Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File: 8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier: 3pslSp+8dlj2qudIvEOwpSKuGW4ty+DDt8RP270ZRgw=
Subject key identifier: 90:E9:CA:B9:FE:9F:7E:5E:C7:2F:37:3C:8B:4F:86:52:EB:46:69:D1
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer: /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial: 019E1D22EB152DF7C3F330DA4F889B46DC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number: 10AA
Signing time: Tue 12 May 2026 17:01:27 +0000
Manifest this update: Tue 12 May 2026 17:01:27 +0000
Manifest next update: Wed 13 May 2026 17:01:27 +0000
Files and hashes: 1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: iKdcq3NbQytg6VVl+fbiiCoXJE/18LT0eiUiqC//Ar0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:eb:15:2d:f7:c3:f3:30:da:4f:88:9b:46:dc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Validity
Not Before: May 12 17:01:27 2026 GMT
Not After : May 13 17:01:27 2026 GMT
Subject: CN=90e9cab9fe9f7e5ec72f373c8b4f8652eb4669d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:e0:55:37:52:01:9b:44:8d:db:79:da:f6:
5e:a5:f6:14:28:34:a7:18:c5:3d:c9:b4:ba:f6:2e:
28:f9:93:d7:c8:34:05:e6:09:82:d7:6d:19:79:fc:
a2:f0:51:7d:5a:9b:90:76:d6:cc:a0:f5:0e:af:2d:
21:ee:4f:9e:5e:bc:dc:eb:41:51:76:2a:b8:ba:68:
1a:16:8d:bf:32:5a:88:9d:5b:ed:b8:01:ef:2f:bc:
81:c4:d5:25:8f:95:f6:00:a2:a5:cc:f6:01:c9:ba:
1f:9e:ae:07:29:d4:a3:9b:b9:20:7d:ad:0a:bb:71:
b9:3a:4a:af:0d:70:d5:a4:a9:65:4f:32:dd:54:c4:
3b:f0:58:cf:bb:e7:03:81:75:e5:19:8c:b9:1f:00:
46:0b:bf:36:10:40:5e:cd:f5:e2:e6:b1:82:5e:60:
b4:7f:3f:66:d2:c7:59:8a:d9:61:d8:d1:95:10:f2:
14:d5:b9:5d:e1:3b:e4:dc:d6:6e:0d:ec:49:2c:33:
36:2d:70:48:4d:e2:0d:b6:e2:c8:1c:2d:32:59:3d:
16:29:bc:e0:81:89:bf:b6:ed:27:43:7a:7c:bd:3e:
8c:f6:75:d9:ca:64:04:63:85:53:a7:bd:cf:3a:bd:
0d:f4:52:2a:99:25:4c:6b:a1:a3:00:ee:46:7d:2a:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E9:CA:B9:FE:9F:7E:5E:C7:2F:37:3C:8B:4F:86:52:EB:46:69:D1
X509v3 Authority Key Identifier:
keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:dd:75:e2:81:ff:66:dd:ba:c5:86:52:42:a5:e1:d1:e5:78:
70:ba:2e:16:7b:15:f1:5f:e6:a7:28:92:b1:b9:75:27:53:be:
0d:f1:df:f3:5b:4e:bd:4e:d9:a4:77:7a:c1:44:a1:65:a2:a2:
01:17:d9:4a:8f:8f:9f:61:d6:b8:0d:45:cf:4a:92:71:1a:da:
97:3e:69:bb:1a:89:32:93:dd:a0:1e:a0:1c:72:1c:04:c8:d4:
7a:ee:22:18:e3:4e:47:dd:05:56:a2:ac:c8:3d:a7:e8:20:22:
98:9f:24:0d:e2:8e:0c:3e:f5:78:81:b7:00:f6:b1:1a:3b:41:
83:42:00:85:4e:05:ba:04:73:05:3b:24:b1:74:0d:4d:9d:c7:
b3:b1:d1:61:ef:0e:a8:2e:ec:c5:0c:30:73:d0:af:0e:f7:3f:
81:09:65:0d:1a:bd:0a:29:09:6e:37:d3:79:d1:d3:e3:3e:50:
df:fd:0e:99:11:65:9f:a8:48:85:72:be:14:8b:72:27:63:3e:
2a:c4:97:b1:6e:7e:b0:e7:66:13:9a:02:da:45:7f:cf:cf:ee:
77:85:4c:1f:3c:34:1e:7d:8f:28:04:fe:ac:15:45:91:12:92:
28:9f:f0:6d:c2:db:77:be:5f:0f:30:73:10:35:01:32:49:89:
35:fb:31:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:23:24 2026 by rpki-client