Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: d99T5otw5RJNMm2Oqk4f4HYRkErLGAS7fL7G4fODt5g=
Subject key identifier: A4:BD:DC:5E:65:33:25:70:79:03:59:94:B0:F6:D8:FD:AB:17:BB:1C
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 019E1D9088A051C9DBB7E5FEF1CBA76B4120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 12CB
Signing time: Tue 12 May 2026 19:01:11 +0000
Manifest this update: Tue 12 May 2026 19:01:11 +0000
Manifest next update: Wed 13 May 2026 19:01:11 +0000
Files and hashes: 1: 2hKU1NYjNBDhpco5HEAK3um-kbE.roa (hash: YhjeByYxX6wVLssUtZI4v3Qulxa9a1zwl57K6O3z8yo=)
2: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: NAAlT5u0zsvAEw16Yyy7UkILSjwP9qfjkXaV1JldDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:88:a0:51:c9:db:b7:e5:fe:f1:cb:a7:6b:41:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: May 12 19:01:11 2026 GMT
Not After : May 13 19:01:11 2026 GMT
Subject: CN=a4bddc5e6533257079035994b0f6d8fdab17bb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:dd:48:ca:30:eb:15:43:ac:3b:c8:da:a8:
cd:35:13:74:15:e2:2d:31:6d:49:17:7e:e1:e2:b9:
33:c0:d8:41:1f:a9:b6:70:96:92:aa:69:ff:17:c5:
61:af:22:be:0f:10:fe:d8:31:0a:da:f6:55:8b:ec:
94:b7:20:6d:4e:30:23:3c:f8:ad:48:a0:dc:b8:df:
c7:f9:08:98:1f:6a:a4:c8:19:fd:69:03:c2:99:2d:
04:fa:bf:10:ad:b3:84:d1:a9:3b:46:1a:75:f4:21:
b3:13:12:0f:37:3b:9a:2f:1d:3e:6c:6f:e0:ce:3a:
41:6a:5f:6c:10:09:6b:6f:0c:fb:cd:cd:d4:77:61:
3c:1d:7e:ca:40:1e:38:bb:02:25:e2:ae:f4:97:1f:
02:4a:22:a8:e4:9e:72:25:1c:2e:15:8a:8f:85:9a:
ad:d3:b0:c1:93:a5:d7:24:59:5d:77:6a:d3:9a:3d:
18:45:d7:ac:fe:85:ea:97:c9:04:62:6c:65:ca:25:
80:1d:9e:d3:61:2a:20:8e:64:31:4d:91:12:b5:a2:
f7:bc:46:3c:e2:f7:8e:57:4f:b0:24:fd:ac:43:b7:
1b:a5:c9:54:2a:39:66:f8:f7:ca:7b:43:0d:cc:d9:
c0:03:be:4e:1b:9d:7e:12:07:91:e2:50:39:19:bb:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BD:DC:5E:65:33:25:70:79:03:59:94:B0:F6:D8:FD:AB:17:BB:1C
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2b:8f:a3:4c:5b:b6:16:ca:dc:22:80:63:4d:2f:d7:46:81:
c4:da:bd:3d:3d:d7:70:7a:2b:40:18:fd:db:9c:b1:98:8f:a2:
cc:0e:07:63:8c:88:a1:08:c0:3f:29:75:0a:c2:23:8e:65:4d:
9e:9b:b8:da:66:67:76:29:42:b7:53:75:04:c1:a2:54:60:96:
04:b5:bf:be:fb:9d:91:2b:49:86:77:ac:01:f6:49:c8:2f:1d:
b9:47:74:04:97:93:cc:d1:5f:dd:3f:ea:5b:53:b4:d8:9d:57:
06:20:bd:f1:1a:27:ca:76:76:a6:7b:b2:6f:94:25:40:29:51:
5d:af:4a:32:54:44:5b:47:0d:11:42:e4:ca:47:0d:33:87:76:
5c:d3:67:00:d2:3f:01:25:d9:34:31:29:05:41:f6:2f:60:a8:
34:eb:18:39:d7:eb:70:5f:eb:e9:1f:0f:f2:71:45:3c:4a:5f:
ed:24:01:d6:2e:61:3d:a2:60:e9:4f:21:f7:cb:60:77:cc:e9:
70:35:5c:0f:77:ab:ef:37:7e:ba:70:fa:22:67:70:59:ee:c0:
ad:31:4f:cc:ee:6b:29:37:63:4c:b7:7c:90:14:9b:fe:0f:f8:
f5:21:4d:a8:1b:9d:67:da:96:5e:da:95:49:39:77:4d:45:ce:
22:ec:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:23 2026 by rpki-client