Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier: SnA3zle48Ldq8+z28t+B+5tSbAp2+FxSO5hoKT4OSNw=
Subject key identifier: 8B:46:BF:13:C9:A5:66:08:BA:87:C1:59:39:DE:2B:7E:69:EE:B0:62
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 019E1E35D26C37CB23D20EA7681847FEEACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 22:01:44 +0000
Manifest this update: Tue 12 May 2026 22:01:44 +0000
Manifest next update: Wed 13 May 2026 22:01:44 +0000
Files and hashes: 1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: mB1MufiaQnz9dYAFvDAmA0Yx/oNeSjdrl0keGeNHMz8=)
2: L7z1z3kD8b7F1K7aacc1gzUm6kI.roa (hash: D3CWLsb8k5BIPwmtHzd5EPsN02bvpYKIOpfirvWVx3E=)
3: UefnhI4rD4WdnFSP87tCcgYjugY.roa (hash: wX49sflwTEuHFD6MRKkajE1pPkRG+Oqz51HRQlhSsxs=)
4: lgrQvjx5MIWGF2Zc_WzTTVLP-v0.roa (hash: weF1SPmq8vuRk/u5oRHyuZvuVh74XYHXLM966wmgglw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:d2:6c:37:cb:23:d2:0e:a7:68:18:47:fe:ea:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: May 12 22:01:44 2026 GMT
Not After : May 13 22:01:44 2026 GMT
Subject: CN=8b46bf13c9a56608ba87c15939de2b7e69eeb062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:2c:f5:11:9d:76:e9:aa:bd:66:52:e1:13:
15:80:10:f7:96:f2:f7:4c:b0:0a:c1:85:90:a2:96:
f8:7c:6e:11:9c:0b:ec:cd:b7:69:38:fb:cd:e6:65:
0e:01:80:66:7c:14:f7:35:58:19:9a:73:0a:13:9a:
c5:48:f6:72:b3:e5:2c:d1:1d:34:f2:6d:8d:9c:7d:
38:37:8d:3f:45:17:62:f5:0a:42:82:81:2b:12:13:
00:52:80:dc:32:c4:4a:8c:de:b5:aa:84:05:6c:e1:
2d:74:8d:73:c8:8e:2f:c4:48:2c:56:fa:dd:fb:66:
5c:50:55:0d:56:39:16:32:d1:dd:41:2b:0b:36:75:
c5:96:0e:ad:76:23:7c:d0:e6:27:a2:b7:6f:79:2d:
19:2e:ed:2f:72:88:45:10:74:74:5f:f5:4e:f8:3d:
48:a4:86:d6:9e:88:7d:43:2b:3d:a4:d1:70:0b:01:
c4:1a:d4:b6:0b:5d:95:3a:70:53:ad:25:47:9a:b0:
e8:5c:a6:84:a0:f0:2c:3d:b6:13:11:5e:93:1e:ed:
ef:37:8e:2c:a8:83:f4:d2:80:cf:d6:c6:a6:3a:51:
af:86:10:3c:00:dc:78:1b:7b:5b:02:3c:d4:96:ae:
60:7f:3a:9e:8a:cd:f5:75:19:5b:48:97:f2:25:d8:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:46:BF:13:C9:A5:66:08:BA:87:C1:59:39:DE:2B:7E:69:EE:B0:62
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b3:7c:6c:32:18:c1:81:e6:7a:20:8d:b1:b8:9d:60:1d:a7:
9a:ea:9d:5a:b5:75:a4:bc:83:eb:2e:98:2c:95:b9:d1:8c:2f:
1f:b7:78:f5:3e:fa:28:8a:17:ef:5f:7a:4c:2d:86:21:41:da:
b3:aa:e4:7b:ad:fe:ca:c0:43:e3:ee:ee:1a:06:c6:d2:dd:03:
d8:39:f9:c1:7a:bc:c7:ba:06:ac:82:c9:d0:88:b2:3c:85:34:
31:5f:02:30:b3:3a:fa:ab:88:1a:a2:c6:4d:88:0a:f8:45:09:
21:b2:b5:10:74:79:77:6c:3b:e5:46:b8:14:6d:64:20:4d:70:
59:8c:54:7e:91:cb:da:77:b0:91:bf:56:95:ec:4f:3e:0e:a5:
6c:7a:61:c5:aa:15:e4:aa:b4:da:f2:d3:0a:e1:82:14:89:58:
59:0a:8c:ab:bd:8b:69:83:1a:95:f5:c7:e4:03:01:bd:6d:70:
1a:20:fb:92:e3:c1:f0:55:0d:4f:ce:4d:74:71:53:69:e4:52:
a5:36:e5:b1:96:2d:14:24:24:6a:37:01:de:a6:7f:9a:77:c0:
2c:c8:a8:b4:0f:08:e0:2c:29:4d:1a:74:f8:2d:61:25:29:22:
8b:5d:7e:ac:bc:bb:2d:3e:ec:68:77:91:4c:fc:ae:02:ce:ef:
da:c4:da:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:33 2026 by rpki-client