Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
File: 8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft (raw, json)
Hash identifier: 2cHKF1G6FqJI9M5cLxqEKTK0zO4wbbNWmmxD2tfBLIs=
Subject key identifier: 5E:FC:30:FD:11:89:1D:70:57:51:6B:EB:0A:31:08:89:EC:86:60:8B
Authority key identifier: F0:60:DD:40:3D:DE:F7:E5:19:17:3B:3F:B4:DC:7E:8A:23:34:11:15
Certificate issuer: /CN=f060dd403ddef7e519173b3fb4dc7e8a23341115
Certificate serial: 019E1DFE3910E4CF7B9F2E671A313735385F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
Manifest number: 0103
Signing time: Tue 12 May 2026 21:01:00 +0000
Manifest this update: Tue 12 May 2026 21:01:00 +0000
Manifest next update: Wed 13 May 2026 21:01:00 +0000
Files and hashes: 1: 4hUo9slD_WYqWgnSusuLi5aYgKk.roa (hash: Xmxn5Zro/2pB9LNtV2YLqCKLpWDCyVWpsb7YiPBgbM0=)
2: 8GDdQD3e9-UZFzs_tNx-iiM0ERU.crl (hash: vtlHti+jb0Ds+PSAO7/wY5lH3xsZoyhfMZmDDjgdLis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:39:10:e4:cf:7b:9f:2e:67:1a:31:37:35:38:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f060dd403ddef7e519173b3fb4dc7e8a23341115
Validity
Not Before: May 12 21:01:00 2026 GMT
Not After : May 13 21:01:00 2026 GMT
Subject: CN=5efc30fd11891d7057516beb0a310889ec86608b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:79:c3:ca:90:e2:30:43:2d:c5:cb:a9:e8:
63:c8:77:3e:04:1d:2a:ae:b2:7e:e8:eb:a8:e7:3d:
57:b2:9d:31:0d:c1:2b:bb:1f:9d:a0:7b:4d:f0:3a:
1d:92:f4:a5:5a:c0:04:8a:96:cb:99:b5:95:70:50:
68:fb:43:e8:9c:79:83:c2:e1:3f:ec:6c:f0:64:af:
91:fd:b9:c0:81:b4:03:b2:69:a4:07:e8:48:76:93:
96:25:2e:b4:0e:a0:5f:bd:19:1f:49:9d:bf:54:06:
dd:94:0c:ae:22:5a:84:0a:f5:ea:64:2a:82:0f:f4:
76:77:db:f0:07:b4:c4:15:3f:0c:5d:fa:4b:d2:8a:
9f:d5:81:bc:c8:42:1d:35:df:9d:bf:a5:ab:51:5f:
2b:31:7f:97:b1:fa:aa:76:02:f3:0f:97:99:c8:b6:
ae:47:f4:06:4a:90:d8:91:3f:a8:28:95:bc:d3:9d:
dc:e8:d7:f8:c2:d9:05:3a:3b:f4:8c:70:25:60:7b:
28:bc:1a:36:dd:c2:0c:58:9e:23:85:55:c6:ab:43:
a7:88:78:8c:a1:fe:59:11:79:a8:e4:87:16:c9:30:
e1:9b:71:8d:b0:fe:6a:81:a1:97:6c:be:e4:02:c8:
b5:86:cd:a6:1f:ac:51:ce:88:40:b3:bf:79:2c:af:
60:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FC:30:FD:11:89:1D:70:57:51:6B:EB:0A:31:08:89:EC:86:60:8B
X509v3 Authority Key Identifier:
keyid:F0:60:DD:40:3D:DE:F7:E5:19:17:3B:3F:B4:DC:7E:8A:23:34:11:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7b:38:4b:e8:78:fc:ac:65:97:fe:88:76:b6:4d:f4:b1:63:
92:ad:22:e2:78:ab:b7:41:ff:cb:1f:b1:7b:b8:c2:3f:c5:33:
95:ab:d9:42:13:8e:f2:b4:12:e2:3d:30:76:96:34:ef:1b:94:
16:86:a8:43:60:f9:41:c5:5e:97:e5:4d:66:81:2c:12:57:9a:
46:1b:93:b9:a9:41:80:3f:e6:87:e7:07:8b:00:42:9b:b5:e1:
ba:b4:e1:9b:94:d8:df:fd:fa:cc:25:9b:47:26:15:ab:9e:fa:
7a:ba:ab:4e:55:f6:df:9f:2c:cb:74:8b:ce:3e:7b:69:e5:14:
3f:de:4f:8e:88:be:6e:d9:d6:91:d0:2b:b2:9a:f5:02:26:f7:
48:01:bc:3a:6e:f8:85:b8:c9:5f:51:df:88:6d:62:b1:44:47:
da:91:1d:dd:82:56:00:40:74:43:44:12:86:a9:d4:75:92:4a:
43:0a:9b:d4:b2:f9:d6:3a:39:56:7a:ea:b1:5c:a9:29:46:54:
0e:37:78:fc:f0:49:2c:2e:6b:63:ab:48:63:fe:6b:26:61:42:
d6:9e:f3:eb:fb:59:99:fc:97:7f:ba:07:6c:08:4a:99:09:09:
93:af:7d:79:63:e5:ca:c5:e7:d6:e9:89:e7:33:98:23:34:29:
73:07:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:34:08 2026 by rpki-client