Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
File: 8bi7seGGpZnUzAWMq_TfDiUvMfo.mft (raw, json)
Hash identifier: /KIv+QIkJOMj7uoO8joqdTsxkUP2Nm6EfMWI6cO1Ldc=
Subject key identifier: CF:0E:55:F9:8A:BD:9E:11:C8:93:2A:9F:E9:42:18:CB:89:91:51:B0
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 019E1F10A09D35DD4D214A3AB79E11147228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
Manifest number: 18F6
Signing time: Wed 13 May 2026 02:00:43 +0000
Manifest this update: Wed 13 May 2026 02:00:43 +0000
Manifest next update: Thu 14 May 2026 02:00:43 +0000
Files and hashes: 1: 8bi7seGGpZnUzAWMq_TfDiUvMfo.crl (hash: 0xyjcvoJ72mpO+GNr58D2OxvcZLRyHqOINgU5gZ2hOk=)
2: NaRt1HVL2Kx-sncfnj_qlUg6AzA.roa (hash: eMNf8UixOg4CJ2lG1Z2ydmE1AwqLlbPFY92TlJawe5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:a0:9d:35:dd:4d:21:4a:3a:b7:9e:11:14:72:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: May 13 02:00:43 2026 GMT
Not After : May 14 02:00:43 2026 GMT
Subject: CN=cf0e55f98abd9e11c8932a9fe94218cb899151b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:cf:63:11:39:52:e9:13:15:15:33:c2:0c:
75:cc:cf:cd:a8:6a:3a:52:a4:cf:49:ea:65:65:0f:
6f:9e:5b:ed:9a:b2:96:be:a5:99:09:03:43:9c:4d:
83:2f:e0:ad:7b:d9:8d:50:22:02:01:46:ab:0d:e7:
c0:61:2c:73:b5:a0:d8:f7:0c:7c:a0:da:86:28:a5:
58:30:04:4a:6c:55:02:65:9f:b4:1d:f4:1d:5a:25:
c6:ad:a6:2f:8f:2a:3d:c9:cf:31:12:ce:40:4b:de:
c2:14:dc:57:bb:1a:d3:39:43:9b:9d:c5:10:46:c6:
a6:56:70:da:9e:d5:db:97:a6:68:bb:31:5a:5e:63:
e0:2f:03:73:60:3e:b5:ee:b6:f8:d7:d0:03:4f:e7:
47:0f:1f:49:9d:05:e4:d4:22:48:43:f3:c0:13:3b:
45:7e:2e:a8:d3:22:a7:8b:1b:47:6d:fe:13:69:e4:
da:27:0e:47:44:0f:e3:4b:1f:ff:b7:5f:a2:23:42:
1b:a3:6a:fe:05:78:48:c0:fa:70:a8:79:33:d9:b9:
0a:56:bb:68:3e:c9:8f:9c:82:4d:72:09:c1:13:75:
66:77:c9:1e:ab:0a:fb:12:f7:1f:02:f1:1a:df:21:
24:7e:f9:22:7e:35:22:0f:25:b7:04:2a:f6:16:31:
b4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0E:55:F9:8A:BD:9E:11:C8:93:2A:9F:E9:42:18:CB:89:91:51:B0
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4e:ae:aa:ef:a9:da:cb:bc:b8:e2:57:5f:6b:59:ec:8b:cb:
5a:b9:b3:79:d8:a2:0e:f6:7d:9a:52:10:ac:94:6c:65:ca:46:
d0:c2:fa:a0:30:90:98:ed:4e:cf:ee:5a:ef:21:32:5c:cc:98:
5c:be:a6:c0:d8:6a:b8:da:4b:fc:be:56:a1:d5:71:96:c1:10:
7d:b2:7a:7d:b5:4d:3c:39:b0:3b:89:34:10:30:a3:5b:35:d9:
aa:96:08:7c:9e:dc:08:fb:85:07:d3:4c:ad:2e:f3:ef:cc:15:
f9:05:1c:e3:0e:50:e3:ab:8d:e8:0e:19:77:1a:13:00:2c:02:
f8:8a:b3:1e:62:2f:96:c6:f8:46:8e:aa:0c:f9:9f:73:cf:5d:
ab:3b:85:e8:29:4b:0c:14:91:7d:78:77:25:c8:12:c1:44:f5:
05:36:98:d5:e8:c8:10:08:00:30:6f:ec:17:b9:97:80:90:d1:
8a:0d:77:56:f1:29:39:78:64:d9:f7:87:21:7d:fc:e6:9f:18:
bf:fe:c6:8b:59:e3:e6:cc:a9:69:43:6b:29:f6:71:82:e0:8d:
e1:97:43:5d:fe:d6:cd:1f:93:67:b1:4a:b2:34:9c:9e:6d:ce:
c1:77:bb:65:a5:a7:41:fd:c6:a2:b3:a3:75:fa:94:ce:bb:86:
7c:03:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:10 2026 by rpki-client