Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: QebsDkOW7arcsUndtj7cTcptS+u330zxy21YhGSiBaM=
Subject key identifier: 46:FD:16:FA:CC:D6:50:8E:82:36:69:93:9B:CE:D6:8C:E2:6A:2C:DB
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 019E20FF3401189250A3F3674D8F6D34E84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0F0E
Signing time: Wed 13 May 2026 11:00:56 +0000
Manifest this update: Wed 13 May 2026 11:00:56 +0000
Manifest next update: Thu 14 May 2026 11:00:56 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: +jcH1UCpUbws7Iv/8CQBUbBNxUY4dIRm1LOrdCnk6cY=)
2: EKzVr1AvNpYiprsqEkvQMIL5W4E.asa (hash: Ipa5Hr4X/R8wDhVGPsZEgzWXdPPvkLWg6IkVPIMaQqY=)
3: aW0GLfMs8RiqQkgroqb6Dpcu-TM.roa (hash: UsXuprIqiJrTmGsZFEzdkex7OcaYkNomgnQMK988aG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:34:01:18:92:50:a3:f3:67:4d:8f:6d:34:e8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: May 13 11:00:56 2026 GMT
Not After : May 14 11:00:56 2026 GMT
Subject: CN=46fd16faccd6508e823669939bced68ce26a2cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:a5:0b:24:e1:f9:ad:be:27:33:1a:6a:ee:
a7:51:55:c1:da:0e:99:de:a8:43:08:42:89:3a:be:
7e:92:af:5e:50:c2:23:ea:de:97:1f:ce:f0:74:f7:
ed:e1:1b:28:58:ec:6e:3c:82:49:1c:5f:f3:66:48:
70:40:39:54:5f:1a:f9:96:62:ba:4c:67:04:5f:03:
70:5c:de:45:23:74:10:66:ad:04:8b:8f:ff:82:3f:
c2:da:c9:70:5c:b7:95:73:87:55:f5:ba:06:ae:1f:
8f:17:2a:6d:86:1b:26:55:33:61:35:f1:60:5a:8f:
ef:88:29:31:b3:b4:77:6d:d6:70:f6:67:c2:ab:a0:
65:c7:8f:d2:fc:b1:ba:cb:11:c1:e3:4d:6f:b8:f6:
e6:f7:a2:31:5c:3e:99:5f:8a:74:88:12:10:a4:33:
00:d6:25:ec:8a:50:22:6a:22:63:4b:f3:1d:59:ea:
d7:f0:fa:94:34:0f:64:0e:77:2f:4f:00:02:5f:38:
a5:fa:dd:c7:e9:be:bc:51:02:5d:3e:19:cf:ee:91:
c3:56:cb:eb:46:c1:9b:1e:aa:48:47:92:ea:2b:3d:
24:b0:a3:d4:ab:c6:a4:d7:ba:13:74:7b:4d:cc:f0:
0e:1d:e1:69:12:f7:57:72:f2:0f:40:a1:d6:6f:4d:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FD:16:FA:CC:D6:50:8E:82:36:69:93:9B:CE:D6:8C:E2:6A:2C:DB
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7b:b2:5c:b2:2f:c3:f1:d5:59:35:40:e3:f2:b3:54:fa:6e:
78:fb:84:37:53:4a:f2:f6:16:33:a1:9e:31:45:12:82:22:22:
1d:f0:69:9b:c6:d1:6e:d5:30:71:fd:02:ca:76:ef:4d:93:47:
45:32:66:8b:75:34:98:ba:a2:4f:45:c4:cd:9e:89:9e:95:c6:
e1:99:d9:5f:d3:f8:0f:bb:bf:f2:0e:ad:d6:df:e2:ae:b8:e2:
81:12:09:39:5f:09:88:a2:43:6c:77:61:32:0a:5c:46:d8:6a:
b2:9f:9c:a9:f7:72:11:22:52:5c:fa:8c:fb:5d:17:6f:c9:74:
63:48:42:15:a0:74:f1:aa:56:91:d7:ff:16:af:10:2e:92:ae:
ff:5e:2e:24:6d:cd:fe:56:d6:06:e2:12:34:6b:8e:2e:90:92:
1b:0e:0a:13:74:7e:9c:7f:ab:5b:4d:80:0d:94:51:53:8f:69:
83:cc:a4:96:4b:a2:52:9e:e0:89:df:cd:09:c6:fa:6d:56:fd:
a6:ac:48:81:3c:c1:af:7a:80:0e:e9:e8:d2:8f:58:56:0b:f4:
e2:a6:a3:54:05:60:e9:60:18:38:04:28:ae:0e:33:02:a0:2c:
80:e1:d5:5a:44:54:a5:a8:e2:1a:ff:af:3f:7d:73:28:ed:54:
86:eb:4d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:29:37 2026 by rpki-client