Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier: Tj8uv27VH9iS8Mkmxf43DnAEcS5t6LpdLOU3dN3b4Yw=
Subject key identifier: 0E:91:70:AD:51:52:F0:E6:BD:A4:E5:09:CC:F7:EC:C6:D8:04:03:13
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 019E2024675EE4CA5B1F50998A6036AF30A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number: 189A
Signing time: Wed 13 May 2026 07:01:57 +0000
Manifest this update: Wed 13 May 2026 07:01:57 +0000
Manifest next update: Thu 14 May 2026 07:01:57 +0000
Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: yUk25w0vj+WVNMfoNI+wgp/Vv1xo50sMRD0onwe0c/I=)
2: QKTIYLK1WrJ4lEHTpt0XBIkbbcY.roa (hash: Aq9b63DbV2PHKSgFXgnbBX80EJsS6u4ad6/+U2GDTlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:67:5e:e4:ca:5b:1f:50:99:8a:60:36:af:30:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: May 13 07:01:57 2026 GMT
Not After : May 14 07:01:57 2026 GMT
Subject: CN=0e9170ad5152f0e6bda4e509ccf7ecc6d8040313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:d1:01:fb:4e:34:74:6f:ff:53:f8:4d:7e:
06:a9:e6:54:ae:1f:aa:cf:8a:4a:15:23:c6:dd:14:
59:df:b6:e7:c3:ca:4a:47:89:d0:56:1b:ea:0a:1c:
82:76:fe:e2:7e:15:8f:27:b0:04:95:9f:a1:a0:09:
c5:e1:c3:44:a4:cd:82:da:79:33:42:ee:25:41:6a:
47:68:9c:10:0d:73:92:95:77:00:78:59:da:d6:af:
00:c8:1c:26:7e:c3:a3:3b:c8:17:db:f6:8d:71:4c:
0c:e7:46:8b:04:63:a4:50:3a:ef:69:bb:8b:0d:8e:
f0:2d:9c:e3:c6:9f:8b:67:08:03:2d:d5:c2:25:ac:
fe:88:24:a6:bf:34:89:92:c1:30:d5:4b:96:0c:a4:
c8:f8:d4:8b:96:9a:10:54:f8:d9:b6:a5:f2:62:8e:
7e:35:b5:69:3f:90:aa:ea:ed:60:a4:9a:ac:b4:f0:
42:c2:93:d9:1d:7a:85:70:ca:65:c9:f3:7e:be:1d:
3d:c0:15:25:f7:10:40:4a:2c:aa:27:96:22:ee:4c:
c0:02:3b:e6:26:fa:d4:a8:60:2b:c1:73:fe:b7:e1:
a4:3d:3d:56:eb:e5:8b:90:3c:e2:6c:43:2d:e8:bf:
42:31:0f:71:01:0e:af:60:ca:81:b8:e1:a9:00:20:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:91:70:AD:51:52:F0:E6:BD:A4:E5:09:CC:F7:EC:C6:D8:04:03:13
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f4:6e:3d:9d:e0:0e:d0:19:f8:fd:85:9e:8d:8b:11:6b:0c:
04:4d:b5:c6:27:5f:ed:d4:6a:28:ff:38:a3:c7:78:77:a4:85:
03:ed:62:33:72:6b:0e:f0:fd:1c:8b:3e:f0:37:8f:75:86:6b:
84:f6:54:cf:2d:f1:0f:97:0f:48:a7:0e:37:ef:65:82:c9:2b:
7a:04:7a:c7:71:9f:04:6e:df:93:80:8d:4a:e3:2e:9b:63:dd:
0c:3b:e2:cc:38:2c:c5:2f:58:0a:12:a2:e8:68:96:94:c2:1a:
6a:f3:af:52:27:88:90:b4:f0:8e:f4:84:1e:91:7e:e4:6b:f3:
89:7d:12:97:66:3b:01:14:08:fd:3e:33:50:7a:b1:62:a3:3e:
35:fe:74:fa:b7:36:9e:c2:12:20:c4:86:aa:6d:04:af:73:ce:
43:5b:ac:15:4f:fa:78:92:9c:a0:b6:76:d5:8e:31:bb:98:6d:
e4:d4:60:03:a6:bc:43:1d:ab:f9:2e:43:16:7f:3c:56:1c:48:
03:8b:5e:b0:83:f1:1c:22:72:99:cc:36:f0:49:e9:70:2b:49:
d9:d0:5d:6d:25:8a:ee:eb:d1:aa:f9:18:cf:3d:6a:bf:d4:5d:
1f:d4:b1:e4:b2:fa:55:13:6e:a3:4e:bb:41:9e:40:c2:c4:70:
b3:89:f7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:30:55 2026 by rpki-client