Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json)
Hash identifier: bToiojEFqNNM6gMFonWzThH2gRGpqknLxDLEfGEj0BA=
Subject key identifier: C2:19:48:EC:CA:AC:99:65:DC:BA:42:97:7D:35:AD:C0:04:AE:60:83
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 019E1CEBFE5E6AAC58629053D34947412672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
Manifest number: 0BD5
Signing time: Tue 12 May 2026 16:01:28 +0000
Manifest this update: Tue 12 May 2026 16:01:28 +0000
Manifest next update: Wed 13 May 2026 16:01:28 +0000
Files and hashes: 1: 6Qo_0tvV-nF1V3290tyCPcyJh_o.roa (hash: miQhI+W7erQXF0Elh5+jiDUej+PQhWgEiCLyU5iCciM=)
2: 9ookbD4ZU4VY6TDRIjyZKBvmQXI.roa (hash: M/Bs/iLa6unZww6rfQbsSA6jP0n4wnfBywF5HPWrEvA=)
3: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: NsF6+nkfxR33AChUdA7xiG/jpF09oZliAysaTgAX0DU=)
4: IFrY2kkAzLqt5nU6H0jjg7fOnfs.roa (hash: 3jLeNihZ7jH0KElGLvHndCBcoZfJ8baWrI/MSc9FDOM=)
5: PgdFhXr4B5CibOVMVSzG8VZJbJI.roa (hash: ZVEiyh33egqUEszPE12gddvboVKjJ6wjLhbhT2yy81g=)
6: VwfnUo7iWGrwpmjYLkStkdsJWgc.roa (hash: 0vyTKG4s8Sxb6Vvga9d9VBfQgDaf6QryBCp9P8NqVAk=)
7: Wb0JFSc4Yv8IZMCTo-g4uUkinx4.roa (hash: QbARyoCiF4BxJCcobyg9rCwtMBorp1r1V7vAEHyauzY=)
8: czKDro5NX_B7iWJU3teZpH_MFjc.roa (hash: IaANvC54ocsGYfpcLfku3gzas0/nThyZNXREyxhjK4Q=)
9: sCTR8cDIH84F0OMO06djeXs_-PQ.roa (hash: ugj+brY/Z7Vee3VbgiQKLfHy9VAROXKxM5IhUTLTOGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:fe:5e:6a:ac:58:62:90:53:d3:49:47:41:26:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: May 12 16:01:28 2026 GMT
Not After : May 13 16:01:28 2026 GMT
Subject: CN=c21948eccaac9965dcba42977d35adc004ae6083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:0e:7c:81:bb:80:fc:5b:b6:dc:13:dc:61:
48:93:78:5e:1a:94:5c:2f:06:b0:0e:e1:0f:85:75:
8a:30:08:6a:e5:ac:62:97:70:4f:ef:a6:f2:b0:c7:
54:ae:89:c6:09:cf:4d:8c:0d:fd:80:1f:e0:c8:3b:
f0:5b:d6:ba:f8:57:c0:e1:b5:5f:1a:d5:f3:84:02:
e7:98:83:2b:e4:bd:10:d1:55:fa:54:ab:b6:f1:74:
71:9a:31:f4:d4:01:5e:c2:99:72:dd:c3:88:65:00:
97:f7:c2:07:11:9e:80:11:eb:2a:60:0a:e7:01:ec:
87:0f:cb:87:d3:5a:5d:ad:7f:9b:de:44:9a:2a:08:
5d:01:bd:1d:2b:af:d2:26:62:ff:69:c0:6c:53:25:
0b:25:bc:07:35:ca:25:4a:c4:1e:f8:10:d6:f2:72:
38:70:a0:b3:f0:4f:d4:b4:06:55:28:f5:c4:42:f8:
df:a8:7f:29:23:2e:cc:93:09:b6:99:83:18:6a:f0:
fa:0d:45:45:02:c0:83:5b:8c:23:ea:b1:fd:a5:43:
7b:0b:ee:c3:7c:a3:4b:ac:8e:30:93:ee:1e:e5:85:
27:c9:62:b3:af:d2:2f:29:94:93:1c:d1:27:f4:58:
b1:cd:de:2c:4f:1c:5c:ad:c3:ff:12:0c:36:ad:1c:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:19:48:EC:CA:AC:99:65:DC:BA:42:97:7D:35:AD:C0:04:AE:60:83
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:eb:63:10:a4:fd:22:8d:e9:73:6e:5a:4c:e4:6f:ac:e0:48:
3a:67:3c:37:ec:98:0a:51:f8:38:41:c6:f1:e3:23:b1:ba:8c:
1a:0c:c7:09:d7:15:4d:5e:cc:00:da:f3:63:03:6e:bc:ab:ce:
72:c6:88:98:a0:16:f6:3e:3b:15:32:c0:51:66:05:a2:3a:a2:
c1:fb:ec:24:f2:5e:9f:8e:9b:40:e9:d4:13:09:fa:4c:c6:81:
a8:81:4f:5b:49:bd:a4:72:c0:76:1f:41:df:ce:8d:57:8c:73:
8a:b9:62:84:bc:1d:5e:56:5a:b7:fd:02:93:b4:32:0e:97:ce:
e5:4b:80:c9:31:74:ab:ec:54:94:30:dd:a4:00:59:15:81:a4:
09:6e:79:64:9d:0a:9f:e0:4e:89:36:d9:6f:5a:e0:11:e1:a9:
20:bc:89:e2:18:60:88:c8:55:c1:88:ba:1d:77:b1:27:96:ee:
d5:7e:3d:eb:32:d3:4b:a4:94:55:3a:61:00:42:fb:12:1e:00:
7f:2e:1a:0b:bc:47:5f:d2:13:4f:25:14:7c:d9:fc:8f:d5:1e:
e5:71:e2:4d:db:58:4b:59:4a:89:97:cb:8d:8a:0b:0d:ce:63:
0c:ee:98:b5:dc:70:60:ad:71:56:f5:09:ea:bc:26:2f:92:e4:
30:20:61:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:20 2026 by rpki-client