Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
File: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json)
Hash identifier: ueGgMh1Hn5hNfgzz3vbc/KtV7fXH7syDubbc3Ux5O24=
Subject key identifier: A4:A9:9B:9F:00:F5:9E:85:D7:62:A6:3F:79:75:F6:F6:E5:55:7C:0F
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial: 019E1FB555592D0E0A0CA86C1A2202BCE131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
Manifest number: 0372
Signing time: Wed 13 May 2026 05:00:37 +0000
Manifest this update: Wed 13 May 2026 05:00:37 +0000
Manifest next update: Thu 14 May 2026 05:00:37 +0000
Files and hashes: 1: 4diahVLzyWADsafzMMkqiTBhFG0.roa (hash: riwko2/K4Xljlw5gsbraTspcz3PMLisMleLPiCJZSh0=)
2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: mXBZh5Cq30I2Y5Wwa0lSPIn9CdwkvtyRPVs/oztu9Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:55:59:2d:0e:0a:0c:a8:6c:1a:22:02:bc:e1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Validity
Not Before: May 13 05:00:37 2026 GMT
Not After : May 14 05:00:37 2026 GMT
Subject: CN=a4a99b9f00f59e85d762a63f7975f6f6e5557c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:fb:68:4f:c4:35:68:50:1d:34:ab:15:e7:
5a:61:cc:46:08:6a:69:15:90:3f:8e:2c:df:33:26:
37:2c:bc:b4:b5:b2:ee:3a:ce:5a:d2:a3:58:20:d1:
c0:98:eb:fd:e2:4d:3f:f5:02:4e:3f:5f:61:2b:e1:
08:92:9a:f1:e4:64:44:f6:23:46:f2:8d:de:89:0c:
a6:d3:bd:92:5c:b8:50:39:2b:f2:18:c7:b0:a1:9b:
70:5d:b6:87:7f:bb:b8:df:be:98:25:4e:e1:14:f5:
f1:34:8f:9c:76:b1:d7:fd:2e:36:be:29:f4:88:2b:
a3:f0:1f:5e:8e:69:fa:ca:e4:55:a4:12:4e:77:ea:
53:c9:4b:ae:f3:8b:3a:74:30:91:08:3e:62:40:70:
3d:55:f2:1a:bc:ff:ef:83:27:0a:59:d0:b3:3b:98:
25:a0:ac:e3:33:92:ac:e3:f9:86:27:88:d9:2d:3c:
fe:56:5c:2a:c0:95:91:73:ba:81:ef:9d:7d:f0:82:
e3:78:e8:79:13:0c:1b:82:46:a5:a6:64:f8:45:d5:
45:9a:66:50:39:33:4e:46:2e:53:62:27:18:8a:4a:
0b:c9:46:d7:7f:9f:8c:a1:1e:61:fc:03:2c:f1:b7:
37:b0:7f:56:fa:05:7c:d6:83:ac:b7:d2:35:65:fe:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A9:9B:9F:00:F5:9E:85:D7:62:A6:3F:79:75:F6:F6:E5:55:7C:0F
X509v3 Authority Key Identifier:
keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6b:0f:23:5a:aa:4c:17:30:d7:6d:7c:f7:53:32:ae:5e:1c:
b4:ed:c4:57:cf:2c:9a:92:b2:ec:f8:9f:37:f8:9d:1a:66:e3:
36:de:90:35:ae:22:f8:ad:46:91:12:ad:77:1c:ce:77:a2:df:
f8:7f:d1:82:ed:4a:62:ec:7c:59:00:8a:c3:1d:9f:7e:f1:91:
f1:2f:ac:ee:17:4e:7d:fa:81:ae:ae:7e:bd:33:91:94:3f:7d:
77:e6:ed:50:17:f5:5c:21:16:4a:ad:e6:0f:5a:7d:5e:b4:d6:
19:67:82:03:2a:7d:0f:28:4c:d8:55:65:dc:a2:c6:44:7f:e2:
9d:06:5c:5b:b3:f3:bb:0d:b3:c6:5e:32:3c:b1:df:de:e7:1d:
b6:e0:1d:28:b5:c1:9e:e6:7d:dc:f7:09:49:df:c0:0a:33:97:
d1:19:e4:18:fc:38:87:52:fa:e1:2b:c9:eb:4f:16:1f:42:4d:
29:39:21:e1:3b:6f:6f:29:4f:1d:d8:de:dd:9f:d7:7a:f1:da:
41:83:a7:39:f4:86:c4:78:df:87:f2:e5:0d:e9:6c:bf:ea:31:
28:bd:9e:7f:8f:4f:04:12:76:4c:53:c4:9d:f9:ab:8b:e2:42:
a2:bd:57:4d:71:66:cf:b4:1f:e6:20:19:b3:6c:73:a7:09:34:
92:0b:e3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:31:33 2026 by rpki-client