:c2:19:1b:1e:52:97:a3:86:d6:e2:45:a5:
3c:4d:e7:a2:a9:5e:db:57:f0:84:1b:8e:54:52:1d:
77:6a:49:d7:e3:2e:19:f5:aa:16:22:a9:54:9c:2d:
b8:9b:6d:a0:1e:bc:f6:5a:0c:ac:00:bf:6c:76:bb:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4A:F3:7E:67:8D:00:83:A3:53:72:A4:F9:2E:B9:C0:A4:7A:7A:D4
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9a:2c:2d:91:36:56:ef:03:0a:43:9c:92:21:14:81:ea:79:
de:8c:df:a1:ed:cb:49:8b:22:24:8a:0a:57:14:52:25:3f:c3:
e1:62:e7:7c:ce:cc:79:51:f2:26:ec:f8:ea:17:8b:9a:e7:b3:
b1:9a:2a:9a:ba:9c:0b:d8:ae:2d:9f:9c:35:79:f4:13:8d:3e:
d5:fe:28:bb:35:eb:c8:57:9e:01:5b:81:67:70:83:9b:e9:9b:
ee:c1:bc:0e:3d:76:a7:d4:87:da:c6:29:78:b0:f0:79:52:07:
67:47:e1:3a:30:be:7e:c5:83:5a:1c:ab:6f:12:f5:e5:b4:63:
06:27:2d:31:f8:df:8b:13:08:b5:52:4e:40:24:a7:1e:e9:4a:
b3:f5:bd:48:a2:97:85:82:33:33:58:13:c6:f0:21:36:8a:5c:
77:bf:c6:b3:df:38:67:0c:e7:80:33:0a:78:f9:47:05:28:e8:
08:c9:6f:c7:60:00:bf:0a:4c:78:56:3e:1a:99:69:1e:11:03:
2a:d9:c6:b3:85:ae:ed:d0:f5:75:91:63:a8:3a:b0:b4:50:00:
e9:f5:62:e9:74:aa:69:18:52:ff:4d:e8:4c:ad:77:f4:52:c6:
a6:f8:80:77:fb:6d:8d:8d:05:fe:08:59:c1:39:d0:b0:3d:5a:
c6:c4:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:26 2026 by rpki-client