Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File: 8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier: l+wkkDReN8RMmq62xvcCICn9kr4KiedQpHIbjRTuv7o=
Subject key identifier: C3:3A:B1:26:27:BF:1F:B9:53:77:74:BF:11:24:F1:AA:10:5D:0A:76
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial: 019E1D902B3BA36B8021ECE7BA75A3CBF493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 19:00:47 +0000
Manifest this update: Tue 12 May 2026 19:00:47 +0000
Manifest next update: Wed 13 May 2026 19:00:47 +0000
Files and hashes: 1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: jIWw2nhm8lAvr/3rQzLkpVAKLCzcDwNMTaHRe0K+xNY=)
2: VVUHU9wzPSipaX2HFFPnxlMDk40.roa (hash: LpkGFoTMr4l6RIiQwmwapd7pQ8v6qmtf4dTq+3Df5AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:2b:3b:a3:6b:80:21:ec:e7:ba:75:a3:cb:f4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Validity
Not Before: May 12 19:00:47 2026 GMT
Not After : May 13 19:00:47 2026 GMT
Subject: CN=c33ab12627bf1fb9537774bf1124f1aa105d0a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:96:c2:76:1b:f2:e6:59:65:25:ef:ac:91:
49:85:55:a7:df:41:1e:2a:6e:6e:8d:97:bd:bf:84:
41:e3:1a:eb:10:d8:38:26:c6:a1:4d:63:fa:8b:57:
20:e9:5b:1d:b2:d9:97:99:e3:72:d8:42:d9:c2:b1:
1f:91:87:ae:5f:d3:89:5d:dd:a6:72:9b:88:15:2d:
b1:d7:82:39:24:f0:5e:26:3c:9f:87:6f:b5:38:80:
e7:31:be:ff:fb:7f:a2:4d:43:52:4c:65:fc:fb:63:
ce:0b:68:91:22:b7:ba:b0:41:a3:a3:9d:da:51:7a:
c3:dc:50:5c:05:4b:75:34:8f:40:a6:50:15:69:e3:
1b:cb:8b:20:bb:f8:f6:82:0a:8a:b4:03:6a:f9:bb:
b8:3a:a5:41:d6:a8:79:5e:03:f0:09:69:8a:c7:18:
90:64:b7:c8:a7:38:69:dd:e2:49:f0:52:77:3b:d9:
05:a8:f1:7f:ce:f7:9c:da:e6:c9:6e:be:02:ea:dd:
fb:b7:6e:ad:d0:3b:5a:46:fc:43:4b:27:78:4d:98:
47:98:d7:3f:a4:b3:77:9d:a5:fc:0a:f7:99:e4:a3:
a5:7b:f4:a4:ad:5d:5f:70:bb:44:f7:ae:64:8a:a8:
d3:a5:7e:c8:27:1b:4b:7f:e0:2c:35:86:0f:ab:33:
bf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3A:B1:26:27:BF:1F:B9:53:77:74:BF:11:24:F1:AA:10:5D:0A:76
X509v3 Authority Key Identifier:
keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:00:1d:a2:26:53:cf:2c:ab:38:8d:62:3c:48:e3:87:88:17:
2c:ee:b4:ef:57:cc:99:20:fd:8a:3d:fd:35:a6:1f:36:25:36:
d1:64:7e:e8:80:1c:24:33:c8:31:ef:ea:12:f6:1d:9b:c8:50:
99:d6:18:9c:7d:7b:02:7c:3a:fe:54:55:c7:a0:28:f9:8e:4c:
40:7a:32:e8:03:4b:26:8c:c0:1f:89:a4:dd:86:35:e0:6c:93:
a1:a7:2f:a1:58:86:84:7d:a4:5f:4e:00:6d:f8:62:ca:27:00:
6d:c9:d2:57:c6:6e:67:95:61:ea:b7:3b:c7:5a:0c:96:6e:9b:
12:2c:6e:81:49:81:cd:95:7e:e5:b5:d5:12:b0:ff:a6:42:16:
8b:51:70:d3:af:22:a8:1a:b3:de:6a:f5:80:93:f0:37:c9:86:
49:aa:b2:b9:0e:6a:21:33:39:57:d5:1d:a5:fe:79:1d:c1:dd:
12:af:d1:28:5a:35:c8:16:f6:7e:dd:7c:db:c0:fb:1f:2b:52:
ca:fc:5f:91:a8:e0:ca:9b:6e:56:27:53:a5:3a:f6:d2:eb:59:
0c:4f:4b:67:9c:08:3c:10:fd:b8:1e:1c:78:90:58:4f:a8:f7:
e4:55:d3:0c:7d:49:95:06:44:79:c4:64:ac:c2:ef:e6:ab:2b:
6f:14:5a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:06 2026 by rpki-client