Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: d4N+4cdbDiGqD1JdOOeZuZqmdqY23PelHZB2EAVv2Hs=
Subject key identifier: F5:91:72:AC:67:BC:7B:1B:5B:76:11:3E:AD:59:D4:2A:A5:B1:B4:5D
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 019E1F4813A9316D5A0C7B846FA7C654C923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 1898
Signing time: Wed 13 May 2026 03:01:17 +0000
Manifest this update: Wed 13 May 2026 03:01:17 +0000
Manifest next update: Thu 14 May 2026 03:01:17 +0000
Files and hashes: 1: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: eu4Cu3G4Vl2IUYpFZFUicvYO6rJ46MVYmgZmBP9u91g=)
2: IVsntpINLVptcAxi9F9OffThDww.roa (hash: lHhfp2KRoCfz9OytgUFCH4dMCm+ma5lnnpotEWvlFIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:13:a9:31:6d:5a:0c:7b:84:6f:a7:c6:54:c9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: May 13 03:01:17 2026 GMT
Not After : May 14 03:01:17 2026 GMT
Subject: CN=f59172ac67bc7b1b5b76113ead59d42aa5b1b45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:11:7a:d9:d1:2f:2b:66:1c:c6:be:d1:bc:
83:aa:54:ca:3e:c4:b5:74:9e:cd:82:e5:5c:61:8f:
ff:6c:f7:80:fb:92:5d:68:60:66:ae:5e:d2:19:c5:
db:e6:02:cd:a4:f0:a3:b2:5d:32:99:49:fe:af:47:
aa:06:3e:1c:75:ca:3a:24:94:0c:7a:1e:1d:3d:ba:
af:46:56:4a:d1:85:3d:05:c5:9d:f1:86:91:53:5d:
d2:35:dc:ba:7a:5a:14:d6:ca:07:c9:7e:ce:ca:8b:
d2:a9:97:77:ca:c7:46:fc:fc:d2:13:ec:e8:3f:0c:
29:ea:0d:cf:d7:81:d9:0a:33:42:20:57:f1:09:39:
f1:30:d8:78:a2:74:d8:cb:2a:5a:15:fa:06:dc:7c:
36:15:bb:7e:6b:63:4d:cc:f2:fa:1d:4b:02:11:f2:
83:af:d4:f5:d0:04:b5:97:39:62:ff:24:80:63:8d:
83:27:f8:69:9f:5f:b0:32:aa:57:91:43:d7:8e:65:
99:c7:60:6b:b6:ab:2e:e1:dd:13:2f:a0:af:c3:e8:
06:72:32:5e:16:91:57:c0:8b:54:16:52:06:75:00:
76:a3:de:79:7a:17:ee:45:a1:cf:03:34:4f:1b:45:
32:81:5c:13:2b:c2:24:ce:2b:9a:a3:c8:c4:bd:90:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:91:72:AC:67:BC:7B:1B:5B:76:11:3E:AD:59:D4:2A:A5:B1:B4:5D
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:27:68:74:36:20:5b:eb:18:06:2b:c2:57:bc:2f:e3:58:16:
6a:90:e6:9d:06:8e:f1:5d:a3:72:75:02:81:51:9f:c6:43:38:
25:7d:68:f8:2e:0b:3a:66:b6:9b:c2:b7:5f:70:55:87:e7:9a:
45:db:12:5b:bb:79:63:6d:62:f9:1d:5f:ce:29:b5:4c:dc:d7:
6f:7b:d5:b1:c0:95:45:e9:f9:c9:13:51:2d:61:48:dd:a9:fa:
32:e0:45:71:25:0d:c0:19:ec:d2:b1:7c:a4:75:1f:93:50:20:
6b:94:b9:ca:69:01:84:75:1b:98:b6:f7:ec:8f:2c:e1:7b:a3:
e0:2f:11:4a:89:4d:96:5e:b7:44:4c:aa:f0:f1:4c:5f:b5:d8:
ee:9a:b9:b9:70:ca:31:66:56:20:dd:fd:ce:fe:e4:53:48:00:
a9:12:a9:9a:50:67:cd:11:19:00:82:84:d7:92:13:2e:1d:d9:
9b:b1:7c:b7:6e:79:46:5c:6a:a2:ee:09:84:68:67:d0:70:c3:
b6:98:a3:cb:c4:8a:24:0d:27:ba:74:2d:89:b2:65:10:f1:20:
5a:a9:40:bd:41:7e:a7:21:0b:b4:5a:d1:44:97:0e:21:eb:ac:
a2:88:bf:25:21:74:b0:0b:2a:da:44:2f:64:67:14:19:af:1d:
fb:02:c9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:04 2026 by rpki-client