Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
File: 8qrILhYayAqgqo7qnwiE43ONkn8.mft (raw, json)
Hash identifier: SIoGGXzwJhull+pmqG5LwOZXPMM6SpePVvom3itacv0=
Subject key identifier: 62:F8:FE:E9:9A:95:CE:AF:75:E9:CC:EA:DA:81:A0:04:44:3C:43:23
Authority key identifier: F2:AA:C8:2E:16:1A:C8:0A:A0:AA:8E:EA:9F:08:84:E3:73:8D:92:7F
Certificate issuer: /CN=f2aac82e161ac80aa0aa8eea9f0884e3738d927f
Certificate serial: 019E1CEBC840898AB26BCA80A0A0406C1FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qrILhYayAqgqo7qnwiE43ONkn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
Manifest number: 87
Signing time: Tue 12 May 2026 16:01:14 +0000
Manifest this update: Tue 12 May 2026 16:01:14 +0000
Manifest next update: Wed 13 May 2026 16:01:14 +0000
Files and hashes: 1: 8qrILhYayAqgqo7qnwiE43ONkn8.crl (hash: 1vzVZxDdkUI/B0kWGeaZNQDzVD7Y4r+mYt4DEcejUns=)
2: p-im3QVnalbsusM3ZnGz60SJPow.roa (hash: Ldo09DRRNUU18hQdQ2aHYFadGWK1+VYL8twJrEqztGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qrILhYayAqgqo7qnwiE43ONkn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:c8:40:89:8a:b2:6b:ca:80:a0:a0:40:6c:1f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aac82e161ac80aa0aa8eea9f0884e3738d927f
Validity
Not Before: May 12 16:01:14 2026 GMT
Not After : May 13 16:01:14 2026 GMT
Subject: CN=62f8fee99a95ceaf75e9cceada81a004443c4323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:79:77:d3:ae:e1:75:32:cf:ca:ae:7f:bf:3d:
ed:25:28:86:2c:70:1f:d6:15:f4:b1:c3:69:1f:22:
d3:7b:05:aa:f3:0b:13:eb:73:56:4f:28:4f:23:4f:
11:dd:d1:0a:b3:50:18:27:b4:9c:3e:ea:46:eb:fd:
45:fa:8e:21:a7:f9:c1:e6:ee:5c:91:49:51:71:6d:
d7:1f:0b:43:6f:b9:2d:66:42:6c:8e:76:16:c2:8c:
cf:f0:be:90:d7:f4:d0:2c:6b:4a:68:8a:26:73:53:
08:18:fd:17:73:18:a2:84:ea:f6:85:49:b7:94:9c:
db:0e:62:d4:e0:ad:2d:97:a8:05:40:43:9c:c0:6e:
32:60:9a:3a:19:7f:32:48:d4:9f:78:b2:1d:66:41:
1b:1c:43:3a:b1:80:c7:7b:9e:b7:fd:54:90:63:f7:
52:de:37:01:87:fb:e6:17:cc:c7:72:f2:6d:5c:7f:
a5:96:ea:e2:38:a8:5d:e0:ae:a6:3b:2e:39:d1:00:
6c:db:9a:5e:aa:a0:d4:58:02:3b:19:76:ab:68:67:
69:3a:db:15:79:b0:d6:c2:aa:dc:2a:04:e2:b7:ce:
16:46:41:9d:b5:a9:c7:b2:8b:0e:35:df:f0:29:55:
46:fa:fc:a2:65:a6:07:24:49:c4:67:3d:fe:77:b4:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F8:FE:E9:9A:95:CE:AF:75:E9:CC:EA:DA:81:A0:04:44:3C:43:23
X509v3 Authority Key Identifier:
keyid:F2:AA:C8:2E:16:1A:C8:0A:A0:AA:8E:EA:9F:08:84:E3:73:8D:92:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qrILhYayAqgqo7qnwiE43ONkn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6d777b-08c7-4150-8c37-cba55729f1ee/1/8qrILhYayAqgqo7qnwiE43ONkn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:43:d8:32:f7:5d:0d:d0:05:e7:7d:cd:20:6c:de:a3:9c:1c:
1a:f3:f5:26:cf:0f:3c:3c:3f:f6:45:73:6e:1d:c5:82:f6:28:
4e:e9:ca:72:fa:dc:9f:89:85:60:bb:53:ff:87:6b:84:c0:fe:
78:ed:37:c7:ae:7c:bc:1f:ca:07:1b:1b:44:5a:9b:8b:ae:9e:
ce:d4:1b:22:d1:e1:0c:79:b2:46:7e:05:dc:77:17:2b:9b:89:
cd:9f:c3:5a:0a:35:ef:5a:3b:f1:3e:fe:a6:ae:b7:de:d2:68:
56:0d:5a:12:0c:91:c4:20:fc:56:7e:7a:36:62:9f:4b:e6:b3:
25:67:aa:07:57:c7:e3:61:cd:7e:3e:bb:94:51:f9:62:f1:19:
ff:eb:12:98:11:95:7f:a6:92:57:e4:70:cb:0c:17:c9:16:36:
a9:6b:19:14:5d:f5:19:04:eb:2d:59:29:11:38:a8:7a:84:09:
b2:62:a4:a2:c8:7e:6d:aa:d9:07:f7:a1:2e:4f:f4:65:a1:73:
ba:42:e8:6a:66:97:08:06:65:10:43:a5:87:1a:c2:36:c7:e5:
bb:29:82:2b:fe:2f:0e:28:b1:b9:1d:a8:f9:e0:4e:3f:48:52:
c1:d8:b4:c8:97:33:2e:8f:7c:a1:38:71:7c:9d:36:62:3f:45:
4a:79:7d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:02 2026 by rpki-client