Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier: Ym/WPX+lGTOlQ1Ddimt3g0INirIJZMkSy4iPs60UJAo=
Subject key identifier: 02:A8:00:E8:E2:4D:17:A6:60:FE:19:75:04:0C:FF:44:50:A7:05:D9
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer: /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial: 019E1D902A3853AF98B53326F070218D4F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number: 0886
Signing time: Tue 12 May 2026 19:00:47 +0000
Manifest this update: Tue 12 May 2026 19:00:47 +0000
Manifest next update: Wed 13 May 2026 19:00:47 +0000
Files and hashes: 1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: 3Y1K0OBUGpA9WVcHWg+l7CtTgOSD7q+e5PAc0oIE/q8=)
2: RG6yqiKkRhz8lYMy2eaNN51T1FA.roa (hash: lUsy6MxM/FnhLx9vJglsPl+zWcJ7Y2MIMoaSU4GgA5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:2a:38:53:af:98:b5:33:26:f0:70:21:8d:4f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Validity
Not Before: May 12 19:00:47 2026 GMT
Not After : May 13 19:00:47 2026 GMT
Subject: CN=02a800e8e24d17a660fe1975040cff4450a705d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:df:83:d9:50:e7:22:59:c0:5f:77:f4:e2:
b8:25:9c:16:0e:28:dd:2d:7e:87:98:cf:24:ce:8c:
1f:bb:34:6b:d5:f3:15:d1:68:d5:56:6a:71:34:77:
a1:34:77:e7:56:fa:b1:9d:3f:b1:7c:d6:85:8f:97:
fa:97:22:9a:88:c5:b4:28:f3:a4:28:84:34:4b:60:
bf:54:d7:25:57:d3:e6:e1:3e:61:21:86:03:fc:74:
37:24:c6:31:13:6f:28:ed:8c:da:db:2d:eb:79:24:
a9:a1:b7:3b:4b:e6:2a:5d:95:d3:bc:3b:ff:ed:03:
ac:44:d2:dc:30:d3:b4:2c:f1:84:a3:d7:12:eb:dc:
6e:44:29:02:ef:b6:38:70:77:50:e8:35:a1:c7:01:
4c:c4:05:b3:fc:97:9c:7e:c2:20:eb:9f:41:57:c2:
e5:44:6f:0c:e5:33:63:b6:90:f8:fa:73:e0:79:ee:
a6:48:69:b7:06:11:4f:71:33:54:29:56:dc:45:57:
ed:4f:b0:dc:e9:5c:d2:36:b9:97:01:e2:5a:e5:21:
eb:be:47:5a:2d:50:bd:64:60:dc:ec:1f:ca:8c:25:
c0:45:f9:cb:06:38:0c:48:7f:6a:d7:3d:18:fa:f8:
d0:c1:f8:89:4e:b8:d0:78:24:05:bb:90:93:60:3b:
0c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A8:00:E8:E2:4D:17:A6:60:FE:19:75:04:0C:FF:44:50:A7:05:D9
X509v3 Authority Key Identifier:
keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cd:46:5b:a0:58:43:f6:39:dd:98:de:e0:1f:51:48:8f:17:
8e:b2:1c:76:4f:e8:86:0f:43:2f:b3:ae:15:1a:0e:12:4d:ca:
5b:eb:5c:eb:a0:92:9c:da:24:e9:67:f4:cf:72:07:af:e0:d5:
6e:57:7b:90:5b:a5:75:db:e5:55:ff:be:4b:e2:00:1c:8a:71:
20:2d:b7:fb:08:0d:d7:ca:47:ba:7e:62:55:ff:08:23:cb:4b:
60:27:d2:3b:06:34:db:0b:f2:31:33:ed:c2:00:46:96:3d:ae:
d3:bc:a1:43:41:b3:cd:83:c6:99:1f:be:e8:60:aa:53:2a:f4:
60:4a:78:98:a5:b3:02:4d:27:cf:27:17:be:41:ee:4e:61:61:
85:a4:dd:e4:30:57:ba:8c:3e:c0:30:40:ff:6b:f3:db:d4:51:
70:b9:fe:f1:d2:c2:87:90:50:c5:7c:5b:3b:45:49:d2:6d:8c:
b8:12:7e:c2:4d:a4:9c:0b:b9:cb:c5:23:e9:ca:1b:69:64:97:
ed:b2:fa:db:75:9c:16:19:42:4d:3a:67:3c:2c:7b:12:13:44:
01:45:62:4c:1f:5e:7c:4c:fb:fb:3e:d3:b2:dc:50:00:e5:b4:
fc:b2:67:49:5c:64:d3:7f:89:e4:18:a9:f1:aa:9c:57:3e:fe:
b8:13:e6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:19 2026 by rpki-client