Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: 4z0eokLnv+2V9mPD0TojgQK1Sp8LDPc/g34aRJrpf1Y=
Subject key identifier: E9:DA:BB:D5:89:8C:BC:E7:73:21:48:79:1D:91:FA:97:8F:8B:0C:E1
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 019E1DC716ED172F19B14A69094CC1080848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0F62
Signing time: Tue 12 May 2026 20:00:47 +0000
Manifest this update: Tue 12 May 2026 20:00:47 +0000
Manifest next update: Wed 13 May 2026 20:00:47 +0000
Files and hashes: 1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: lAfSPkDDoHHrtpjz88EybAbwbte88/teMrmtX0b7ZFo=)
2: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (hash: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A=)
3: LwxlxO59sLpFilR69YBzUan2hpk.roa (hash: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:16:ed:17:2f:19:b1:4a:69:09:4c:c1:08:08:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: May 12 20:00:47 2026 GMT
Not After : May 13 20:00:47 2026 GMT
Subject: CN=e9dabbd5898cbce7732148791d91fa978f8b0ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:bd:2d:e4:45:cd:0a:57:b0:ab:12:5c:88:
c1:13:59:5f:d1:e4:62:db:a5:3e:06:3f:4c:1f:f8:
06:2f:c2:af:10:ab:41:f1:5e:4a:ad:35:34:53:b6:
24:45:6e:a6:1d:b2:4e:bf:47:6a:48:a1:28:c2:bb:
14:14:30:e8:e2:8d:0e:f5:b5:49:30:d7:fb:43:a8:
0d:15:28:d1:2a:fd:fe:28:89:fa:4c:10:41:ce:95:
d9:b5:af:e8:b5:9f:e0:e5:0f:c9:c3:8f:2a:28:36:
a8:ea:f7:0d:60:a0:8f:ec:cf:5b:e0:57:cd:6f:b5:
ab:bd:3c:cd:9a:00:ab:22:9e:34:1c:30:41:6d:39:
eb:1f:0a:e9:87:cc:bf:98:28:af:07:eb:02:58:b0:
cf:62:fd:86:48:f0:76:c3:14:94:fd:d6:50:dc:9e:
39:b8:0a:93:e0:6d:f9:ca:c3:a9:bd:3c:24:1e:a8:
f0:b9:ac:1d:c7:81:6c:af:f4:8d:6a:65:94:db:92:
51:06:97:d8:b4:06:8a:06:98:10:31:20:27:b2:89:
23:71:92:c6:40:d8:1b:60:a4:b9:e3:cf:a7:c1:95:
33:f7:d3:ee:ef:d2:d2:0a:8b:eb:25:86:bf:f5:20:
46:73:b0:4b:94:4a:83:97:d9:3c:55:51:6c:63:a5:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DA:BB:D5:89:8C:BC:E7:73:21:48:79:1D:91:FA:97:8F:8B:0C:E1
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ec:f6:30:db:bd:fc:6d:a6:4a:57:51:d5:94:ef:2f:a7:64:
b6:f9:cf:fa:bf:48:71:9b:a4:fd:fd:d9:88:35:70:b2:07:55:
0c:85:4c:98:12:1a:f9:58:26:04:9f:ae:ea:b9:47:12:8f:6b:
a0:c6:09:cb:77:2f:05:8f:39:5b:3c:a9:fb:28:4a:b2:03:a5:
08:f3:78:17:18:a7:f2:a6:af:20:e5:99:91:5e:51:a2:59:37:
e6:fd:1e:02:b2:86:f4:cf:0d:56:d7:ce:e8:58:e1:26:13:e1:
4b:79:7a:86:f5:f9:93:83:64:c3:f7:36:9c:cc:9e:2d:7d:78:
8a:7b:68:e1:95:0c:46:ef:33:14:4b:eb:7e:39:a0:cf:26:af:
c1:32:16:68:17:59:67:fb:a2:50:22:4a:77:7d:cc:00:27:37:
41:9b:02:26:1e:28:73:46:b1:09:b9:92:aa:c6:21:fc:75:9e:
df:f5:9c:af:2f:eb:fb:33:b6:c4:43:db:5f:3c:21:07:91:db:
7b:c5:f4:71:1e:3f:27:fc:0d:b1:87:e2:a1:61:95:80:23:c4:
b1:db:e7:34:48:d6:e1:f2:0f:c0:de:45:91:d5:d6:0d:f9:a9:
2f:58:70:9e:48:25:ce:d3:6a:3f:ca:b0:f9:e0:6d:d3:4d:f7:
37:7d:71:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:03 2026 by rpki-client