Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: yeEWEI7twYx0ik5D3J//TFUfMyK11yH+B52p9K9PUEQ=
Subject key identifier: 04:3E:90:04:32:78:C5:EF:14:05:45:7D:AD:F5:C7:61:9E:C2:44:97
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 019E1DC7208BBB4027F283BE5A04CB155DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0D9C
Signing time: Tue 12 May 2026 20:00:49 +0000
Manifest this update: Tue 12 May 2026 20:00:49 +0000
Manifest next update: Wed 13 May 2026 20:00:49 +0000
Files and hashes: 1: 8X-vY96aKKHfj_txGbHwT7KRdWc.roa (hash: 0WIWIIW0b9953A6VR0CU69w8OMoDd9V6tcRbkVExZv4=)
2: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: mnuhQ8ahpks4S/dxNnhzNDX5EPHAthlUhkhiKMiD8GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:20:8b:bb:40:27:f2:83:be:5a:04:cb:15:5d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: May 12 20:00:49 2026 GMT
Not After : May 13 20:00:49 2026 GMT
Subject: CN=043e90043278c5ef1405457dadf5c7619ec24497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:aa:8b:03:18:51:a3:d5:c0:d7:ff:9d:b8:
e3:32:e0:b0:15:32:5b:04:b5:13:1b:f8:94:3a:72:
e8:28:cc:9c:02:a6:cd:03:26:85:fd:d1:9b:00:c3:
09:e8:7c:a2:98:68:42:17:9e:09:c3:53:b7:a2:cc:
ab:6c:e9:78:23:b9:4d:98:a0:ff:28:13:06:0e:d6:
7c:d7:cc:fd:c3:ee:d2:7c:e0:4e:19:5b:db:1d:c4:
59:7f:57:0c:bb:f0:56:58:03:df:9b:f0:e7:d0:9f:
48:c3:1c:9a:c7:a1:53:7b:92:e5:a8:67:19:15:f9:
b3:88:d8:d8:f4:5c:cc:24:47:ea:2d:aa:92:ca:83:
cd:33:54:cc:e3:92:a2:c4:43:da:70:9a:36:58:9d:
84:94:08:8a:37:96:93:be:6d:b5:d1:07:d9:50:1b:
8a:d3:1a:38:44:2a:77:f5:83:db:88:a3:d3:b2:d4:
56:7f:00:7a:8a:f2:c0:5e:99:fd:88:b0:8c:76:e5:
68:fd:77:de:17:9a:6d:0c:39:0f:9a:d7:78:6d:1d:
d6:54:cc:0b:bd:af:5c:44:7b:eb:c4:70:ec:6b:67:
e2:6f:a4:99:bf:79:42:cc:ed:cb:fe:3d:53:de:73:
34:23:0c:09:06:bd:94:5e:3d:da:61:91:4b:c1:d8:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3E:90:04:32:78:C5:EF:14:05:45:7D:AD:F5:C7:61:9E:C2:44:97
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:67:51:47:bf:31:8c:f3:48:cf:1e:51:c4:d2:5c:c8:22:01:
a1:3a:66:3c:39:b6:f6:af:9a:98:e4:d7:aa:2c:f4:96:7b:0f:
31:d6:02:1d:72:4d:6a:f0:ad:6a:6e:40:8c:92:44:19:74:6f:
ce:0d:cd:5e:ad:ae:d3:b1:53:53:de:84:bf:5e:1f:d9:72:97:
01:63:59:45:1c:45:ea:20:03:a3:9d:7a:0f:e8:4b:5a:c2:4c:
0a:98:3f:83:78:61:35:74:21:f0:23:46:86:12:9a:c0:c3:d0:
5d:27:0c:8f:36:4f:97:ca:44:43:fd:31:6e:cd:73:bf:00:87:
4e:56:c0:90:7b:22:d1:0f:d4:d1:11:76:b2:4b:b8:78:09:98:
f1:98:31:bf:32:c8:7c:f8:20:91:39:52:61:a9:5d:7c:91:6b:
10:e7:85:a0:5b:02:5c:f6:f7:34:10:69:8f:88:8b:3f:b5:06:
7e:52:39:f8:ed:69:63:96:ca:4e:ba:bb:04:7f:c4:e5:e9:17:
3e:9c:f0:6c:d9:57:da:a8:24:78:70:a0:4c:17:77:65:0b:fa:
d5:60:ca:52:35:1e:fa:95:b2:9a:2a:c8:7a:3a:72:57:6b:1f:
40:3e:a6:30:78:32:42:76:c7:e0:f3:c5:58:7c:6b:33:50:2b:
9f:b1:67:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:21 2026 by rpki-client