Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier: oLqZWOgrTXWQ/K3r+whtRs//ds21BV+0ivODClbw1k8=
Subject key identifier: BB:58:3D:F8:80:0F:E1:85:0B:CB:D8:5F:7B:E6:BF:21:52:EF:A3:39
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 019E1E6C6CC662A525F014847A9F899308D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number: 095C
Signing time: Tue 12 May 2026 23:01:22 +0000
Manifest this update: Tue 12 May 2026 23:01:22 +0000
Manifest next update: Wed 13 May 2026 23:01:22 +0000
Files and hashes: 1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: EM9nZgrEPMhzQ3QbQQxIrSkqdZyao+j4GwR+UcSKAjI=)
2: iHVc-I0D4U1Te_vkxACKnVHK0pY.roa (hash: cq22r4Ne1D5UlvzndIcqY6BmHjQFUZ46sNNxAKWhDNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:6c:c6:62:a5:25:f0:14:84:7a:9f:89:93:08:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: May 12 23:01:22 2026 GMT
Not After : May 13 23:01:22 2026 GMT
Subject: CN=bb583df8800fe1850bcbd85f7be6bf2152efa339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:56:a9:9a:af:7b:bd:5f:fb:da:2c:29:85:
34:87:e1:9c:3c:b9:15:fb:c8:1e:9e:9c:63:b2:cd:
ee:82:26:4e:c8:41:0d:bd:5f:84:49:29:bf:ce:35:
1b:4b:6d:f6:d6:d4:e3:cb:cd:5e:64:cd:40:2b:20:
d6:3e:f1:24:e5:c3:09:bd:0e:90:6f:c1:40:0b:6d:
c8:ca:d3:bf:51:cb:d0:d5:8a:e2:9e:4e:70:f3:68:
fe:b0:6e:ef:e9:d9:bf:29:04:d1:8e:22:9c:35:54:
98:f5:84:2e:a8:50:21:bc:52:44:5a:5d:b8:f0:4a:
19:c9:12:97:d8:7c:14:bb:52:88:3a:52:f4:2e:29:
45:2c:7d:1f:ea:38:07:48:dd:47:34:74:df:d3:28:
97:11:57:72:6b:98:73:ba:78:f0:23:2b:8a:0f:1d:
fc:0b:9b:f0:91:6c:27:3b:4e:a0:30:63:f7:b2:aa:
7a:07:da:15:04:8a:94:5e:e9:2c:42:54:f7:ab:6c:
26:35:e3:2a:7a:4d:c4:8a:7a:1d:04:30:0a:d4:a9:
cb:8c:5e:3d:f8:23:67:86:f4:68:4d:7f:6c:96:cc:
1b:2e:c3:f3:6b:2d:7f:c7:54:f8:62:73:b4:83:26:
30:54:7a:45:c3:b9:97:4b:8c:32:67:b6:be:6b:6c:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:58:3D:F8:80:0F:E1:85:0B:CB:D8:5F:7B:E6:BF:21:52:EF:A3:39
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7a:34:00:5b:58:02:e0:42:10:f3:58:20:da:60:a9:67:d0:
7c:79:71:96:9d:30:a9:28:23:07:35:82:5b:30:c3:d5:99:3d:
af:d9:21:cf:45:63:45:76:9f:99:f1:e0:3b:b9:cb:fc:4c:4b:
83:26:d4:bf:ae:e3:31:21:2b:02:53:75:f0:ed:70:09:7c:75:
51:d3:98:33:72:2a:25:94:09:45:08:fc:77:52:4a:77:92:9d:
28:66:c6:62:ef:4c:cf:19:fa:b9:7e:35:ad:d2:0d:21:a9:72:
7f:8d:bc:02:f3:0f:6f:33:9e:21:7a:1f:f2:2d:a1:f0:ef:4c:
6b:68:34:7d:e2:98:23:25:7f:70:4a:00:56:21:07:0c:4c:0d:
c9:ff:59:2e:b1:7a:75:cc:da:f2:69:83:6b:95:e0:fb:6a:55:
ed:2f:ca:e2:a9:7f:5c:59:18:f3:83:98:6f:eb:0f:f7:46:b6:
0a:0d:41:46:47:74:b0:47:bb:f4:2a:22:75:6b:a5:e1:46:a1:
1c:15:13:ad:49:14:16:3c:fb:f9:8e:56:83:3f:2a:68:8f:9f:
35:0c:52:81:ec:ba:5b:b5:b8:b2:cc:6a:28:2e:3b:48:04:3d:
88:5b:aa:7f:ff:16:17:1a:16:3e:cb:02:bf:fd:c0:58:f2:49:
7f:cf:8e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:02:56 2026 by rpki-client