Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier: i87qql3BcGK6pTRy22yD/l4piSMaurg6jkwYwqRzWCE=
Subject key identifier: 20:5D:38:AF:98:5C:18:E9:D2:55:52:F7:FA:41:21:CE:ED:6F:CC:9F
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial: 019E1C479102C90DD4862BE7A813202C4463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 13:01:52 +0000
Manifest this update: Tue 12 May 2026 13:01:52 +0000
Manifest next update: Wed 13 May 2026 13:01:52 +0000
Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: SsPKHKyMK81iREH/pUHjl1/3J+94KBKzgZYMkZ3+opY=)
2: r1byiiD8E5kv1tORv9SHaYWDCX8.roa (hash: Y7mEKt3t/ouKCUEMiF9nKEKnQJXCe30KkTBF7TaOr+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:91:02:c9:0d:d4:86:2b:e7:a8:13:20:2c:44:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Validity
Not Before: May 12 13:01:52 2026 GMT
Not After : May 13 13:01:52 2026 GMT
Subject: CN=205d38af985c18e9d25552f7fa4121ceed6fcc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:d7:b7:f9:e7:74:a1:e9:45:21:2e:bc:2c:
9b:bd:d1:11:59:de:23:6a:0b:08:d3:ef:1d:90:f1:
71:e9:14:87:99:bf:64:cb:c6:6e:d3:25:03:c5:14:
55:09:6e:c4:1f:40:0b:a0:d7:64:b7:ee:27:97:ea:
14:67:32:54:34:c4:4c:20:18:4c:c6:94:ab:ee:72:
6d:e4:ef:35:8f:1c:d9:8c:71:68:82:fb:20:e9:a7:
76:b1:a5:1d:93:ec:fa:4f:5b:c6:9d:c1:f0:9a:05:
a6:47:9b:74:b7:e5:25:68:61:aa:d9:3a:09:10:87:
32:99:3b:b5:68:70:60:1c:b0:e1:84:8e:f1:a8:a6:
96:36:bf:10:82:b2:3e:ea:37:6b:24:a7:91:dd:c8:
b9:50:24:e5:cb:9d:4b:1b:2c:3d:37:a0:27:a3:dd:
e0:2b:6e:d8:41:fe:1b:88:a9:a5:67:48:63:1d:6c:
1e:37:88:08:33:54:be:d5:a3:84:be:44:68:f0:92:
9a:34:23:d7:ff:d3:f8:4e:01:8e:42:46:66:f7:2d:
04:59:5b:14:8f:58:ea:3b:32:75:6c:8a:9d:11:e7:
90:8f:60:5a:6b:13:64:d3:95:9a:63:41:28:b3:f1:
df:69:a8:e9:21:80:8b:54:fc:34:99:a1:77:d4:16:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5D:38:AF:98:5C:18:E9:D2:55:52:F7:FA:41:21:CE:ED:6F:CC:9F
X509v3 Authority Key Identifier:
keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9b:d5:08:11:79:e5:ed:90:08:a7:a4:10:95:25:37:77:39:
ab:4d:76:37:b2:7a:ae:99:04:39:0b:85:89:09:a0:da:21:49:
14:6c:b0:fb:e4:18:5f:e0:85:a8:3a:4b:22:a3:44:b3:60:9f:
91:8d:78:b8:73:34:30:87:ea:d3:e5:d9:4e:78:67:a3:46:e0:
fa:38:11:65:84:28:39:8e:57:0c:a3:69:c4:e7:0b:0c:59:af:
e9:e0:7e:82:c5:6a:5e:08:52:eb:11:e6:ad:d3:3a:fe:b0:50:
d1:3f:8e:b1:ef:ef:9d:30:e5:34:cf:32:9d:c4:da:46:cd:b8:
3c:77:e2:c0:1a:19:1a:86:7a:25:f1:a4:6d:88:0d:aa:3c:4c:
b9:a3:dd:ad:1a:c2:8a:53:cb:c7:2b:d8:d2:dd:80:65:c2:00:
e3:43:2c:93:2a:e0:55:17:98:30:a5:55:c2:0d:87:9d:0d:b2:
a0:81:56:65:95:14:91:4d:90:3c:09:68:7c:20:10:66:0b:7b:
6c:58:bd:70:41:20:69:42:71:69:53:e5:88:43:63:58:5d:5c:
8e:ca:fc:40:93:51:48:aa:5c:31:ce:22:32:9e:93:31:78:72:
8e:e8:b8:24:4c:25:c0:bc:fc:c9:dc:22:9c:cb:fc:2c:da:d0:
8e:cc:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:21 2026 by rpki-client