Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: 7iEeZ9om2VicoxgZVeLvcs11OlHrvBwb4/R6+EGT9EA=
Subject key identifier: 38:F6:F7:5C:B6:E1:3A:6E:38:CC:85:B4:D3:4E:B7:4B:E5:45:D5:67
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 019E1F47E0FC942263E8F2023D41B83E4DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 1317
Signing time: Wed 13 May 2026 03:01:04 +0000
Manifest this update: Wed 13 May 2026 03:01:04 +0000
Manifest next update: Thu 14 May 2026 03:01:04 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: cwoXER31bT/XxtUSSVxM6aqy5d8jbeSiv3g91FY6cZg=)
2: GOJdmQeTfRZxvLli-b1t8ivPIP0.roa (hash: rE4/LNjEHFf2tYypahcaP12dhBhPp76Zx6vdg4QGZdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:e0:fc:94:22:63:e8:f2:02:3d:41:b8:3e:4d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: May 13 03:01:04 2026 GMT
Not After : May 14 03:01:04 2026 GMT
Subject: CN=38f6f75cb6e13a6e38cc85b4d34eb74be545d567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:cd:ec:5d:c7:64:05:67:37:aa:56:c8:47:
64:29:b3:78:71:bc:84:a2:2e:cc:ab:fa:48:d7:d8:
d1:e7:89:34:06:1c:11:a4:02:c4:29:a7:44:c4:cc:
4f:2c:67:d0:7b:ed:ed:7e:4f:c0:32:bf:a1:42:34:
98:97:95:6b:82:39:9c:4b:25:75:8d:bb:dd:16:12:
20:fc:da:32:af:d3:6a:10:71:ab:b8:02:ff:7e:c4:
35:bf:1f:20:6a:5f:05:8c:bc:9d:6a:99:40:3e:46:
bd:a0:32:4d:db:7c:fd:1d:a9:87:b4:fd:75:06:f1:
e0:f2:51:58:73:b6:41:eb:7e:77:d0:00:c3:3a:c4:
5b:31:03:77:15:c4:ee:9c:c7:c1:84:f8:82:d8:e5:
74:a7:f3:29:af:50:d9:6e:c4:6a:94:02:81:81:c9:
51:85:9a:43:6a:d4:2d:20:0a:2c:3e:07:40:3d:a9:
eb:d6:a1:80:14:f9:aa:f4:8f:7c:6d:f9:6a:0d:ed:
95:ce:a2:a6:6a:71:b1:83:95:c3:bf:4e:e6:1a:0d:
95:0f:7d:52:d6:83:f4:e1:af:77:f1:3a:2c:bb:f8:
96:d4:8f:ec:15:cc:58:48:7d:c0:53:8b:74:d4:99:
e1:d5:d8:e5:f3:49:83:d2:14:f5:f7:f3:3a:28:fe:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F6:F7:5C:B6:E1:3A:6E:38:CC:85:B4:D3:4E:B7:4B:E5:45:D5:67
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:be:80:85:97:7d:73:60:c3:4c:ef:13:7e:f1:2b:0b:ce:4f:
c8:b1:b4:eb:40:d7:f5:da:77:f4:d3:c3:a5:8d:07:7f:cb:b3:
c7:9d:fe:7b:14:f3:1c:a4:e6:21:d5:d2:44:32:86:51:ff:5a:
d0:44:79:7c:fd:46:33:ed:f3:eb:43:03:a8:72:c0:ca:fa:a7:
46:be:52:82:a6:e5:88:b6:41:96:04:0b:dd:38:8f:2f:a0:1e:
2b:34:54:15:55:99:5c:d1:43:8b:23:db:11:7f:e3:ab:7a:fe:
84:48:a3:80:b1:b2:0a:39:61:63:d7:7a:ae:cd:61:13:cc:50:
8c:29:53:7a:88:bd:17:92:af:0a:03:f1:50:04:a9:52:d6:60:
0e:78:09:75:29:5d:17:b9:c8:79:a0:82:05:4c:e1:02:53:fa:
d9:34:b2:12:25:2f:6b:57:77:eb:49:9a:91:ff:f8:f0:9d:65:
d8:62:4e:d4:35:e7:53:09:a0:15:b2:25:47:41:fa:ca:0e:cf:
a1:91:b5:df:21:8b:59:2d:ab:c3:4a:86:02:58:64:89:52:15:
00:7f:18:a4:88:f0:fc:03:a3:94:bd:06:02:ee:14:5c:fb:06:
c5:87:cc:64:1c:09:61:7a:b9:b6:3b:4f:a1:2b:41:aa:4b:aa:
4a:eb:f3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:31:14 2026 by rpki-client