Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
File: 8hVRewsgMJ6RZAW54e0hoEaaaJU.mft (raw, json)
Hash identifier: RxFiDG2rbDwGHCeqQNhP2+oq4b9YUcc4avSKPTlnLjM=
Subject key identifier: 55:52:1E:F5:A3:75:85:4C:C5:F2:39:9F:F6:97:AF:95:56:5F:EA:B6
Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
Certificate issuer: /CN=f215517b0b20309e916405b9e1ed21a0469a6895
Certificate serial: 019E1DC788DAD5C2342BDBE59129A5544E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
Manifest number: 0534
Signing time: Tue 12 May 2026 20:01:16 +0000
Manifest this update: Tue 12 May 2026 20:01:16 +0000
Manifest next update: Wed 13 May 2026 20:01:16 +0000
Files and hashes: 1: 8hVRewsgMJ6RZAW54e0hoEaaaJU.crl (hash: QTRzPbEE6FZhvIeQcRNanyG2ejoWq3OEHMU6CamxHhw=)
2: tA7ayHD2OC_mDpYSeAYmRt9vl60.roa (hash: nXzUQidKZKiPu+wTyev4ClnGSOGOvsTtGMsfWsjmfCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:88:da:d5:c2:34:2b:db:e5:91:29:a5:54:4e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895
Validity
Not Before: May 12 20:01:16 2026 GMT
Not After : May 13 20:01:16 2026 GMT
Subject: CN=55521ef5a375854cc5f2399ff697af95565feab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:a2:09:cb:df:13:ae:2b:13:e0:32:e1:6b:
23:0d:3d:2f:84:22:58:52:85:3b:f3:9f:6e:32:18:
27:54:19:77:84:4d:3f:83:5c:d4:65:66:ce:fa:6e:
5d:ec:c7:f9:59:16:63:04:dc:e8:0b:ec:4d:58:6c:
a3:d7:ff:e2:14:5b:e1:db:ed:62:23:72:f8:f9:09:
17:3b:24:1e:d4:fe:9b:cd:3b:16:ed:2d:0b:3f:c8:
2f:66:cd:ed:ab:34:c1:e3:1a:06:02:85:c3:12:91:
f9:04:81:6c:0d:2e:0d:7b:5b:0b:47:0f:2a:af:33:
e1:0c:09:f6:65:3c:51:37:95:6a:14:5d:a3:12:ac:
29:b7:6b:b3:7c:0f:54:d1:6a:97:0b:27:4d:b7:11:
e2:95:7d:aa:b4:16:44:2a:e6:14:49:20:ca:4f:97:
6c:49:84:db:48:f8:a2:2d:7a:34:29:e7:9e:85:58:
a6:1e:aa:5e:03:de:66:31:97:43:15:fd:05:92:8b:
85:81:b4:7b:de:c8:81:8c:a0:8c:44:64:9a:a3:1f:
93:53:0b:97:2a:89:15:ea:8a:2c:3b:6c:11:10:21:
ab:2e:d9:13:43:e2:50:6b:d3:72:6e:a9:9f:94:d6:
26:68:1a:c4:bd:16:31:8c:4f:6e:1e:d1:6b:c6:f4:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:52:1E:F5:A3:75:85:4C:C5:F2:39:9F:F6:97:AF:95:56:5F:EA:B6
X509v3 Authority Key Identifier:
keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:57:a4:c2:7f:65:82:71:a5:07:5d:77:d9:39:de:cc:eb:72:
95:07:1b:38:0a:ec:09:23:10:92:8e:55:bd:83:54:57:ff:6b:
4f:52:fe:7d:e8:22:3d:9d:41:49:8f:7b:d1:bf:2d:e8:bd:84:
33:3e:98:7f:2a:10:70:4d:9e:c7:f8:8f:8c:6e:92:36:70:5e:
70:7d:1d:15:69:f2:87:82:60:e1:a3:49:b4:40:f6:af:88:94:
4f:02:94:50:d0:b9:6b:01:15:fb:46:52:4d:65:cf:81:02:43:
6c:9e:90:a5:64:89:2f:eb:59:62:72:c9:2a:95:3f:79:fc:e4:
54:40:77:85:16:10:b1:b1:67:05:60:75:64:d3:69:79:d7:27:
a1:58:c9:c7:7c:86:0c:93:c4:22:e2:e6:a9:dc:e9:41:54:3b:
d9:cd:e1:19:6c:74:81:c2:3d:82:88:72:61:e6:bd:71:b3:c8:
73:f2:03:b1:68:19:e9:f0:83:d3:a3:2c:fe:79:3b:7b:d9:a6:
04:63:a9:d7:01:0e:7d:5f:fd:4b:35:71:a1:55:39:f3:6e:4e:
62:b5:fc:68:75:b4:ed:35:76:69:df:ee:63:04:28:49:5b:fa:
c6:5c:e4:79:4c:22:7e:b8:98:99:cb:c6:93:98:24:0e:7a:39:
0e:8c:6d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:21 2026 by rpki-client