Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: pl60c3XogH9UHYlJA0DZOGNF33ygm8l1uEICZKyEPjI=
Subject key identifier: 41:DC:3B:FA:86:4F:C0:6A:EB:49:26:C6:B4:F5:C5:81:0B:E1:1D:00
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 019E1EDA2C24736A20579A07003FC97E5F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 1898
Signing time: Wed 13 May 2026 01:01:15 +0000
Manifest this update: Wed 13 May 2026 01:01:15 +0000
Manifest next update: Thu 14 May 2026 01:01:15 +0000
Files and hashes: 1: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: dKqpSB+1l6CQp2JmFkND4Pq5zxxbR5i1sw9HgblYZU0=)
2: GYXVPChjE0NPSEdDhucM44Q05y0.roa (hash: Aj116UIxTV5UX+R+IJJ14L/FveXnD0nSIlVBqSjnPM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:2c:24:73:6a:20:57:9a:07:00:3f:c9:7e:5f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: May 13 01:01:15 2026 GMT
Not After : May 14 01:01:15 2026 GMT
Subject: CN=41dc3bfa864fc06aeb4926c6b4f5c5810be11d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:6a:6a:09:95:d6:6a:6a:a4:b3:ad:87:51:
b1:b7:20:32:d7:31:b4:85:0a:06:c0:21:ab:4b:4a:
00:c1:9b:40:bb:63:a4:fe:6f:6a:3f:0c:69:e7:37:
a3:46:c2:b5:c7:e4:a8:49:ca:41:b2:c9:4f:71:dc:
5d:52:fd:82:e3:9f:97:51:ca:26:6c:cd:65:9e:f1:
87:f5:9b:1f:01:a6:a3:0a:33:71:1b:8d:e8:8d:4b:
d1:56:dd:4d:b9:01:be:3e:63:4b:59:93:d8:b8:db:
86:48:3c:d7:c2:32:1b:c7:a3:2e:02:2a:d7:c2:62:
2d:15:03:37:72:a6:32:2e:07:1b:c0:f6:1c:e8:4b:
88:45:22:c1:af:34:a3:11:59:94:bb:1b:4e:e9:dc:
6c:ea:18:95:c9:62:e2:db:19:c9:68:15:e6:12:e4:
9e:5a:c3:d0:ab:c9:9b:19:0f:39:6a:18:e4:44:f5:
c3:74:27:28:95:65:98:b4:e5:45:65:92:5b:0f:c4:
0e:54:79:48:74:f7:35:04:c1:e1:7f:28:61:2b:28:
c8:ac:55:b7:42:a9:6b:5d:6f:91:8b:35:91:1c:41:
fa:13:20:8a:4d:52:76:b0:b0:7d:23:cb:78:80:6a:
d7:69:de:47:0b:5b:a2:a7:32:c5:ce:ab:1b:de:34:
50:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DC:3B:FA:86:4F:C0:6A:EB:49:26:C6:B4:F5:C5:81:0B:E1:1D:00
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:09:d4:52:ce:f2:f3:8c:85:26:59:5b:9c:fc:d2:0c:f5:d7:
74:77:32:ca:4b:eb:eb:1e:1e:50:67:f6:93:8d:12:a9:66:a9:
49:bf:fc:0f:af:2e:9f:a2:fd:d2:b0:d7:36:ea:76:01:48:e4:
d2:d3:3a:10:d2:91:e0:c7:9e:28:82:b6:b1:8d:63:d1:44:6e:
06:75:02:4e:7c:0c:96:63:8d:05:f5:e7:ec:f7:7e:c6:cf:88:
63:a8:1b:10:d0:4e:a6:a1:55:38:7c:55:c2:06:d9:d5:0c:76:
b6:04:30:85:85:d4:83:36:69:83:27:2a:84:8e:b7:37:c0:d5:
63:57:f5:60:d2:73:20:22:a7:dd:48:77:e7:02:9b:e6:75:0a:
7c:02:42:e1:72:7d:d7:9e:9e:fc:c0:24:d8:b2:f3:ca:65:c9:
20:f5:91:23:7d:a1:91:7d:f4:d2:c3:9d:18:0f:db:a1:81:87:
f8:89:c6:47:d8:9b:32:ac:87:59:78:26:c1:12:47:d6:2c:c5:
2c:02:c3:c0:78:cf:60:69:2f:8e:96:bb:ff:8c:b4:9b:38:30:
61:96:d6:25:17:72:b6:50:a1:a3:e4:3d:d8:45:ae:80:4e:8b:
46:15:bc:e6:fb:06:ba:7b:f6:56:1a:40:37:49:fb:41:b2:e1:
13:2d:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:02 2026 by rpki-client