Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: Yt+DVCkedaMIny3a25FDW4OMcsICmCQEbLZp4LpGk5s=
Subject key identifier: A3:8B:BB:6D:5D:BE:4F:A9:57:F6:65:B5:35:58:01:67:DA:AF:F9:47
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 019E1DFE2CCD54CE89EA79301A66FDBEF3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 1198
Signing time: Tue 12 May 2026 21:00:57 +0000
Manifest this update: Tue 12 May 2026 21:00:57 +0000
Manifest next update: Wed 13 May 2026 21:00:57 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: oerw9jrapIG0sTyrkIjnE1VG6zbFHWR8bzIEvSK6Bfk=)
2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:2c:cd:54:ce:89:ea:79:30:1a:66:fd:be:f3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: May 12 21:00:57 2026 GMT
Not After : May 13 21:00:57 2026 GMT
Subject: CN=a38bbb6d5dbe4fa957f665b535580167daaff947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:3d:1f:45:e6:4f:29:30:18:5d:e1:b9:fa:
ce:c9:68:39:44:c5:dd:26:82:3e:b4:90:e8:1c:64:
51:2e:80:d5:cd:b9:ce:30:22:78:ba:61:da:f9:a0:
8e:e7:c5:63:b8:f3:07:bc:99:9a:4d:c7:c9:b9:7d:
5c:2d:ae:48:bd:9f:7d:11:97:3b:29:d2:50:c3:42:
60:fc:2d:a0:a3:73:f0:39:ca:4d:7d:cd:1f:57:63:
4d:2b:0b:0a:02:4e:bf:a4:87:6e:5f:db:fe:fc:1b:
ae:94:f5:bf:a8:99:38:77:5e:68:9d:26:cf:7e:d2:
41:85:f2:42:0f:9f:66:70:84:fb:3a:c7:3e:74:72:
9e:61:c8:31:52:a0:04:f0:ac:9c:c7:27:36:5a:46:
70:ef:a9:40:9f:ef:11:bf:15:d9:68:5b:89:13:c1:
0d:ca:f0:80:60:f0:f7:11:97:a0:d4:ef:bd:c9:d3:
67:c1:f7:0e:47:76:9d:c2:9f:17:ac:16:28:63:8e:
c3:2b:6e:ae:1d:7c:f9:db:83:18:05:58:d2:41:0b:
98:58:3c:4a:25:5f:92:f5:85:44:04:d7:55:f2:4d:
13:d3:e9:9a:1b:b0:3c:fc:cc:93:e0:18:e8:f2:7c:
6e:d1:be:55:1f:f2:ee:83:e5:e3:90:b9:7c:af:e3:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8B:BB:6D:5D:BE:4F:A9:57:F6:65:B5:35:58:01:67:DA:AF:F9:47
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:62:ad:ec:84:c1:fa:59:4f:28:b9:d4:f3:e2:70:ea:2e:74:
37:4d:62:31:ce:8b:24:64:9f:1e:ee:0a:1c:9c:a7:c7:f3:85:
d4:df:0e:77:62:53:43:d0:15:90:80:37:9e:ae:67:4e:2b:96:
c2:ff:d1:37:55:4c:91:2c:23:83:73:a6:7b:a2:59:6f:8c:8b:
59:45:6c:e9:9c:f2:23:2a:dc:ed:f7:90:ea:69:37:ad:2b:b4:
8c:f8:57:56:87:05:e1:ec:c4:8f:70:3a:ce:70:a1:7f:9d:1f:
81:9c:00:1c:92:7f:bf:7b:1e:46:67:1a:76:d7:d9:5a:a6:1f:
d8:de:a7:ac:1f:5b:b1:09:53:7b:18:b0:72:d0:a2:3a:68:f4:
d8:c1:ef:b6:16:1a:a1:a8:bc:5c:b2:ed:a3:c4:af:0f:09:88:
74:ff:4f:05:37:14:da:04:11:ab:97:33:94:3f:80:8b:17:bf:
ce:fe:b6:06:57:7e:da:77:66:09:2b:e5:68:7a:cc:44:9c:40:
13:81:2e:26:cb:33:f2:7f:40:98:ff:cf:c7:31:bf:33:b3:30:
6b:d7:36:eb:53:11:25:e3:69:85:cf:9d:4c:63:5f:f9:c4:8e:
54:d0:80:9e:cb:f1:14:cf:8f:10:37:25:f0:c5:a6:15:52:a9:
22:f5:d5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:14 2026 by rpki-client