Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: Ww9iOWsYCBK4VMOgMt4/nvWassYvSRU381VPSZA9JKg=
Subject key identifier: 44:74:ED:13:20:CE:AA:1F:79:2F:24:85:F0:4D:B1:18:14:47:4A:00
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 019E1CB522FD60B8792C27832C2D151602D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 15:01:33 +0000
Manifest this update: Tue 12 May 2026 15:01:33 +0000
Manifest next update: Wed 13 May 2026 15:01:33 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: 19MdxQeU/P3XDM81BqUfL5NthdzSUz4uad1LW0wtqYs=)
2: _igUKCILIjVQGGkM5QULk2U3nBo.roa (hash: 20wqHq8/cCP5c8/7zi0IPefhfTG7SQ/Exh3yYB/ZfYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:22:fd:60:b8:79:2c:27:83:2c:2d:15:16:02:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: May 12 15:01:33 2026 GMT
Not After : May 13 15:01:33 2026 GMT
Subject: CN=4474ed1320ceaa1f792f2485f04db11814474a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:19:f3:79:c6:bc:3c:26:c1:33:d4:72:c7:
48:9e:42:7b:0f:e6:91:7a:8b:cc:16:21:bb:e5:0f:
cf:ce:9a:3b:ec:4c:b6:30:ad:1d:22:5f:80:5a:be:
8a:49:9c:81:1f:35:e6:c4:ab:15:3e:98:0a:87:c3:
38:48:4a:0a:4c:bc:21:b6:25:95:09:dd:55:ce:33:
44:f5:59:e8:c1:b8:82:79:72:92:de:c5:fe:fd:aa:
de:0f:e8:d7:72:ca:47:6a:23:17:c5:1e:78:57:40:
2a:ef:53:79:c9:96:eb:b0:d1:c5:ef:93:1a:2a:6b:
ae:21:72:aa:27:42:bc:a8:76:d6:ac:1f:ea:c1:71:
ed:dd:83:ae:f0:18:3e:ce:6c:a8:7e:32:7d:1c:7e:
e4:4f:26:13:cc:9f:b0:02:d1:95:3e:34:41:8e:30:
44:09:c2:88:3e:fd:b1:7d:92:c0:9f:e4:9a:df:ec:
44:96:84:2e:b1:ae:12:09:6e:6a:97:52:b2:a7:e5:
61:6f:80:0a:2c:0d:a8:fd:82:c8:ea:9a:48:e3:a4:
2d:36:0d:17:b1:dd:1a:e0:25:74:f8:06:9f:97:0c:
6a:a5:16:26:81:34:61:a3:bd:e8:bd:1e:ba:98:13:
98:cf:a7:96:d7:66:96:2f:5b:13:32:bb:51:5c:f1:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:74:ED:13:20:CE:AA:1F:79:2F:24:85:F0:4D:B1:18:14:47:4A:00
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a7:e5:e5:30:2a:8b:8e:ef:7a:a9:8f:cd:4b:ac:b0:a7:9e:
67:83:59:98:fb:31:a4:35:bf:9a:18:d0:53:9f:c5:fa:fb:87:
c4:1b:ca:2a:f2:97:db:d2:08:ae:b0:6f:21:32:62:54:24:1c:
ea:9e:a8:37:fd:18:f2:13:2b:3f:42:d9:28:a8:19:7e:c4:65:
04:05:59:11:3f:5e:fd:1a:d3:9d:e3:8e:0b:16:b2:a2:41:48:
77:20:4d:34:67:e7:b2:98:16:f6:19:45:6c:68:ba:e5:30:f8:
43:09:31:8d:85:63:78:8f:cb:ea:d6:99:33:ce:81:55:bc:e6:
a8:52:35:8d:eb:ac:5e:6a:08:ae:f2:96:47:8f:05:5d:4e:ed:
11:cf:2e:e8:19:59:90:b0:fb:2c:f6:3d:55:6e:77:75:80:82:
4b:3e:a3:86:1f:c1:41:f4:5c:e2:03:55:55:3f:00:ad:d1:f8:
91:d4:2b:a8:ce:d7:4c:42:88:57:68:40:eb:9d:10:d4:33:d8:
44:7c:e0:13:7c:dd:c8:9e:51:6c:32:09:70:ac:29:d1:ab:e6:
3a:c1:a1:51:e7:b9:a7:b9:d5:d7:6c:fa:38:c5:01:f3:28:09:
74:e8:63:42:15:54:9b:d3:ce:a8:d6:76:27:f4:d1:4a:61:81:
dc:e8:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:25 2026 by rpki-client