Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: cawNsbXQGCBWELhlM45UGPDBaKqGNODLT9vbFb3qy/Y=
Subject key identifier: E9:D5:54:61:C7:D6:FA:07:B9:6F:A8:E5:B3:86:C4:B4:7D:81:F1:F2
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 019E1CB56BD0622272EA4A67DEE0A2830979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 136B
Signing time: Tue 12 May 2026 15:01:52 +0000
Manifest this update: Tue 12 May 2026 15:01:52 +0000
Manifest next update: Wed 13 May 2026 15:01:52 +0000
Files and hashes: 1: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (hash: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs=)
2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: 5kTFfO+XNg10ttCBVkLONm+SbvnJgiYLAV1uICswyyo=)
3: OmODl-Dxgvnfb7lh_C-Zh2V9ocU.roa (hash: PmAaIQqyZcT72p+jMNnZFGobOFfukrUMlowL+LPavOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:6b:d0:62:22:72:ea:4a:67:de:e0:a2:83:09:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: May 12 15:01:52 2026 GMT
Not After : May 13 15:01:52 2026 GMT
Subject: CN=e9d55461c7d6fa07b96fa8e5b386c4b47d81f1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:c8:14:5f:0d:11:9b:12:e8:6f:1c:b1:3f:
fc:ec:fe:8f:a5:b1:4b:4e:bc:32:a9:ee:a5:05:75:
0e:52:52:f3:92:c9:35:32:04:0f:76:0b:6c:79:6f:
d2:e5:5b:b9:7b:b1:96:80:00:5c:20:3d:17:bb:8a:
ad:64:f6:77:96:ef:ff:7e:68:74:42:e2:63:91:5c:
60:93:39:72:b9:94:94:7f:fa:ff:c4:f0:0a:12:ee:
05:5b:9c:fb:18:75:44:93:00:d6:f7:56:3c:44:ea:
f1:ef:74:a9:c2:ef:05:93:75:c6:0d:db:ee:67:fa:
79:7c:ed:66:5c:93:fe:39:5e:ac:d1:ea:3e:0a:e1:
e5:68:fe:7f:0d:50:79:0e:aa:64:75:ab:e7:ba:1b:
3a:88:9e:5d:5c:c7:09:95:cb:ea:9b:de:20:7d:22:
b5:1f:cf:fe:a3:2d:f0:d2:ee:4f:8b:80:09:1c:ac:
1d:b0:2a:b5:f5:15:d0:bd:04:ac:fe:7a:d5:e4:c5:
2a:b7:0c:5f:4f:e9:18:8d:33:da:7a:fe:0e:9c:ee:
87:5a:c8:e5:b5:1e:82:62:71:57:1e:3f:08:91:4d:
21:12:a9:a7:55:14:90:8a:1e:bb:7c:b3:70:bd:99:
57:01:4b:87:1c:d9:b8:14:dd:cb:21:e2:56:8c:9c:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D5:54:61:C7:D6:FA:07:B9:6F:A8:E5:B3:86:C4:B4:7D:81:F1:F2
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:40:b9:ac:76:76:08:3f:61:88:cb:db:59:ac:35:d7:cc:ad:
b1:c7:39:51:ea:77:98:cf:63:45:59:2a:81:7b:99:fd:cc:6e:
0b:7b:86:5e:15:de:a4:4b:a9:82:0f:94:ee:dd:e8:a7:14:35:
28:b1:e0:bf:5d:e1:05:de:d1:90:a3:8a:99:d3:36:f0:06:bb:
49:08:c7:7c:3d:f6:bd:a8:58:15:69:c6:d7:f0:fb:27:f7:8a:
08:1f:c7:42:58:bc:bb:30:4d:15:91:04:65:09:f8:e1:e2:d6:
60:34:1f:38:a4:61:33:c5:e3:30:fe:6d:61:07:ff:47:f6:1d:
0c:1b:09:fb:91:97:b7:ca:fc:aa:dd:ab:28:1b:0c:b4:4a:79:
6d:15:a9:dc:5b:89:7d:04:2c:72:73:63:81:83:f0:4d:17:7e:
70:8f:57:c9:a3:a0:2e:ff:ae:c0:f1:04:b5:79:fd:fe:ca:76:
f3:62:29:c2:8b:43:33:0f:b3:2d:b7:27:6c:06:bf:e8:ee:4b:
fe:58:02:19:fa:60:17:36:e2:7a:54:29:a6:d4:79:51:97:2c:
f6:3f:03:6c:26:87:7f:51:b3:19:f0:0f:95:16:f4:ed:62:4e:
a5:24:9b:59:61:28:16:da:19:51:99:26:dd:61:46:60:da:82:
89:f7:91:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:14 2026 by rpki-client