Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: tBQiSkyHli45g3XHBFkHBbP5Dk3oMsdT4+I4nPlcoxQ=
Subject key identifier: AF:C9:ED:52:33:56:56:2B:F8:89:35:4B:D5:98:80:AA:84:AB:19:20
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 019E1E35FBDF1F63DAD0C084E96E0B05C384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 190D
Signing time: Tue 12 May 2026 22:01:54 +0000
Manifest this update: Tue 12 May 2026 22:01:54 +0000
Manifest next update: Wed 13 May 2026 22:01:54 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: o8tEykjBygQLaQJ4qZMgUNCbwI3rBDp+zxF+K3eJ1pc=)
2: l6d-s6pGrwjzo2MVrYFXt_vj8FQ.roa (hash: GWCGfDBQXbx8zU/9pE2/fyqt5ipxe1FQBrMDGvjciQY=)
3: wNW1OJ6nNt-LJ_qt91rusWZGqUk.roa (hash: Uf/zMrnHEJKdoypvZyEP0WBvkTlQGSBhuCZb5Fsvgco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:fb:df:1f:63:da:d0:c0:84:e9:6e:0b:05:c3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: May 12 22:01:54 2026 GMT
Not After : May 13 22:01:54 2026 GMT
Subject: CN=afc9ed523356562bf889354bd59880aa84ab1920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:08:25:7e:c6:57:6c:e0:99:55:1f:3e:21:
e8:65:5d:91:6a:a4:4c:bb:0a:2c:66:c5:6c:13:4d:
00:65:02:7f:81:15:f4:65:4d:0b:e6:cc:78:42:a3:
8c:f4:28:da:4d:48:e8:31:e7:7a:b8:16:0a:76:d4:
75:ba:c1:df:17:36:55:19:80:4e:7a:4b:ec:a5:1c:
88:91:47:ae:7f:80:8a:45:56:9b:1b:88:3a:31:43:
24:d4:e0:62:de:b8:08:76:3c:f4:45:7e:b0:d8:40:
8d:f1:9a:1f:d7:45:66:f7:c1:e8:71:43:1f:f7:29:
8e:b7:67:0c:12:2e:7e:8d:34:9c:36:d5:e3:42:29:
9b:1e:26:c2:e3:de:c7:03:85:a3:36:e5:24:f7:31:
53:af:70:0f:71:0b:87:3b:19:58:b2:c3:03:ff:0a:
0e:0b:a5:3d:99:94:70:2b:42:ac:e9:40:11:7a:cf:
1f:c3:8f:b8:87:f9:2d:87:dc:ba:2b:91:c9:54:18:
9c:51:23:21:39:6e:2f:de:d4:a9:39:05:80:c4:43:
c7:11:35:00:2f:bf:aa:25:ef:af:ec:1e:a5:ac:42:
53:cd:eb:9f:4c:68:5b:b7:f3:85:55:4e:86:bc:cf:
a7:75:98:b5:8f:d8:a6:d9:3c:e5:d6:25:34:76:fc:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C9:ED:52:33:56:56:2B:F8:89:35:4B:D5:98:80:AA:84:AB:19:20
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:23:3a:bb:f1:86:04:ba:f4:67:5f:de:b6:fa:60:7c:f9:99:
da:fe:a5:8b:36:df:f4:fc:cc:18:98:43:10:32:de:e4:44:ad:
b4:39:b6:88:9e:b9:28:9d:7b:e9:6d:66:9f:ba:49:90:cd:c2:
a0:b6:49:88:91:64:a6:ff:33:f9:81:54:21:73:91:89:48:74:
f3:fc:71:20:2e:77:62:a2:c3:d8:2b:d4:05:ab:70:a7:5d:65:
58:bc:aa:0b:23:39:b9:06:98:1b:d8:05:b0:c2:5b:0a:be:44:
82:e5:ab:97:7f:15:43:8b:03:c1:89:11:2a:6a:84:80:66:07:
09:93:32:4b:0c:6f:89:5b:7f:47:c7:60:10:65:03:75:34:ef:
dd:c0:a4:70:1c:c9:ce:5e:3b:3d:b4:5f:d9:70:d0:fe:f4:4e:
86:8b:b2:9d:82:cd:d2:a8:15:a4:02:66:f1:08:dc:8f:05:63:
35:63:3d:17:99:e6:da:ad:34:08:25:8d:cd:1b:08:8d:20:50:
ed:79:9e:0f:f9:6b:d9:9d:ff:12:5b:8d:68:ff:46:11:ea:f5:
0f:48:25:c8:d1:44:b1:8e:dc:74:12:8b:9b:7a:ed:21:87:24:
3d:61:dc:a7:e6:73:68:ec:5e:29:98:b8:e2:90:65:98:ae:63:
e2:ee:ef:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:11 2026 by rpki-client