Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
File: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft (raw, json)
Hash identifier: 9r5y0IQpa8rFjmvb5QVLUXI+WdJNvrmdiOTZG7S/xYQ=
Subject key identifier: 17:17:09:7A:BB:1A:62:1D:F3:E1:3C:DB:35:68:36:0A:E5:0A:C7:F9
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial: 019E1BD8F5EA4DBB6EA1701FA4175496030C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
Manifest number: 0A9D
Signing time: Tue 12 May 2026 11:01:03 +0000
Manifest this update: Tue 12 May 2026 11:01:03 +0000
Manifest next update: Wed 13 May 2026 11:01:03 +0000
Files and hashes: 1: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl (hash: EbZriNMGM0C0T0s0qmiNYZ00Ygqnoti7ea4BK863j2w=)
2: HCLMfVSYMXhaXPDTQeNyUs3_km0.roa (hash: qS9rBLPDOBtr9IKEEF8WbooTuAl7SLlqT29bHOmlbUM=)
3: gBoNUQ_CTGnWgUM07GFr-rBWBjY.roa (hash: FSsCz3l2v0+0v9doEdJtlcnkPmunLIWLZEkaSuag6Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:f5:ea:4d:bb:6e:a1:70:1f:a4:17:54:96:03:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Validity
Not Before: May 12 11:01:03 2026 GMT
Not After : May 13 11:01:03 2026 GMT
Subject: CN=1717097abb1a621df3e13cdb3568360ae50ac7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:62:91:1e:80:5f:2e:7b:46:f1:3b:df:2c:
33:d4:5b:24:fc:51:c0:8f:b8:23:a2:a0:2d:61:47:
5d:5a:71:46:62:8c:76:49:f0:8d:ba:e3:e6:ca:a0:
6f:37:75:e1:bc:00:27:aa:9f:28:52:a6:39:9c:57:
da:79:7b:b8:05:35:e1:d1:cb:27:12:4d:d8:5b:19:
bf:61:5e:4c:e6:f8:d0:48:65:65:06:b6:cd:f4:b1:
a6:ef:3a:5d:b0:b1:ab:7c:13:14:41:56:29:4b:fa:
ba:a8:27:5e:8a:69:5c:21:fe:3e:a2:4c:5b:f8:dc:
74:12:bd:a0:52:a4:be:d9:8c:ce:46:d8:e6:0b:6c:
50:05:1b:8f:db:92:3c:03:d4:6d:49:5d:2f:0c:77:
f5:30:bc:9a:bf:0f:5b:99:3e:32:1d:a9:bb:a2:0a:
9f:2c:0a:a4:87:89:2b:73:07:b2:29:8a:33:8c:0a:
14:f8:0c:a6:17:7a:6b:c3:15:7b:11:97:5f:50:5a:
e3:4d:55:06:63:66:90:02:98:06:5e:2f:14:c3:6d:
14:b0:db:48:d3:69:5a:21:d7:83:69:8b:19:04:a6:
a4:4d:ce:e8:e1:75:6c:38:ce:89:88:8e:04:57:5d:
bc:34:93:1d:63:1c:a2:5b:8c:0a:c6:62:84:1f:b0:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:17:09:7A:BB:1A:62:1D:F3:E1:3C:DB:35:68:36:0A:E5:0A:C7:F9
X509v3 Authority Key Identifier:
keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e9:da:6a:61:d1:91:34:47:28:b3:0e:92:49:ce:24:b2:5f:
f8:33:4b:05:da:cf:ef:5d:2e:38:8e:3d:99:6c:36:b9:cb:d0:
7e:ea:2a:52:b2:eb:05:35:cc:39:68:4a:83:85:87:4f:db:ea:
3c:4a:e3:76:80:59:d4:47:58:31:25:dd:19:ed:4a:38:31:a9:
d0:6b:08:4d:d7:64:04:2c:20:67:30:71:b3:2c:5c:73:f9:cd:
fd:a2:0e:24:67:f7:9a:87:67:af:fc:51:d4:91:95:4e:d6:95:
8f:d5:fb:af:be:05:ed:bc:e3:63:64:eb:d7:73:79:eb:b1:ce:
e6:dc:b3:a4:a4:04:c3:0e:25:dc:c6:9d:02:d7:9e:b8:11:4d:
e6:1f:fd:18:87:b6:4a:a3:72:2c:7e:b2:5e:75:04:ee:24:42:
ad:5b:97:d4:94:57:c9:ce:1c:2f:05:85:08:d3:59:af:c5:61:
fe:d5:64:39:ea:31:04:70:00:61:5a:0c:5a:c6:ef:76:ff:32:
a3:4c:3a:be:2d:8b:ba:ff:1c:a6:d7:24:23:47:04:4e:00:91:
1b:9d:56:0e:0f:29:1e:31:3f:45:72:a4:4c:89:3f:37:aa:97:
48:13:ca:35:de:c6:a0:39:62:a8:bc:23:d4:da:7f:77:68:49:
10:c1:58:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:43 2026 by rpki-client