Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: g5alZSDUlqGXgcb6tVRqpPrQb9ICvJNS2XltmecCL8w=
Subject key identifier: 44:6F:00:E5:8A:11:50:7D:93:CF:0D:76:D3:58:5C:DD:9E:D0:E0:00
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 019E1D59648545BA8CC72F030D15C54A5F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 11FB
Signing time: Tue 12 May 2026 18:00:58 +0000
Manifest this update: Tue 12 May 2026 18:00:58 +0000
Manifest next update: Wed 13 May 2026 18:00:58 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: RVFtngzbannIFoR3skWI6ClxYHcVg85rHScIs4pbm8k=)
2: VK5J5QXmsEfKr-yeuBSA7pgMRS0.roa (hash: QEOQEZoGmfNdE7eYFQFsPYIivVEyHZdR3wVt3CbFPeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:64:85:45:ba:8c:c7:2f:03:0d:15:c5:4a:5f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: May 12 18:00:58 2026 GMT
Not After : May 13 18:00:58 2026 GMT
Subject: CN=446f00e58a11507d93cf0d76d3585cdd9ed0e000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:2d:f0:a5:c2:f2:cd:ef:32:7f:9a:53:80:
53:f0:e8:0e:d8:3f:c6:97:89:b7:c3:be:70:76:ba:
ad:48:be:1a:4a:c5:09:43:47:23:48:35:08:79:19:
3b:80:9b:e7:05:57:5c:38:d7:0b:32:4e:22:ca:6b:
ca:51:56:cb:1c:69:42:f7:3e:f5:95:15:17:ea:58:
49:95:cd:58:06:66:ec:91:28:19:13:8b:17:47:ae:
d7:c8:c3:61:2d:3f:c6:74:92:94:21:25:5e:b3:7f:
8e:7d:7a:f7:0e:db:c3:10:d7:34:04:9d:96:b5:d5:
85:b5:72:a7:7c:e5:07:6a:d2:1d:d0:9f:cf:10:63:
05:98:0d:cd:e5:96:39:5e:34:a6:cc:97:a2:34:ae:
92:2c:f4:5d:68:ed:38:49:71:38:17:26:2b:06:60:
de:c4:1c:40:d6:6b:79:89:4d:e1:7a:d8:e4:e2:fd:
12:bc:00:de:61:7e:4b:8e:0d:8a:37:7f:d9:f9:6a:
52:b5:f4:7b:fc:dd:f2:04:d8:64:a2:43:2f:ef:99:
4d:07:46:45:a2:2a:84:ab:e6:15:e9:e2:fc:20:2e:
ea:d9:f4:cc:5a:ae:94:82:f8:68:94:23:16:85:15:
08:73:a6:64:79:1b:b8:e9:c3:f0:a2:a7:88:40:9e:
8f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6F:00:E5:8A:11:50:7D:93:CF:0D:76:D3:58:5C:DD:9E:D0:E0:00
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7f:d3:e1:04:4c:50:73:35:b7:ce:6d:8f:55:bd:f3:8d:ef:
6e:10:3b:a9:d9:0c:c3:95:c7:33:4f:23:ab:c0:f0:06:e4:19:
05:7a:8f:d3:9c:c4:0f:7c:ac:8a:ac:1d:74:62:1b:34:d4:7f:
5b:a6:ad:1d:db:d2:84:36:6e:a9:86:5f:5b:fe:04:ec:13:0d:
d4:0f:b4:06:54:1a:d8:85:17:d7:06:27:39:36:d6:f1:b1:3c:
d7:0b:c0:40:81:e8:2d:2a:73:8f:9d:7c:72:59:85:08:88:22:
2c:9e:e7:b5:19:57:61:1e:f7:93:aa:39:48:3e:4b:5f:31:01:
11:38:91:d7:31:32:f4:60:db:d4:17:06:1c:6a:19:5e:97:73:
5e:21:70:35:b8:81:16:db:4c:0e:75:7c:b2:51:af:66:f7:eb:
52:6f:49:bf:2b:64:30:bd:d4:31:05:ab:0c:ca:51:61:a0:5c:
a1:b5:23:0e:e1:72:55:e8:fe:d6:e2:00:5f:54:57:fb:0f:d6:
7f:49:ad:10:dd:c3:1f:cd:e5:ff:37:5b:9e:c8:1d:d8:e6:0a:
59:2f:bb:c5:7e:30:29:9c:9c:54:e0:76:62:db:67:47:9c:a4:
b4:5a:29:fb:5b:1d:75:de:49:aa:91:e1:d6:09:41:34:e5:ba:
a6:58:a1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:31 2026 by rpki-client