Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: gkqdvruy/DhRCt3iJYn2Zwo/YWG+rJcMdZIj/I+Fe3Y=
Subject key identifier: 34:7C:BE:6A:47:55:0D:23:C0:6B:58:41:04:B0:EF:28:F0:DA:78:FE
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 019E1DFE87ED364C68A9F223651855224ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 1074
Signing time: Tue 12 May 2026 21:01:20 +0000
Manifest this update: Tue 12 May 2026 21:01:20 +0000
Manifest next update: Wed 13 May 2026 21:01:20 +0000
Files and hashes: 1: 4-1jTpLuCOAg2Vrbi_YFCr92v_4.roa (hash: fO6SjPHBF8aFGKNbO8o4HrubgQPH9aKLn7J3+znKEj4=)
2: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: 7eUQft8ybfPMNRmnSpx5y0le1aCPVLKsR42v5iha8tM=)
3: Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa (hash: ArKoVR1HvT27XmVZlqzha6BxLY/5mnRJvZnwQwU+NF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:87:ed:36:4c:68:a9:f2:23:65:18:55:22:4a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: May 12 21:01:20 2026 GMT
Not After : May 13 21:01:20 2026 GMT
Subject: CN=347cbe6a47550d23c06b584104b0ef28f0da78fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:54:f2:8c:4d:1d:86:b8:53:a1:0a:92:4e:
ec:ea:19:e7:6a:e6:88:28:e8:cd:c9:c7:66:2b:e4:
a6:b4:71:3d:a0:ae:e1:d8:67:a9:1f:0e:ad:57:9f:
21:bb:f5:c6:d1:6d:b4:7a:c9:9e:49:61:cf:1e:c3:
69:eb:1e:17:7e:23:80:69:e6:14:b3:9d:b4:bf:c8:
37:7b:be:05:43:ca:26:98:fe:06:2f:ac:83:48:50:
7a:04:59:0a:5c:c3:e7:9a:aa:7e:6b:af:27:4c:4d:
32:fa:4b:24:8c:22:a6:14:1d:dd:2f:e6:29:60:26:
fe:6c:e6:b2:4c:9f:05:1c:c6:30:90:b9:f5:fa:e6:
c7:4d:f8:8d:31:2e:9b:66:ab:92:a2:1b:69:bf:12:
53:54:3a:e5:79:e6:df:99:32:51:39:5e:78:e0:c3:
d3:e3:60:d4:f4:9a:92:f6:4b:dd:f7:09:7e:b1:d2:
9a:b1:6e:e7:b6:f5:f3:38:f6:d9:9a:01:55:45:f4:
05:d9:9a:a5:65:0d:bb:23:8e:5e:d0:04:3f:ae:15:
58:e7:41:84:c0:39:fb:95:6b:f5:dc:e9:a4:81:01:
60:9f:3b:46:47:28:71:65:02:2a:d5:3a:c2:3b:24:
d4:b8:15:93:fa:dc:3b:1c:8f:5a:31:4e:4a:c1:0d:
21:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7C:BE:6A:47:55:0D:23:C0:6B:58:41:04:B0:EF:28:F0:DA:78:FE
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:be:91:23:48:c0:03:ac:3f:64:f4:7b:2c:71:7b:d9:a7:3c:
58:48:7c:f3:f7:aa:fa:86:de:7a:2c:90:ff:7c:82:90:92:39:
9e:35:74:02:14:e7:09:4e:cc:cb:a4:e7:f1:65:46:a8:9f:a2:
f2:ad:86:de:95:d2:66:c5:09:d3:e0:a5:af:2e:cb:c3:dd:c2:
d0:21:1d:98:07:ea:65:a7:6f:9b:38:67:75:70:7e:ee:3a:7f:
2b:b4:c0:c6:7a:df:cb:0c:0e:3d:cd:09:46:47:50:3d:49:74:
92:c5:53:81:05:90:54:29:60:67:5f:ae:9d:90:22:19:94:c5:
cd:35:91:e7:2d:3c:25:f1:63:c0:fe:82:cc:c5:54:e0:d5:b6:
a8:4a:2a:12:b4:c1:01:96:e4:4f:4b:b7:e3:ae:95:29:1d:de:
39:cc:7b:44:62:a3:89:54:27:61:5d:21:bc:c9:da:ff:52:2f:
8c:37:80:1d:11:9e:1a:1c:18:e3:c5:f9:68:59:b1:80:75:9f:
32:c0:b2:ca:3c:ef:2b:5c:e7:5e:52:8a:09:6b:3e:4d:fc:64:
1d:9d:1e:64:0b:a5:9e:c3:82:c1:71:0b:88:a7:b7:09:a3:1f:
b2:16:0b:eb:5a:f3:68:5a:70:e0:2e:88:e4:05:0a:ef:51:27:
de:4a:85:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:24 2026 by rpki-client