
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: TdIZGCrifN+Za5fUY+gw4OoP56Ub9sYBh+a+ymAYgtA=
Subject key identifier: 22:50:04:4A:8B:71:32:C8:FA:66:E0:73:30:F8:23:18:9D:A0:DF:56
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 019E1FED287561871C5F9BD4D851273B07B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 0E60
Signing time: Wed 13 May 2026 06:01:36 +0000
Manifest this update: Wed 13 May 2026 06:01:36 +0000
Manifest next update: Thu 14 May 2026 06:01:36 +0000
Files and hashes: 1: QgMG-u89Y-TWbT4Gt6ZsQgsTYNI.roa (hash: sETsQ4q/+Tu+FYDJynqCF64iSLCcXXD4r9m9lwpRbx8=)
2: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: ia5NilEHoYCYxLA7tbQqPsYWfUI6ysm+Pmx28/XUuCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:28:75:61:87:1c:5f:9b:d4:d8:51:27:3b:07:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: May 13 06:01:36 2026 GMT
Not After : May 14 06:01:36 2026 GMT
Subject: CN=2250044a8b7132c8fa66e07330f823189da0df56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:78:c0:2a:99:97:b6:3c:d9:28:42:34:95:c4:
cf:d8:43:62:63:9f:e0:23:45:39:02:80:8b:cd:9e:
b3:d9:1b:ae:6d:07:a9:ac:fe:42:d3:9c:ff:00:f8:
00:09:88:05:b8:88:57:7a:7d:32:a2:c6:9b:88:85:
27:13:6c:cd:77:6a:5c:c0:78:84:67:5e:68:0c:6e:
9c:a8:d3:12:88:fc:ee:fe:8b:a1:0d:fe:7c:2e:18:
ed:1e:aa:3b:61:a4:61:9c:c5:ef:44:c0:65:a8:52:
f6:18:02:46:f5:9f:e0:cc:49:04:b0:50:3f:ff:cb:
68:7d:92:cd:66:96:a8:fa:28:2f:41:57:c9:43:ba:
d8:2c:3a:55:11:33:b6:9a:17:27:ec:3d:80:f7:5e:
1c:5e:99:fe:01:30:91:66:ee:09:b9:ec:80:7a:a5:
58:27:ec:5c:2d:ca:ca:dd:e8:58:dc:f0:74:55:3d:
86:4a:c7:bb:58:b6:d0:2b:72:76:b1:65:a2:82:c6:
3a:1d:f0:8b:c6:f7:0f:77:1b:5c:57:6a:31:b7:76:
9f:ce:dd:9c:79:42:f6:09:a1:7f:57:4e:0c:b5:ff:
86:c0:68:88:e7:c6:13:fb:ad:e8:f8:0b:2f:df:83:
f1:3e:e5:da:eb:35:f2:52:86:d5:ed:7b:28:df:49:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:50:04:4A:8B:71:32:C8:FA:66:E0:73:30:F8:23:18:9D:A0:DF:56
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a0:53:e3:38:cf:08:09:3f:fa:71:fd:48:9d:16:2d:90:23:
13:01:ef:2c:d9:ce:43:a5:8f:3a:28:e7:9a:d2:2a:47:f2:64:
f5:b6:a3:6d:17:d3:01:56:a8:87:9a:b7:a8:10:84:74:70:da:
33:6a:5c:fd:92:4e:23:07:4f:69:69:e4:9f:0c:32:ec:31:fe:
07:63:eb:85:b6:95:c6:82:6a:92:48:7e:2d:9c:bd:f3:cf:3a:
5e:01:87:49:99:8d:ae:7e:e5:7a:72:93:36:7a:d3:13:cb:17:
61:62:c6:5b:7a:f4:d0:06:76:75:7c:2d:40:0a:90:8a:0c:30:
80:ce:04:ff:79:a4:b1:fd:18:b3:71:41:7f:24:07:e0:ba:6f:
ac:72:96:8b:01:68:2d:29:b1:30:38:7d:ce:f3:33:3b:b6:64:
06:f9:cc:f3:d4:d1:9a:fa:42:94:26:7e:38:f5:46:c5:5a:6b:
60:4f:9e:16:7c:6a:3e:b1:d4:c6:a0:1b:28:8f:f4:eb:1d:01:
73:e8:a2:3e:60:1b:d4:94:f0:76:99:67:d7:43:71:5f:62:9d:
dd:e9:33:a3:27:88:3b:6a:32:cd:70:c2:65:0e:3a:06:7d:9f:
2f:1a:1e:e8:17:06:05:ab:21:97:5c:c2:82:0e:0d:6e:94:4d:
a5:42:30:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:14:24 2026 by rpki-client