Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
File: 8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json)
Hash identifier: c3LbDywr6L+k/3SuEY6P0HTFpHhfLoxTQXf8sTj/ggg=
Subject key identifier: 44:96:F1:C2:3F:46:8E:18:18:56:C3:DC:DA:E8:A7:0A:CE:F1:5C:27
Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Certificate serial: 019E1E6C2FBC744E43BB239F73C0D0D69A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
Manifest number: 090C
Signing time: Tue 12 May 2026 23:01:06 +0000
Manifest this update: Tue 12 May 2026 23:01:06 +0000
Manifest next update: Wed 13 May 2026 23:01:06 +0000
Files and hashes: 1: 2GTvWzpclUq6kJYm-wsP_GwJPLY.roa (hash: fYmZ9Cu3/ER+umCuIKfV6emnqQD55csuls9mkFBGOE4=)
2: 5oF3V0rjeL1pJ5lHiFSxxXlRiqk.roa (hash: MY4vTmIm6iMkCfXRGy7HULVmNJlJMi1dSNNh0tuV34c=)
3: 69uCRF0gJPayfWhDtOPkNyE4RrA.roa (hash: zk+4O7C/kwm21uLUwHJKUDfYHP0XyuVnc9Gjvk0nfWs=)
4: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: 5hS6xu+SASxACxHEiE9AYP4vZPjG2AiPfKQmfNFujVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:2f:bc:74:4e:43:bb:23:9f:73:c0:d0:d6:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b
Validity
Not Before: May 12 23:01:06 2026 GMT
Not After : May 13 23:01:06 2026 GMT
Subject: CN=4496f1c23f468e181856c3dcdae8a70acef15c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:ad:c1:90:52:12:04:0c:a9:a6:2d:d6:26:
2c:f3:6d:4d:2f:20:93:dc:3a:5d:5e:2e:3c:4a:dd:
24:f4:9b:67:4c:0e:0f:bc:d7:12:3b:f4:3d:76:87:
8a:de:b8:79:1d:6e:aa:42:fc:0b:23:08:22:87:5a:
1e:c4:fc:1f:bc:14:1a:b4:a0:82:ea:16:3e:d8:86:
80:23:d2:54:45:82:96:f2:b7:34:34:e3:de:05:ab:
01:46:dd:40:c0:8e:0a:96:f9:0f:d3:a5:90:88:f8:
22:e6:1b:09:7d:ce:82:85:c3:af:84:a1:df:9f:c1:
90:7f:a4:3e:02:11:81:55:91:59:a0:b7:30:9e:84:
26:d7:54:19:cc:05:66:d1:e4:a7:42:ef:b8:6f:2f:
d1:5a:5f:59:53:33:5b:5c:8d:2f:f3:25:d2:1d:f5:
d3:92:47:1c:f1:42:e1:cf:39:cf:6b:ff:f7:56:c9:
7b:58:a5:ec:0d:37:40:0f:e9:99:5e:de:58:c3:75:
78:5a:57:32:de:1e:0f:a3:3d:ba:c3:a6:ec:0d:0c:
00:e5:d8:df:2e:6d:42:cd:a9:23:3f:f2:f2:ba:b1:
49:42:48:47:09:c2:4c:76:eb:d2:9b:06:6c:f9:9c:
65:10:3d:0c:16:82:78:f0:a6:65:7a:a4:23:c5:08:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:96:F1:C2:3F:46:8E:18:18:56:C3:DC:DA:E8:A7:0A:CE:F1:5C:27
X509v3 Authority Key Identifier:
keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fc:48:07:49:a9:9b:ae:ce:72:ae:2a:8c:5e:d7:e7:46:36:
f0:68:91:12:83:33:bf:b3:a1:34:33:eb:29:f0:aa:99:64:df:
d8:50:0c:48:83:2a:41:9e:13:c1:c5:0b:19:ca:4c:47:bf:2d:
d5:60:6f:18:d1:7e:ad:62:45:dd:0a:b5:ee:30:75:c7:97:48:
3b:4b:ef:b6:eb:8b:7c:3c:2e:4c:72:82:02:38:f2:80:8a:14:
81:b8:cc:ab:34:87:c8:6b:ce:2a:1a:5e:06:55:ec:f8:c7:38:
80:a2:ce:54:17:a2:5d:1c:4d:1f:2d:a0:f9:2b:1d:c6:42:b7:
85:97:ab:d3:db:b4:1f:5e:f4:e3:8d:5a:2f:84:64:f0:79:c8:
6f:a5:0f:40:7e:48:af:6f:42:74:c6:0d:e4:fc:23:e6:29:9d:
72:c5:d8:be:4a:9e:b8:98:7f:0e:c5:c8:f3:6a:af:b6:16:31:
e7:b9:0c:53:9e:ad:a8:09:52:54:7d:cd:c2:66:cb:49:35:93:
47:f7:a1:17:6f:25:6a:e1:9f:29:5d:a3:0e:0c:0c:53:cb:cf:
42:86:79:ca:9a:bf:df:c8:ac:d0:93:d6:1e:4a:b4:01:0d:2b:
d9:98:63:86:42:de:c3:e8:0d:a7:9e:87:a5:e3:28:de:c5:d7:
57:d3:4b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:49 2026 by rpki-client