Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json)
Hash identifier: RSLPjBH5MQL2HnFPFmwyNmxkxP/UvA17w5pcMVX/l9o=
Subject key identifier: 74:DC:64:45:88:71:9A:1F:28:7C:89:EF:3E:0B:79:70:4B:4F:C0:53
Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424
Certificate serial: 019E1DFE3BDF103344A857688CF436B3B3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
Manifest number: 025C
Signing time: Tue 12 May 2026 21:01:01 +0000
Manifest this update: Tue 12 May 2026 21:01:01 +0000
Manifest next update: Wed 13 May 2026 21:01:01 +0000
Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: oyDAN13zKgpkXX2r4jRurcj+4ab5jO0D5kDEhDPO1k0=)
2: LS1I0LR07OhJxEEUNJqhn1-nNT0.roa (hash: 05VWudDvTZxRagJ/ZMpYgYcO8jy0CMReHlty6IA1+UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:3b:df:10:33:44:a8:57:68:8c:f4:36:b3:b3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424
Validity
Not Before: May 12 21:01:01 2026 GMT
Not After : May 13 21:01:01 2026 GMT
Subject: CN=74dc644588719a1f287c89ef3e0b79704b4fc053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fc:16:c2:db:d3:e1:db:b9:e0:1d:9c:45:d5:
da:ce:e5:b1:76:07:74:6d:f9:46:7f:87:07:58:bb:
0f:0c:99:d0:4c:9e:d8:2f:79:12:be:d8:52:e6:2b:
50:94:86:50:55:d3:f1:52:68:25:e6:09:50:b9:21:
58:67:7d:c3:8c:89:88:48:93:5f:ab:7f:d9:0a:1d:
94:37:9f:f8:af:d6:d0:13:ed:15:84:e5:6a:60:0d:
4d:c7:74:e2:a9:a8:4b:ff:ed:1a:5a:6f:ef:ad:54:
0b:3b:43:e0:5b:f9:6e:63:b4:3e:f8:fd:3b:eb:e4:
36:e5:19:81:15:05:03:2e:da:fe:7b:8b:22:e3:62:
d6:a1:10:a5:6f:ae:0b:8b:e1:60:ba:c4:ac:c3:36:
9b:5a:f7:17:ff:05:29:0f:b0:70:f0:0a:51:8b:32:
d1:ff:99:c0:d0:21:30:f5:43:03:07:60:45:6a:72:
54:82:2b:97:bf:98:13:d4:64:e4:79:c2:2c:d6:27:
c5:59:89:f5:25:a2:59:1c:35:43:a8:81:9a:a2:b9:
d6:0a:ad:4a:ea:d1:83:f0:23:73:b3:94:c0:22:ca:
6f:e2:05:fe:8b:8e:1f:4d:d7:c5:b6:e2:da:b7:c3:
d1:46:e7:47:60:52:83:a5:72:1f:c9:a2:0d:af:ea:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DC:64:45:88:71:9A:1F:28:7C:89:EF:3E:0B:79:70:4B:4F:C0:53
X509v3 Authority Key Identifier:
keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:15:12:77:67:2b:8f:01:81:12:65:bc:53:5f:22:53:33:39:
6f:69:1d:f4:f1:d8:66:a7:23:dc:63:9e:8c:1d:f3:eb:e8:c7:
c2:54:85:74:41:c4:74:86:7b:7d:aa:3a:b6:88:37:69:43:7a:
30:46:55:37:db:7e:78:00:c5:7f:6d:c8:ff:33:d7:5a:e1:bd:
8a:fe:53:80:2f:eb:0c:97:18:b5:7f:8b:72:00:8e:e6:15:4f:
d0:db:33:43:01:71:e2:63:6d:ad:70:d6:e3:a5:fb:cb:c2:b2:
91:7c:94:8c:7c:c0:ad:8d:ed:7b:4a:a5:84:f2:5f:b4:41:2b:
9a:52:67:55:8d:f2:28:c8:35:f0:59:26:ae:25:8d:cc:a7:88:
8f:02:c5:d6:f6:31:62:a9:74:e1:4f:94:38:dc:c2:22:d0:74:
e0:0a:53:78:85:b9:f5:e1:c3:9c:6e:cd:63:f8:36:48:f2:17:
a2:df:60:e1:9a:80:7a:23:ec:39:21:82:9f:f8:fa:6c:49:33:
25:53:32:ce:47:f2:d9:8a:84:b8:47:00:53:39:26:83:3c:c5:
15:51:7b:3e:d6:76:ed:b8:5b:55:1a:5f:f5:e8:11:54:ef:0e:
64:25:61:05:bf:1d:b6:d3:da:2b:7c:49:e3:e1:3e:20:eb:b8:
45:bb:82:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:14 2026 by rpki-client