Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: BpqCqcZ4Zb+aHgrJGZP9I3zcWaQqbIgCZkXYTxcV8s4=
Subject key identifier: 8E:2A:23:50:83:4C:E2:8A:9B:91:0A:49:77:E0:05:A1:E7:1F:AC:A2
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 019E1D2292BB2FD96556A1A50F5B8CE57B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 157A
Signing time: Tue 12 May 2026 17:01:05 +0000
Manifest this update: Tue 12 May 2026 17:01:05 +0000
Manifest next update: Wed 13 May 2026 17:01:05 +0000
Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: Ob3XjccsHUT1vZ64dw0xIMR9gd/bS8+A1yBwwM5jGTI=)
2: sizGPo8KqP7LWpt91yMVuV_G2qY.roa (hash: LlMndqzEsit0QQGqlcQ6a+BkfwsI2hJIMaOg8c0+sWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:92:bb:2f:d9:65:56:a1:a5:0f:5b:8c:e5:7b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: May 12 17:01:05 2026 GMT
Not After : May 13 17:01:05 2026 GMT
Subject: CN=8e2a2350834ce28a9b910a4977e005a1e71faca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:19:77:a4:74:14:6f:6c:18:e2:64:79:27:
4c:73:9d:c1:46:7a:f1:e0:73:d5:05:0e:31:bb:90:
61:6b:00:31:98:d5:72:32:a6:f1:ed:d8:cb:f3:03:
f2:a5:f6:0e:e0:8c:8c:c9:f0:8c:53:c2:9c:14:e7:
d8:ae:f0:10:de:ee:e4:cf:cd:cc:06:7a:26:40:b9:
66:b5:92:95:23:91:d6:f2:16:0d:b0:e7:31:74:97:
56:6b:e1:df:b7:2d:17:87:30:2c:c3:9b:0d:59:a3:
db:3b:c6:0f:24:ad:50:9e:35:cc:73:1c:d0:b2:1b:
77:64:9e:cf:75:2e:47:47:93:65:df:f5:b0:32:6b:
9d:20:af:ad:47:e5:72:b7:dd:5e:c0:a5:d5:a4:64:
6f:e0:30:69:63:91:61:39:70:96:e8:17:00:ee:00:
b4:70:6e:06:c9:65:f5:e6:94:f7:a5:08:7a:dc:11:
1b:f8:eb:b4:93:25:e1:da:cc:f4:1b:c3:f6:a2:86:
d3:36:9c:a8:08:8e:96:c3:74:4c:f3:cc:a5:94:81:
f4:04:0f:ac:8d:48:06:f9:a8:d3:56:9b:08:df:4c:
9d:b4:fd:12:2e:bc:d4:6f:ed:5a:21:05:f6:0c:c3:
6c:c4:af:9f:b1:51:ea:2c:a3:9a:d5:c5:bd:ba:7a:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2A:23:50:83:4C:E2:8A:9B:91:0A:49:77:E0:05:A1:E7:1F:AC:A2
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:81:f6:f7:18:10:b0:16:02:bc:bd:29:32:87:83:1f:2b:58:
26:82:34:df:93:a7:ec:8a:48:4f:ef:db:c6:59:b6:df:e5:41:
9a:65:33:ff:67:4d:46:80:09:b9:0f:c2:11:82:73:72:ac:8f:
bc:bc:1f:6a:d0:da:32:3b:50:86:c9:cc:f3:30:7e:a9:16:03:
50:85:49:4b:e4:e3:b6:db:fd:85:17:f1:b9:b1:0d:60:51:07:
b1:d3:3e:c1:12:d1:6e:96:e5:eb:2c:ba:f6:f7:3f:fd:49:c8:
19:15:29:f4:9d:70:69:e9:fa:1c:e1:6f:28:80:73:ae:5e:36:
51:82:f6:3f:da:a9:75:fd:fe:04:57:05:4c:56:8e:0f:b3:1a:
8f:75:86:c3:48:1e:13:ea:1e:48:fe:25:c1:1f:ad:f3:98:c4:
2e:3e:c3:b6:5d:5d:5d:24:f2:57:ce:54:46:be:b5:14:e9:56:
68:47:4a:be:21:ff:90:1b:c5:33:2c:1f:22:ff:58:fe:e0:7f:
8f:ef:c5:7e:e9:fa:f0:e2:fb:6a:80:4f:78:ab:aa:29:d3:e4:
bc:d0:9a:ef:9d:04:cf:2d:d2:9e:70:af:1e:8b:ab:2a:b3:dc:
d3:d3:20:63:ed:cb:b6:f1:b5:20:7a:6c:4f:53:a9:01:d2:be:
3c:69:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:44 2026 by rpki-client