Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: 15b1YOn+h2rxHSYkOSR2KiP59+/BuIXCNxlyQxyhWr0=
Subject key identifier: D3:55:2A:B1:5C:59:DD:FB:64:9C:A0:E4:5B:81:37:3C:95:0E:D1:78
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 019E2091E5DF07D8DEA4FC2FE8C426D5C24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 09F5
Signing time: Wed 13 May 2026 09:01:32 +0000
Manifest this update: Wed 13 May 2026 09:01:32 +0000
Manifest next update: Thu 14 May 2026 09:01:32 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: WFvsXYLJY72lrOVwMIWA3YfbAFQlSyXtLvgXOwl+V3g=)
2: L2SGUtmn8iVoAZusJiJO0lWPz-c.roa (hash: tzCEkWtWLJDnUs8JcskBJsxe43rrrZgahQVNHwJxPJs=)
3: _p7le5gIIWbAoXoedbYiYmj5NdE.roa (hash: CNMW3XBWI+i2aIdqqxnzyTpertxlov4CAJZZ/pSHhYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:e5:df:07:d8:de:a4:fc:2f:e8:c4:26:d5:c2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: May 13 09:01:32 2026 GMT
Not After : May 14 09:01:32 2026 GMT
Subject: CN=d3552ab15c59ddfb649ca0e45b81373c950ed178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:a6:7e:52:59:ed:4f:aa:24:7f:65:52:65:
87:06:72:aa:b6:f2:bc:35:41:1e:c0:3c:2c:99:76:
ef:12:7e:d0:58:bc:53:e7:1a:e0:7f:87:b3:87:d7:
f3:d2:7c:25:73:09:6b:d7:83:87:09:d2:8c:ee:26:
ba:23:99:f9:f9:96:b7:06:b6:c4:d5:ee:c7:32:62:
a2:a3:fa:1a:41:2a:af:49:c1:e5:92:4d:59:df:36:
cc:46:86:06:9c:9c:dc:25:b2:3f:a0:0b:22:22:4b:
53:8c:a6:c8:b0:91:4c:f3:59:8a:cd:bd:50:a9:81:
50:40:fe:1b:21:41:2a:59:d5:1d:52:d2:9e:89:b4:
85:26:b3:31:45:96:ad:ea:db:93:37:7c:f4:83:c6:
4f:58:c6:3c:4c:6b:04:44:fc:ae:be:f8:57:48:28:
5f:8f:2a:81:38:c6:8d:43:69:88:4e:3f:e2:45:3d:
6d:80:5e:5f:b8:c4:60:3b:34:84:4c:37:a3:c2:63:
54:03:ef:a9:69:a6:2f:ee:7f:e7:30:9f:10:fc:4b:
dc:f0:76:de:79:36:fc:5d:64:5b:57:28:d5:b5:60:
e6:3d:99:d4:10:5d:06:b5:d6:d7:64:19:48:f9:fb:
a5:26:64:9a:8b:31:3f:db:6c:ab:4b:58:2e:46:23:
ac:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:55:2A:B1:5C:59:DD:FB:64:9C:A0:E4:5B:81:37:3C:95:0E:D1:78
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ac:2e:0d:79:7e:84:e2:ff:c8:40:4a:b3:78:75:39:29:1b:
08:25:8a:bb:34:33:92:d7:cf:79:43:99:a4:4a:1d:44:95:46:
12:ec:f1:98:b0:38:e3:cb:e4:62:d9:58:a9:71:4c:3a:6a:ce:
35:12:c4:cf:2c:77:4a:a6:fc:b0:de:a9:29:b2:1c:04:5a:bf:
f6:cd:ad:67:86:35:cc:ed:c5:aa:52:51:e7:b9:33:4e:ba:b6:
67:95:a8:9f:9f:e3:db:ac:86:7b:58:33:bf:8b:1c:89:02:fc:
df:7e:a5:d4:0d:85:f8:8b:f8:5b:c8:90:1c:ec:50:03:13:be:
39:08:39:75:39:69:a3:40:5a:86:3c:33:00:1a:18:44:2b:35:
58:3d:2e:36:fd:05:38:d0:a6:99:41:2e:03:dc:6b:e5:47:bc:
de:2a:ef:23:49:9e:1b:3e:b1:ef:bc:0a:1b:6a:e9:29:f0:8c:
95:9b:ce:3e:00:2d:c8:62:1e:21:e9:52:81:13:9b:6d:3f:cc:
ba:26:19:3a:90:24:36:13:ce:ea:89:c1:8a:38:9b:f8:91:1d:
13:e9:2f:72:cf:ac:9b:a5:d8:21:a7:68:40:bf:3b:8a:e2:06:
ff:fa:a7:da:34:40:53:c5:31:c5:68:cb:e1:7e:92:8b:0e:22:
a7:b1:75:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:10:34 2026 by rpki-client