Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: dPK44AnG7dousm6p0ErBzoXbtFHQCUXaOImpHKWGSMo=
Subject key identifier: 67:EA:F2:34:BB:F8:E2:11:C2:01:05:64:19:13:55:32:1C:9A:88:C7
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 019E205AAC10C3CD09CBE4A85FC72A458579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 08:01:13 +0000
Manifest this update: Wed 13 May 2026 08:01:13 +0000
Manifest next update: Thu 14 May 2026 08:01:13 +0000
Files and hashes: 1: 6weVCTckmKcufpwMMNkVwHRwP9Q.roa (hash: 0JjU9hmu5yoiP9Qn2/r0jmSFJ9tAqxdSeETfVPuLDfo=)
2: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: +QqyFjSWt3oTpYC+TqIeVHpiy4RkOLS5CgUpUy4o2B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:ac:10:c3:cd:09:cb:e4:a8:5f:c7:2a:45:85:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: May 13 08:01:13 2026 GMT
Not After : May 14 08:01:13 2026 GMT
Subject: CN=67eaf234bbf8e211c2010564191355321c9a88c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:96:b7:b8:f4:e4:3f:cd:4c:91:5d:bb:4d:99:
de:7c:8b:86:fd:08:14:a0:41:db:dd:2f:59:ce:60:
52:f2:ae:ba:cb:25:ac:e4:e2:96:b7:8e:e3:f6:e8:
22:bf:7b:b7:2a:a1:c3:3a:b4:1f:59:3f:42:9a:70:
61:52:1b:b0:fa:5e:49:41:25:aa:82:d6:29:22:30:
69:1d:ed:0b:71:a4:e5:f2:ef:6c:db:44:87:02:03:
2e:3e:0c:36:52:b8:df:5d:3b:5c:4c:ad:81:8d:9c:
c3:70:61:b3:0c:16:63:46:04:8d:f2:b0:fe:1e:ce:
0b:e5:a0:a2:b6:5f:d7:75:38:ff:ba:43:92:03:83:
2c:86:c7:8d:63:b4:15:2b:1b:1d:5a:d1:b1:b6:d9:
5b:10:1b:fe:d6:49:8d:30:bf:05:1a:31:2d:ca:09:
3b:d1:8b:c0:d3:76:f0:d8:35:74:60:aa:74:41:9a:
79:3e:4d:6d:d1:95:ed:a7:63:8c:56:a1:8d:c5:71:
40:ee:b7:e0:59:bf:f9:83:c9:c7:fc:24:ce:1e:d2:
cb:ff:36:e0:76:4f:8a:55:87:b1:54:ea:6e:d5:7e:
22:c5:6b:0f:f1:9d:c7:0b:d4:d6:8b:ba:7f:fa:5d:
45:86:24:ab:fb:f2:1d:42:c4:3d:b2:59:a7:ab:9d:
b7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EA:F2:34:BB:F8:E2:11:C2:01:05:64:19:13:55:32:1C:9A:88:C7
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:17:7d:81:8b:5c:e9:4e:2b:fc:d0:13:1c:eb:f1:0b:9b:b4:
db:f1:14:85:72:b5:7f:5f:44:9a:11:1e:1f:d5:6b:d2:90:5c:
28:ad:1a:be:5b:4c:f7:db:0c:7e:f6:c9:de:78:14:be:ce:1f:
84:de:16:50:77:84:28:3a:9d:df:c4:5b:de:18:95:a8:98:94:
a1:62:44:ab:38:f8:d8:26:66:78:c9:af:12:b0:c0:2c:d1:ea:
df:99:50:a6:9f:ae:6c:56:f7:ca:da:ad:d2:9a:57:0e:04:15:
46:0d:1b:0d:ef:ce:34:f2:c2:18:f4:6f:9e:b8:22:ec:09:a8:
35:48:a0:4a:0f:91:a8:f0:68:bc:0c:6b:e4:d0:ae:cd:cd:32:
80:c0:c5:e6:43:34:ab:67:72:2f:67:e1:1e:63:5e:03:63:c8:
33:ee:5b:62:9a:0b:f3:ea:29:e5:0c:6a:01:4f:58:44:7e:40:
97:28:cf:5b:1a:0c:7f:16:e4:57:9d:e4:60:f0:fa:44:7e:a7:
85:31:05:b8:9d:a6:e8:1d:87:f2:58:eb:a6:2c:4e:04:db:07:
ec:bc:d8:53:08:8f:fa:bb:b5:ff:4e:8b:9d:30:b0:83:6e:81:
bb:21:f2:75:15:57:67:a8:97:09:fb:f3:a7:76:e8:52:86:0f:
8b:68:a7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:22:50 2026 by rpki-client