Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: NjxVutKOw3S0tPfk/IduxyPEebwgz1ZaoAh23cfUEHo=
Subject key identifier: 6C:73:E9:FD:9C:41:4E:80:B4:E1:27:7A:C3:3B:F9:01:41:F1:40:72
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 019E1EA33C5E5A61D5D0D678D85C1E771B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 00:01:14 +0000
Manifest this update: Wed 13 May 2026 00:01:14 +0000
Manifest next update: Thu 14 May 2026 00:01:14 +0000
Files and hashes: 1: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (hash: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU=)
2: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: uUUTDgCxMXA+qK217pUgaOY+aeUisYqtZyLWW5NrEn4=)
3: oGOv0O1ixZRdG92zwrspojU0VwY.roa (hash: IjgFyfvL9U08ADh5P0ZxxkAaF6oStHyHq7QR+Yuo9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:3c:5e:5a:61:d5:d0:d6:78:d8:5c:1e:77:1b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: May 13 00:01:14 2026 GMT
Not After : May 14 00:01:14 2026 GMT
Subject: CN=6c73e9fd9c414e80b4e1277ac33bf90141f14072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:35:6f:0d:1c:58:7a:7f:9b:84:ed:fa:4b:
06:05:c1:2d:10:8f:39:3f:3e:e2:1e:0a:25:55:14:
eb:66:ab:e7:f1:26:7e:fe:e4:f5:32:9e:bb:78:8d:
e3:17:43:d2:4b:94:d4:75:85:a6:4e:40:8d:8c:6d:
2b:a1:10:35:19:82:22:e9:4f:78:02:d9:36:ce:c9:
f3:63:0e:47:ef:c1:59:c3:95:b2:4a:1f:b7:34:43:
2f:29:f2:31:98:c8:af:91:2c:45:a5:f2:19:30:ec:
2b:be:1f:db:cb:6d:86:46:20:28:30:27:ea:ba:6c:
89:cd:7c:49:df:66:b2:cf:fa:0f:bf:b0:a2:2d:7f:
07:1e:70:00:fb:b1:25:8d:62:57:9c:e9:67:bc:9f:
12:51:67:8b:32:47:7b:75:f4:2c:38:15:07:f8:0c:
f0:48:b8:8e:1c:74:b2:05:36:be:53:54:64:b5:c5:
23:ab:81:61:21:13:a5:73:5f:6b:f0:62:d9:7e:8d:
2b:8c:da:0f:99:ad:3a:44:cb:2a:a5:9b:a2:a6:e5:
a7:6a:30:4a:8a:72:d0:85:95:2e:96:d5:14:2a:46:
8c:33:d7:3f:2d:28:32:08:6f:f6:20:e2:87:78:18:
f6:3e:6c:94:7d:23:a0:02:6b:a4:9c:63:7e:62:67:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:E9:FD:9C:41:4E:80:B4:E1:27:7A:C3:3B:F9:01:41:F1:40:72
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:eb:93:a8:1d:30:36:f5:5a:fd:e3:52:b6:96:8d:1d:78:0d:
36:da:f9:ad:03:50:a2:6e:b9:1a:08:c8:12:2f:81:fb:81:6d:
91:78:b5:00:46:8b:2f:5d:51:e5:ce:13:02:fa:a3:07:71:5f:
20:df:97:cb:f9:b7:89:62:33:df:7e:7f:23:a4:e7:0e:00:d4:
91:79:35:9e:3e:1b:7f:a3:0e:4e:55:1d:9f:9a:30:aa:8f:2d:
3c:30:30:38:61:ab:ce:e5:57:e7:76:25:84:d6:c8:7e:a6:75:
23:81:aa:08:08:73:36:77:d5:29:ec:d1:5c:6c:fe:7a:77:e9:
c7:96:35:63:71:77:e0:d2:fb:48:a8:0a:76:c5:f6:7e:c3:02:
fb:c6:b3:cf:d7:26:56:ff:2e:51:59:3d:21:ec:f5:2f:c5:91:
1f:76:28:e3:cb:d3:67:e8:12:44:89:39:83:86:ae:af:9c:3d:
66:34:91:5a:9b:12:07:94:96:d2:bd:d3:e8:be:ab:36:3c:9e:
48:43:31:38:fc:a0:7e:34:9c:60:e4:d7:61:a9:1c:f0:bb:14:
2c:35:37:91:6f:00:7d:e7:ca:be:85:62:70:cc:4d:02:ba:0a:
d5:16:82:47:d0:8a:d7:59:b5:64:8a:5e:78:37:3a:17:79:cf:
7a:45:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:56 2026 by rpki-client