Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier: fV7SnFSAo/syI019dM4MF7fV45PJ62ij4CqoA28Oad8=
Subject key identifier: 21:E2:D0:F7:65:E8:29:12:C3:C3:71:E9:EC:50:49:A8:D7:BC:4D:98
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 019E1F47CE318BAA62A9A65424AA5CC28D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number: 12F7
Signing time: Wed 13 May 2026 03:00:59 +0000
Manifest this update: Wed 13 May 2026 03:00:59 +0000
Manifest next update: Thu 14 May 2026 03:00:59 +0000
Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: aoQpOUnosgJmctNykB5H1ocUR2PrcNSzYgvS7eoprSo=)
2: l6iMzA5rUEZhAgCUEOvnKTqShV0.roa (hash: gAUd2yvULPzYOcnL9Q+REp9EtdgiHuOMJuUR7tJ6Oq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:ce:31:8b:aa:62:a9:a6:54:24:aa:5c:c2:8d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: May 13 03:00:59 2026 GMT
Not After : May 14 03:00:59 2026 GMT
Subject: CN=21e2d0f765e82912c3c371e9ec5049a8d7bc4d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:52:99:44:6e:93:2c:f8:5a:b4:33:a3:c6:
7f:f6:b7:20:87:c4:00:2b:43:a5:7c:28:a7:6a:d9:
a0:97:e4:4c:e1:b9:c3:1a:32:d6:ca:49:cb:d9:4e:
fe:41:cd:7b:63:bd:c1:42:c1:29:dd:a7:1a:ce:65:
32:b0:9c:7a:22:67:71:1f:64:94:aa:55:95:c1:9f:
51:d4:df:fc:6d:79:c1:61:ff:ae:ad:7a:42:56:d2:
8d:4d:05:93:8e:c2:1e:54:e5:08:da:8b:70:1a:3c:
68:81:6a:e4:9e:d0:c0:3b:c3:e7:29:95:c5:82:9c:
2d:6c:5f:0d:43:15:60:1a:04:db:74:01:57:bd:b3:
e2:c9:1c:f3:ea:e8:0d:37:b0:16:b9:c1:7e:e2:35:
51:8d:a4:9a:67:4e:89:d5:9b:fc:2f:5e:60:53:4f:
0e:ec:1b:cb:68:6b:30:f2:ea:45:b3:6f:f7:9e:6f:
53:a6:e9:d9:fe:8d:c9:1d:f2:ea:a0:51:39:69:fc:
56:4d:80:7a:f5:29:87:ca:9d:b3:85:2a:48:25:2e:
45:44:fb:e6:77:d9:4c:d6:67:7e:ef:5c:a9:dc:01:
31:4d:8b:dd:8d:73:30:74:a0:b3:ac:b8:81:ec:ab:
e6:4c:0c:74:42:4b:ed:e1:af:47:1a:64:6b:fe:e4:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:D0:F7:65:E8:29:12:C3:C3:71:E9:EC:50:49:A8:D7:BC:4D:98
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f8:da:6f:fc:ee:dc:e2:41:16:c4:6b:97:15:1e:18:2d:42:
1d:39:66:15:84:2c:af:bd:17:1a:ad:3b:ef:eb:19:d4:63:6e:
4e:e6:67:ac:c8:59:52:fb:45:4a:22:0d:d4:9c:f5:52:92:40:
19:21:a9:43:62:f2:5e:9e:2d:92:91:d4:2a:f6:43:3c:11:bf:
94:1a:c1:cd:c6:4e:83:17:af:fa:33:03:24:e9:2c:92:df:06:
0e:e1:17:1e:a4:3d:b3:33:a3:e8:2e:4f:18:7f:d1:33:f7:8d:
03:eb:58:76:96:f9:13:03:b1:33:c8:63:d6:95:3c:1e:2d:ae:
32:71:a9:e9:c8:84:84:28:a6:b6:67:3c:8d:8f:f5:a2:3d:7e:
72:c3:b3:2a:65:4f:a4:41:d6:b4:62:29:11:43:a1:ec:5b:c0:
97:79:25:d6:39:05:ca:85:c2:2c:12:8b:12:08:83:2e:96:1a:
b8:8c:ce:ee:56:11:61:a4:91:44:44:5a:24:66:50:ca:14:cc:
f6:68:b4:f9:f2:73:78:03:f7:91:0a:73:b0:98:2a:58:00:77:
0f:e0:92:e6:c3:7d:60:1b:63:4f:c4:67:be:9c:18:84:b8:96:
43:e5:e7:cb:72:ad:e5:fd:72:9c:25:38:07:67:ad:1b:e8:f8:
6a:7c:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:33:56 2026 by rpki-client