Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
File: 8XUAF9wNk26aoWaTGTffeJKv6fE.mft (raw, json)
Hash identifier: dkYlwgI7NTUHYhvkhBNRIxLzmyGnFjsWLFokQwnLxuk=
Subject key identifier: D5:D6:C0:AC:68:30:EF:C1:7A:4A:E8:34:A4:FC:80:23:10:BF:C8:28
Authority key identifier: F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
Certificate issuer: /CN=f1750017dc0d936e9aa166931937df7892afe9f1
Certificate serial: 019E1D59C86384922C01B313723F7156E4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
Manifest number: 02D3
Signing time: Tue 12 May 2026 18:01:23 +0000
Manifest this update: Tue 12 May 2026 18:01:23 +0000
Manifest next update: Wed 13 May 2026 18:01:23 +0000
Files and hashes: 1: 8XUAF9wNk26aoWaTGTffeJKv6fE.crl (hash: ePBScQPTyS0XsP43JaKpCMj6mdvgajxcQ1kmpT6LLes=)
2: RJmo5W4f9aoT7fFDQ3yD2RKwAac.roa (hash: IZ2vUVo1okHZdVGuQKYV71GbDyxma+mzCV0u8e3RDcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:c8:63:84:92:2c:01:b3:13:72:3f:71:56:e4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1750017dc0d936e9aa166931937df7892afe9f1
Validity
Not Before: May 12 18:01:23 2026 GMT
Not After : May 13 18:01:23 2026 GMT
Subject: CN=d5d6c0ac6830efc17a4ae834a4fc802310bfc828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:e2:4a:ae:89:67:e8:c7:01:fa:30:f8:09:
89:61:d8:7c:c1:42:74:03:a2:af:9a:7f:d8:77:11:
a6:65:6d:c4:58:66:30:87:0d:95:4f:48:bf:87:37:
f7:ec:ed:38:14:22:0f:80:a6:20:7a:b8:c9:b8:4f:
be:19:9d:5d:8b:61:bc:e8:eb:5c:cb:68:cc:d0:ef:
a6:f3:d2:aa:cd:4a:11:2d:fb:81:50:6f:37:2c:dd:
54:54:28:51:9f:d6:4d:35:ae:f6:16:fb:c6:17:1d:
41:c1:8e:fd:5b:6f:24:3a:be:41:fd:11:4a:94:eb:
e7:07:08:8e:2c:bb:55:70:a4:4e:c2:5a:9e:22:1f:
e8:8b:98:6c:98:df:42:69:3a:9f:e2:6b:44:4c:c2:
22:3a:91:62:b5:cb:f9:4c:9f:78:2c:01:62:09:d9:
4b:e5:b7:33:ab:00:f7:95:bc:89:31:c1:03:64:5e:
c3:27:20:f1:6f:6a:86:99:3c:59:f9:86:99:2d:45:
6f:83:d2:2e:3f:e4:cf:1b:32:10:2a:e0:6d:2a:25:
4f:1e:57:0a:e5:11:70:63:79:ff:0e:90:d5:ca:07:
e8:35:40:0c:b7:74:38:ae:29:b5:00:47:1c:cd:fa:
d9:73:5c:4d:ca:b1:9f:a7:99:75:30:a1:98:b8:d1:
ea:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D6:C0:AC:68:30:EF:C1:7A:4A:E8:34:A4:FC:80:23:10:BF:C8:28
X509v3 Authority Key Identifier:
keyid:F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:17:06:95:ca:42:7e:14:93:17:33:a1:ac:b6:88:99:0c:2f:
63:0b:41:b3:5c:5c:8e:0a:5f:24:31:d6:03:4f:e6:f8:65:8e:
98:e1:30:90:e9:8a:bb:12:b4:05:a5:04:37:52:f7:08:2a:8a:
31:8e:c6:af:78:0a:6a:41:d7:d8:be:b1:da:8d:6b:6d:41:32:
38:ee:cc:67:ad:f2:67:5d:50:ee:5e:0c:99:a7:58:dd:c3:b8:
cc:87:7e:5f:2b:a0:eb:c9:7e:5e:ab:41:bf:76:65:5d:36:65:
1c:86:a4:9e:60:f5:e4:d6:3b:6e:70:a3:2a:d4:23:6b:14:94:
df:01:92:c4:a7:a0:50:d1:ce:e4:c6:98:3c:df:90:92:08:40:
1a:25:53:57:4d:d0:d4:5f:fd:50:a1:a6:79:d7:ed:4c:61:f1:
4a:ac:35:d2:f3:74:51:8a:38:77:62:a2:3e:87:c2:92:8f:d0:
1d:50:b3:31:e1:fb:cf:9f:d9:33:03:23:42:03:cf:77:ee:b7:
c0:65:b8:00:21:ad:1b:b6:ee:af:ae:c0:c5:59:25:4e:b0:89:
fd:bc:13:63:4e:9c:fe:4e:36:4c:a0:2d:89:78:c3:af:7d:bd:
ae:cb:76:5b:d6:18:d3:b5:60:f8:0d:15:23:2b:09:f3:c1:d4:
4f:1a:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:15:44 2026 by rpki-client