Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: NZ1jjVnzw182FUrTrYzbR5J1LhGepTTkkpfDr0g0u0g=
Subject key identifier: F8:2B:CC:75:A7:45:FB:4E:C5:28:11:03:0D:25:E3:E2:79:F5:9F:5D
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019E1E6C7312FBB4FE9E38A44BB8570AB00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 23:01:24 +0000
Manifest this update: Tue 12 May 2026 23:01:24 +0000
Manifest next update: Wed 13 May 2026 23:01:24 +0000
Files and hashes: 1: 1wC70OGBB84YZ8LzzI7GRE1FXLw.roa (hash: 61O42HPTbjFtxU4oF7cNiKUH0sHQufjgX2XI1LEtyCM=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: pTTWyHsaIG4oEIhH5Vqj9tq60kRCGrB8lR0Tsl7Zqc0=)
3: YVZ-GH3S7Iq0JxeBAHpFVD2_Lx4.roa (hash: kM6UtuYisVsArbzf8eESDr1kRHymSG53rA/gBdAULqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:73:12:fb:b4:fe:9e:38:a4:4b:b8:57:0a:b0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: May 12 23:01:24 2026 GMT
Not After : May 13 23:01:24 2026 GMT
Subject: CN=f82bcc75a745fb4ec52811030d25e3e279f59f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:bf:c5:35:91:c4:6a:73:a7:19:bd:bf:c2:
5d:3b:56:ab:72:20:39:83:3b:df:f4:91:36:ee:77:
07:3b:28:17:8a:5e:59:3f:26:ab:b2:85:11:b9:5f:
c2:6c:a7:50:22:ca:2c:1c:af:4b:e2:f3:83:1e:91:
bb:bd:a6:3d:8f:06:dd:7b:5b:a4:ec:9e:1c:bc:b9:
69:c1:4c:7a:83:59:26:3c:1a:31:00:12:35:3a:f9:
8b:f3:4e:f5:41:9b:30:a0:a2:7d:55:c3:23:f6:15:
2c:5a:05:a2:bf:71:44:11:a1:7d:05:1a:9b:08:04:
85:e4:5f:a2:5d:7d:e8:65:c3:b4:f1:1d:57:d5:5d:
0b:a0:4a:1f:4e:a5:f9:f4:2c:bd:70:89:34:37:d0:
f9:07:f1:91:0c:5e:6d:34:50:43:22:d2:d5:a6:87:
e2:79:d1:73:97:77:94:e8:57:ed:1f:72:9c:96:18:
ac:c5:66:97:1b:64:bb:02:c7:d6:49:34:fd:79:21:
58:8c:4d:00:2a:42:76:69:e2:52:dc:85:f8:8e:b1:
f1:40:f1:44:48:39:ce:7f:af:e8:86:b1:9b:86:5c:
cf:cd:57:b4:d0:95:02:f4:c1:bd:09:20:e6:12:80:
d6:1a:3b:3a:da:a9:63:e1:ff:9d:a4:13:90:27:7b:
b8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2B:CC:75:A7:45:FB:4E:C5:28:11:03:0D:25:E3:E2:79:F5:9F:5D
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:86:6f:13:1a:fa:db:4a:f1:6e:7b:4d:25:1f:70:70:d0:aa:
c7:e4:e8:94:25:1a:ca:e1:b4:5f:d2:39:df:f3:94:74:7b:a9:
84:2a:d9:e3:9d:2d:dc:8a:9e:6c:d6:dc:4f:ca:53:3c:49:0b:
1e:96:9b:bc:2c:85:37:c4:b9:e0:ee:5b:f7:90:6a:da:2c:3a:
95:79:1a:a3:92:f4:9b:eb:c6:37:ac:e0:a2:ea:c8:7d:6f:05:
24:43:48:2b:43:b2:ad:86:c6:b5:78:7f:85:24:9f:e5:4c:fc:
a1:81:a7:87:6d:34:36:97:68:37:76:fb:f6:04:5b:93:3a:65:
f6:ef:1a:dd:d1:2d:80:95:f8:ed:a0:3a:5d:9d:82:b1:75:e5:
dc:0e:3e:77:3e:ed:20:6c:34:8e:a8:05:95:b8:24:15:57:41:
6e:f1:36:b4:62:ef:c4:ed:00:f7:00:f7:2a:a3:14:b0:39:77:
29:fd:99:c0:70:0c:89:d1:ae:8c:4e:25:ce:7e:d3:7c:3f:48:
3a:3a:74:6e:39:0a:99:a7:73:3a:f1:90:82:ac:5c:48:7f:7c:
08:0d:54:31:73:df:66:3a:ef:9f:53:04:bb:df:9e:4c:df:7c:
81:50:3b:39:06:99:8b:99:1c:89:0c:88:cd:60:56:f3:a6:2d:
d1:5e:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:22:26 2026 by rpki-client