Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: RIbO2S2aMmNxaZvEHYWD39nfqEa7It6y7SuFrYO2CZU=
Subject key identifier: B8:7A:25:4F:34:19:29:D3:A8:F3:B0:6E:77:0A:18:6E:99:20:9D:68
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 019E1D231E059FDAC02247C69D5057E32A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 17:01:41 +0000
Manifest this update: Tue 12 May 2026 17:01:41 +0000
Manifest next update: Wed 13 May 2026 17:01:41 +0000
Files and hashes: 1: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: 4Pd3niayjauEsXyIdgs4iXMYalTLDyTnJhJmXlpbgwI=)
2: JOJrGMU0qn8ngziJaeo4DZASmf4.roa (hash: axtxAxE6iWUw3UR4k0hi17IxEDv4E101kXVSQiPd/Mc=)
3: ptwMESCTQKh1eUKxKNaUBcvAXoc.roa (hash: NHN88OkqeyC7hTU3lW2dshn//WH3lw/b1C5FyuT4/rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:1e:05:9f:da:c0:22:47:c6:9d:50:57:e3:2a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: May 12 17:01:41 2026 GMT
Not After : May 13 17:01:41 2026 GMT
Subject: CN=b87a254f341929d3a8f3b06e770a186e99209d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:a6:4f:45:2c:ca:5f:08:e9:a1:5b:59:3b:
1b:01:ba:0d:54:32:f4:d8:ad:5a:a0:22:55:a5:18:
71:3c:fd:b6:03:db:d4:3e:15:a0:a7:52:e8:ce:b3:
21:ce:bc:5c:b8:61:77:28:eb:24:97:b6:6f:46:18:
68:48:13:13:a9:61:d4:47:f3:08:79:21:a2:23:85:
c1:c6:44:a5:0a:de:d9:98:6f:f1:ba:ad:b0:74:23:
cc:2e:12:7a:05:ea:92:37:0c:2c:89:33:5a:30:1d:
b0:81:db:6c:98:c6:9f:f6:c6:a1:19:74:bc:c4:ba:
29:30:71:b5:4e:50:f5:03:c0:b6:05:6a:52:be:60:
b4:af:80:04:75:30:3d:ba:be:d7:88:26:61:7e:35:
cd:6f:a0:df:cc:bd:33:73:0e:8b:6c:a2:94:3a:86:
45:34:42:c2:9b:56:44:86:2e:e8:80:2a:ad:6f:e6:
5a:1c:0a:ff:26:44:50:aa:af:de:43:6a:42:bc:8b:
c2:78:bc:f5:60:c8:5d:ae:4c:22:f5:a8:f9:f6:d1:
6a:e3:0e:64:55:05:81:ca:2f:d8:b9:3f:2b:ec:2d:
68:80:69:2b:b0:51:9a:93:60:2b:61:c6:a4:64:2d:
19:7c:f6:f8:1c:c5:92:41:97:da:f4:12:c5:dd:a9:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7A:25:4F:34:19:29:D3:A8:F3:B0:6E:77:0A:18:6E:99:20:9D:68
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f6:ef:fd:d0:b7:ad:8b:27:1d:fc:e6:75:6a:d1:6b:de:b5:
60:29:47:dd:0c:e3:d2:78:ae:6e:07:ed:3f:d9:96:9f:41:2e:
1e:a5:6d:c0:8d:e6:95:bd:27:6d:f7:53:86:65:fe:26:72:fe:
ce:c4:88:bb:c4:7d:58:f5:0f:c9:07:cb:ef:cd:c2:6c:db:d3:
bb:be:d1:34:46:fa:58:91:fe:19:0a:6f:1c:7d:ed:f1:88:4e:
98:66:85:54:ad:e5:0a:7d:a8:6d:be:25:9c:9f:50:e3:4f:3b:
31:f0:23:3d:a0:4c:5d:d9:42:3d:1b:2e:09:90:63:7c:bf:1b:
8d:7f:2a:85:8c:d0:a3:0e:65:a4:71:20:4f:3a:56:42:62:5b:
7e:02:6f:ea:1b:52:5b:fe:0c:d0:36:a1:29:8d:b3:0a:38:e2:
8b:8f:e0:db:3a:23:bb:b8:6d:09:a6:c9:1d:1c:e9:ae:a8:f9:
b9:d1:18:ee:eb:c1:be:b0:d7:84:35:11:9e:0b:96:86:90:50:
5c:86:4a:54:36:f4:0b:d2:bb:86:64:3e:6f:06:35:42:4c:38:
a1:59:01:5e:8d:bf:ab:14:41:e4:37:7b:ab:ed:34:b3:e4:29:
5e:a5:b5:4a:1c:ae:bc:05:bb:b5:c5:9d:9d:64:f3:fb:83:41:
2f:88:e5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:59 2026 by rpki-client