Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
File: 8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json)
Hash identifier: anam5FXjATTjGjEzllQocIFAnvJc+fBynmqUR2ZuYpA=
Subject key identifier: 64:AD:83:77:1A:87:AD:70:3E:4F:B7:7D:9C:3D:23:9C:1B:F0:BB:25
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial: 019E1BD8AC0550DF42737B6BA0C4AAAA23B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
Manifest number: 0967
Signing time: Tue 12 May 2026 11:00:44 +0000
Manifest this update: Tue 12 May 2026 11:00:44 +0000
Manifest next update: Wed 13 May 2026 11:00:44 +0000
Files and hashes: 1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: fGlNzkbJ94JH75WO23XYwWAjgiI83bubqqsNSUieC+o=)
2: NSu3QEv-adix_Q5roohaGM-bpUY.roa (hash: VnW6Wcl5mZCO2kBW9kdAmVPadw5Gk+HyABLxpyWmKB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:ac:05:50:df:42:73:7b:6b:a0:c4:aa:aa:23:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Validity
Not Before: May 12 11:00:44 2026 GMT
Not After : May 13 11:00:44 2026 GMT
Subject: CN=64ad83771a87ad703e4fb77d9c3d239c1bf0bb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:6c:ed:81:02:27:3a:36:6f:10:2d:e1:73:
fe:d7:90:70:45:64:af:ae:eb:34:85:cc:6f:fa:f1:
11:63:ca:fa:ac:5d:13:25:15:15:39:4d:3b:de:88:
ca:1c:2a:b9:70:25:ff:7c:f0:56:be:ad:53:94:ef:
8c:e3:82:8b:0b:9f:65:e6:81:86:59:28:ea:92:3c:
ab:14:4b:51:24:3a:aa:45:34:3d:7b:4e:8a:ea:b7:
9b:17:ad:23:53:4c:02:63:12:29:fc:c8:18:55:a6:
5b:8e:5b:ed:d6:80:b6:07:80:50:d2:9c:7c:e3:73:
79:59:18:94:19:8f:73:3e:e7:fc:80:5c:c5:c9:08:
7c:a1:19:dd:35:9b:4e:5f:ab:db:c0:16:4c:96:60:
94:88:32:2a:11:58:6d:26:20:38:2c:93:27:a8:4a:
d3:95:9a:88:10:fe:b2:8c:b2:2b:94:19:81:08:f8:
bc:a6:63:7f:80:fe:39:37:49:4e:11:64:74:c9:4d:
56:90:e3:20:a0:d2:f6:33:51:82:c1:3c:a0:5c:0d:
e9:d1:e8:9f:f7:fb:35:f8:70:1e:a5:7b:0f:ab:47:
2f:3b:90:a0:7e:ed:da:7e:c8:35:32:7f:76:59:e0:
54:21:12:67:ef:8b:06:e1:dc:50:86:a0:d3:54:9e:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AD:83:77:1A:87:AD:70:3E:4F:B7:7D:9C:3D:23:9C:1B:F0:BB:25
X509v3 Authority Key Identifier:
keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:47:b6:2b:4f:7c:76:3e:4d:81:67:31:11:c4:ca:e2:65:43:
82:24:54:d4:76:04:a2:b4:a9:a5:5e:99:58:77:67:c5:f0:fa:
c0:3f:b3:98:e2:d1:e1:8c:d5:15:24:49:92:6d:e9:27:91:98:
3b:e2:b3:e0:8d:88:94:af:64:e8:3e:cd:15:a2:6a:1f:04:11:
7b:1c:65:e3:25:29:56:36:23:9f:c0:14:29:10:f0:14:a4:b0:
79:56:13:9c:ec:c9:c9:de:68:d4:62:11:e3:74:b5:eb:77:77:
00:b2:5e:81:ea:f2:6a:e7:6e:16:f5:6e:90:9a:ee:9c:ba:7d:
59:b2:b8:ce:89:05:15:ea:83:8a:74:78:fa:04:ee:e0:7d:8c:
9b:0e:5b:1f:e7:ae:b0:37:a5:e6:f7:50:a1:da:df:5c:88:9b:
ce:49:2e:10:6f:5e:9c:cb:97:24:f1:4f:88:68:94:33:d6:23:
f8:8c:00:32:72:e0:01:20:62:4a:c9:07:db:1a:f2:06:50:dc:
7e:68:2f:36:25:e0:c0:2b:aa:1f:06:9f:ab:eb:a6:94:c8:b0:
f8:50:23:37:07:cf:24:6e:83:7b:c6:f5:2d:ee:b0:da:fa:61:
4c:09:14:7e:f7:f4:4b:09:7f:60:1d:12:e0:30:06:ed:3a:18:
eb:8b:c7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:42 2026 by rpki-client