Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier: 9A8QUfshsdWZP0ilyFY6o4Nz0xhtrIVUG5jFZADk6ZY=
Subject key identifier: 6F:2D:5F:2D:DB:5F:20:ED:45:43:23:64:58:B1:07:CD:BE:30:B1:E8
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 019E1D90F84BB1BFA15870D141FB9E883152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number: 141B
Signing time: Tue 12 May 2026 19:01:40 +0000
Manifest this update: Tue 12 May 2026 19:01:40 +0000
Manifest next update: Wed 13 May 2026 19:01:40 +0000
Files and hashes: 1: 4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa (hash: mR/ntepXIb3AfkywKQIADTaonFHTRbi9R2FQyBq3dKQ=)
2: 6PhblOAO9xa7zmIjxvlxnMtK7uQ.roa (hash: NWDITDoerQYCt5AOvDev1r+3TmGT8RmUVJIwjMd0YRE=)
3: FtNNeWImNsRtEKSUkKACM6lSmvc.roa (hash: 1b2HDz6Lo28/yROcDiHE0/pvPJHPVJCUsiCcT/vyD5E=)
4: H_IwdjQek-TxkIwNQc7QdhJFGTY.roa (hash: jds0yEe3zRWI3cu0lRDYUFLph76il4rNQy+a1D0VpZk=)
5: LiIvmL2jPb5CXm2fcW48pwl6IHs.roa (hash: nIYaySFJM8B7djJy1Ih3Y/KEycQQlbGH8uUci8K6W9k=)
6: fjWmsnTuw0Jy6MrhqYJr2902xYw.roa (hash: EbbXPkLE6w+CuqoWFnM8NOi9yq48EFyTEgcSWpqKxTw=)
7: rTQMpwKCtdAUeKgHOzQABtMHsGI.roa (hash: NFKvVLShqUI7IOwsmc2G6/b+0920aDWMbWSkjC2hmss=)
8: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: CdFMWtiVa4rM2LagciildWY5ZZzlOWzOH0w/8VC3HXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:f8:4b:b1:bf:a1:58:70:d1:41:fb:9e:88:31:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: May 12 19:01:40 2026 GMT
Not After : May 13 19:01:40 2026 GMT
Subject: CN=6f2d5f2ddb5f20ed4543236458b107cdbe30b1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fa:20:2b:a9:37:fd:02:62:90:b0:47:7f:51:
14:29:3f:2a:75:8b:4c:c1:26:7e:40:3e:9f:d9:9b:
ff:cc:97:c3:ca:25:cb:66:44:14:d4:76:02:17:e3:
19:ca:c3:ba:44:d6:47:5f:b5:0b:31:22:d7:6e:5b:
e2:b5:60:67:89:75:ca:bb:37:95:ea:13:e1:e1:e7:
61:97:31:08:44:40:5b:aa:cd:0f:8c:f9:35:7f:55:
44:8a:22:b5:1d:32:ff:7f:80:47:ca:63:e9:c7:4c:
cf:7b:d1:e1:bb:79:01:d9:40:f2:97:6b:d4:a4:ff:
5a:70:92:ba:75:be:8b:9a:cd:81:f4:5c:1d:fd:8c:
82:99:4e:63:18:ed:36:b5:ca:98:ad:e6:69:6d:f5:
cf:a6:78:9b:a8:fd:76:84:a7:28:9b:d1:66:fe:bd:
fc:7c:1d:22:ca:0a:ff:d9:ef:ee:53:71:26:1c:ec:
55:c1:67:89:42:0b:66:37:35:f5:fc:11:a9:22:8e:
f0:46:c7:df:f5:0f:8f:74:d9:45:b6:22:a7:3f:56:
df:ea:42:88:d3:1b:9d:49:e3:19:9d:44:74:c5:03:
16:cb:9f:8f:82:75:cf:93:ab:cb:46:51:0f:bb:a4:
4d:c8:f5:98:dd:4a:20:b8:01:bd:c3:46:cc:e0:e8:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2D:5F:2D:DB:5F:20:ED:45:43:23:64:58:B1:07:CD:BE:30:B1:E8
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:3f:5f:83:da:31:fa:88:8d:28:6c:12:aa:87:03:80:4b:ac:
26:b7:20:a7:bf:f4:86:1c:03:0c:47:df:81:b7:e0:15:46:15:
17:7b:73:b8:e9:c2:44:b7:75:bf:43:26:df:dd:25:0a:27:11:
2c:26:7f:23:19:7b:68:dd:0a:15:10:a2:61:8f:74:2d:9b:ac:
1e:0b:d1:04:9b:33:0e:ab:06:51:a4:6f:73:02:c2:d7:0e:67:
03:20:e1:38:a8:18:7f:9a:76:2d:56:28:84:07:23:86:f5:f1:
6c:37:87:e7:78:88:c4:cd:ae:cf:38:ed:e9:b4:6a:f4:3d:92:
de:91:35:28:18:ee:9a:bf:5e:fa:6b:ef:15:57:9e:43:1c:e4:
e8:25:7f:8e:62:bc:a2:b8:41:31:1b:41:78:31:2a:59:8f:50:
84:e6:ac:50:0c:22:2c:94:a9:81:24:9d:b7:8b:2d:c0:ee:f3:
da:9b:80:07:a5:c9:1b:89:96:99:c5:c7:fc:fa:44:9e:a9:bb:
1d:d5:83:53:4b:48:de:9d:b5:6c:26:a1:2c:42:49:fe:74:6f:
0e:28:2b:f5:f6:3f:1f:be:0d:c8:d1:c0:97:fd:31:44:af:5b:
95:88:49:7d:0f:f5:98:5a:14:6e:f7:00:91:a6:3f:23:ed:4a:
28:b1:27:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:48:13 2026 by rpki-client