Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: GgXcCCHBHmZ/oi8jqF+Mgt41XZqnIp+OugTtui8dAE8=
Subject key identifier: FD:1D:41:CB:78:80:B9:10:1D:85:06:ED:9C:43:55:AC:EA:E2:94:01
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 019E1C7D5F05AA1BF59B04E3987016ED7646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 17F0
Signing time: Tue 12 May 2026 14:00:38 +0000
Manifest this update: Tue 12 May 2026 14:00:38 +0000
Manifest next update: Wed 13 May 2026 14:00:38 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: jWVRLRiuW5Avyrr29rQCVzk0XaJiXd+YRMPGamRnGbM=)
2: BmNLDCfpNhMuta2ovEkjhRgE3XE.roa (hash: 8pxnmm0DlGNm9U9Ei6IyeVDeTXCLFrg3l4BtLYG1QcE=)
3: yS5UEuhVvuTniTo0Rp3QBfAIY2w.roa (hash: EwvpzM71As4QzkpNR7WlLGyGWJ5qcNqZIHlrR3sWFGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:5f:05:aa:1b:f5:9b:04:e3:98:70:16:ed:76:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: May 12 14:00:38 2026 GMT
Not After : May 13 14:00:38 2026 GMT
Subject: CN=fd1d41cb7880b9101d8506ed9c4355aceae29401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:34:cc:f5:26:b2:d0:3e:5c:ce:2c:e4:51:
43:24:1e:4d:7f:36:4c:ee:72:83:35:97:5d:8f:21:
4a:ca:6f:a9:fa:44:f5:bf:05:3a:e2:1f:c6:b8:e3:
e0:d2:e9:24:2b:2c:44:d1:d8:c6:2a:88:9c:72:1c:
5c:53:11:2c:c3:8b:c9:d9:02:49:1c:db:32:9f:40:
d3:fe:e8:a5:c2:f3:0b:60:29:59:7a:7c:d8:d5:15:
25:d2:78:d9:b9:58:b4:5c:05:ea:f2:0e:bf:45:9c:
92:1b:dc:e1:f2:10:8b:e7:79:fe:ce:d7:33:b6:d4:
09:28:82:68:10:88:32:e5:46:2d:60:21:cc:a9:65:
95:63:7a:69:8f:5b:30:dd:19:e7:50:a8:7f:1c:e2:
fd:52:01:f8:14:db:22:59:b8:02:c5:bb:b6:8a:1d:
f9:aa:37:c4:6e:80:86:42:82:35:cb:66:43:98:fb:
d0:10:91:5a:b4:a9:72:89:3e:ba:d1:02:7c:bb:5e:
f0:54:6c:43:a1:56:b6:7f:2a:e2:86:b1:30:43:37:
ab:82:96:0b:3f:70:fa:40:8e:6a:ee:3f:ea:c6:ab:
df:ae:d7:ad:d5:01:f6:d6:d9:6e:1b:11:3c:90:7b:
53:82:df:4e:86:a3:f0:4a:a2:28:96:a6:d9:96:74:
28:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:41:CB:78:80:B9:10:1D:85:06:ED:9C:43:55:AC:EA:E2:94:01
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:60:bf:ef:a9:70:fa:22:c5:61:05:30:9b:cf:83:65:cc:ec:
ec:df:db:9a:a0:47:c4:c8:37:50:e7:44:46:45:48:3c:34:4a:
45:c1:08:08:2e:b3:78:99:51:10:59:6e:39:68:1c:50:5b:8f:
35:4d:f8:55:5f:ca:83:75:ea:1f:dc:46:fc:7d:ce:8e:3f:19:
f1:a5:51:2b:76:1c:da:40:0c:ca:8e:6e:f6:f5:87:cb:f2:00:
0b:f4:ac:26:0a:a1:26:fc:6d:e0:76:63:24:3a:68:a7:34:0f:
b1:c2:bd:34:1c:70:c5:4c:75:6f:f9:31:2b:a8:bf:94:8b:c4:
65:88:b3:b5:be:46:cc:9f:c8:30:98:d6:cd:c6:6f:7a:12:24:
30:58:3a:c4:ba:a7:45:a1:06:a8:56:9c:db:bd:8a:3e:27:7c:
e6:f2:09:e2:dc:2e:37:38:29:d0:84:ef:96:97:c3:d8:57:51:
19:1a:9e:d5:61:0c:a1:8b:a6:c5:3a:4d:15:f5:b6:9a:5b:14:
db:1f:60:b6:cb:71:cf:18:ba:d1:41:40:4e:35:03:e2:19:56:
3a:d5:55:95:48:31:ab:63:76:2b:f6:92:a9:0a:8c:42:4a:02:
27:3b:fe:53:b8:a2:4e:fb:e0:7e:c7:8c:f1:1d:b1:e7:68:08:
00:1d:1c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:35 2026 by rpki-client