Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: nTx4ufts/znpPf3Vkt/rtNr2t9PJkM85TOuVnwZrVrI=
Subject key identifier: 6A:DD:0A:C3:E2:F3:88:74:B4:4F:3C:3E:A2:CE:E3:01:D4:12:64:3E
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 019E1D90650B781298D54A583EB4A41D08B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 190C
Signing time: Tue 12 May 2026 19:01:02 +0000
Manifest this update: Tue 12 May 2026 19:01:02 +0000
Manifest next update: Wed 13 May 2026 19:01:02 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: IMJwX/LYf1g9y+Maayh4eaqZgI/dv7OYhgDtyiOU+Ag=)
2: DVP_0l7-8-BzmTOEfb03crpQz3g.roa (hash: k1kJ0Q7wGodPAMbk3ewT0wyHEIGv0VSXLBiDpwYkrPw=)
3: H7Xngt8uDaQXLqhk29afH0VWFcw.roa (hash: CThtSzNbfgXJz5IyFmqQ4qYlcRz/LI/HyRGPDPbi4Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:65:0b:78:12:98:d5:4a:58:3e:b4:a4:1d:08:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: May 12 19:01:02 2026 GMT
Not After : May 13 19:01:02 2026 GMT
Subject: CN=6add0ac3e2f38874b44f3c3ea2cee301d412643e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:db:68:80:d2:e8:33:fa:24:99:52:5f:50:
11:ef:00:25:d6:e8:27:3e:96:b0:b6:20:69:af:93:
68:6f:53:0c:ae:83:8a:df:04:43:8f:e0:cd:eb:7a:
74:53:5a:ec:3b:53:ef:ee:90:40:f5:2a:d6:f5:68:
6e:02:9d:a7:00:2b:be:f6:8c:e8:c5:1b:cb:06:02:
66:dc:d3:8a:e8:e6:7c:ae:bb:4e:3e:19:5e:28:c8:
48:93:4c:c4:f8:c3:18:66:6e:eb:73:22:89:65:0b:
83:c7:99:75:69:15:63:da:30:40:21:cd:fb:9b:4d:
bd:f8:5e:fb:a9:c3:db:11:d5:39:97:a9:41:f7:36:
1a:b8:46:19:f0:43:7e:6d:67:d3:80:3b:27:cc:83:
84:62:fc:ef:6a:9f:dd:89:0f:fc:a3:33:67:3b:48:
d1:43:54:57:e1:50:bb:44:c2:57:b4:b5:e4:21:da:
89:e8:0b:d5:4f:d7:ec:a0:a6:da:81:59:e7:cf:cb:
0a:92:18:9c:86:05:d9:c7:b7:70:d6:cc:b0:fe:e8:
87:09:43:be:85:eb:cd:af:11:59:43:27:6d:b7:45:
05:91:5d:85:fe:07:04:03:f4:9e:e3:5c:a1:b6:89:
f2:5a:3a:95:00:89:d1:b1:32:12:a2:65:a4:41:00:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DD:0A:C3:E2:F3:88:74:B4:4F:3C:3E:A2:CE:E3:01:D4:12:64:3E
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:20:a2:00:43:c2:44:d1:3c:f6:b5:0b:f3:2d:64:95:1c:51:
6b:2e:f9:66:91:68:11:c0:af:97:a2:f6:7c:21:5c:cf:6e:35:
1c:ea:6e:7c:d4:34:bf:32:4c:8e:2e:51:41:0d:b3:1c:78:6f:
ff:f6:5a:07:1f:9d:09:b5:9f:10:0c:d5:8c:0c:7c:f9:48:ee:
52:49:57:36:7d:6a:e3:39:4e:44:f4:b0:79:76:27:b2:69:b2:
ca:eb:53:b7:c1:79:64:94:a3:b2:73:0a:31:c6:d8:4f:1b:be:
53:95:78:52:c7:8f:3e:7a:25:67:46:d0:b7:3f:fb:47:69:4c:
46:4f:11:4e:bc:92:94:63:c0:52:71:b7:5b:fc:73:5c:99:d0:
42:28:f4:b4:87:f5:6a:84:11:16:2a:41:3f:32:77:fa:36:40:
d3:32:2d:15:87:9c:75:f4:57:66:a7:58:35:d8:79:de:01:9b:
75:10:04:a2:65:64:07:a7:df:1d:63:fa:e4:e3:71:2f:ba:94:
f0:b7:bf:89:53:b8:85:ec:cb:73:2f:d4:c1:b1:91:dc:9f:d3:
f4:4b:17:5c:e4:54:21:7f:4a:90:fd:d9:33:54:45:b7:d3:c8:
85:83:02:2f:e7:ad:a7:cc:88:eb:d3:95:ea:0a:0a:7b:97:df:
64:8f:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:11 2026 by rpki-client