Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: yTtrfPsr0nc9LOhlxCVbwBX7I1CgqFdktxr0r8kG/ao=
Subject key identifier: 86:7C:B5:98:34:A1:95:C6:8D:7C:AB:8F:E9:F4:C8:C2:30:E7:6A:2C
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 019E1DC71F6F9C0AC73EFA12FF5B85B7244A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 0A78
Signing time: Tue 12 May 2026 20:00:49 +0000
Manifest this update: Tue 12 May 2026 20:00:49 +0000
Manifest next update: Wed 13 May 2026 20:00:49 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: GSS3iBuUe6Sn5lObJDeC9y+TcjkWxlB3BOgDQ2QfWs0=)
2: Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa (hash: 7U3vqi/fr/x9T5oXLoF5tZC73nYigGo0Lh9WQ9j33Bo=)
3: yfnXQNQR6qwLfnS_9inVuunPhTE.roa (hash: 6X/o1qnSnBUFZ+wmM2iXaRxxmfNZALk6TxkSNYTjhH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:1f:6f:9c:0a:c7:3e:fa:12:ff:5b:85:b7:24:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: May 12 20:00:49 2026 GMT
Not After : May 13 20:00:49 2026 GMT
Subject: CN=867cb59834a195c68d7cab8fe9f4c8c230e76a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:b8:49:b1:3e:84:6f:93:43:0e:47:fb:8c:
6e:65:f2:e0:11:45:c5:5e:4d:ef:36:b3:f0:ef:de:
3e:d1:d5:5b:cc:ea:6b:c0:b6:3e:47:46:75:56:e8:
f9:83:bc:e3:38:37:14:c2:33:19:8f:4d:71:ee:db:
81:f1:59:8f:56:1f:78:48:0d:3b:92:e6:a7:cd:94:
61:b6:45:12:c6:47:cf:33:78:6f:a2:35:7f:d5:59:
36:7a:e6:4f:b4:9c:46:86:d3:d8:5e:12:f3:80:6d:
74:d0:1c:28:3f:19:d7:0b:7b:8c:bb:51:e4:a4:b9:
09:09:a4:65:6a:bf:64:18:97:f0:82:0e:b3:25:8f:
1c:dd:81:bf:01:04:7c:3f:49:b3:e6:68:ad:28:49:
08:b0:33:17:1e:4a:2f:7c:83:4c:e4:c5:60:bb:3c:
f3:28:87:73:93:b9:09:f9:21:77:5f:7a:1c:d3:d3:
e0:98:31:6a:72:85:d2:27:d8:ca:30:99:ac:1f:fe:
7c:0e:ca:0e:49:fa:31:b3:ac:bc:3e:e9:ba:94:86:
ed:91:b7:e6:80:22:72:19:8a:d7:7a:5e:b3:49:44:
73:7d:12:14:58:96:45:6d:32:58:be:fe:fe:9c:47:
c6:60:83:63:5a:94:20:65:43:90:a1:16:58:f2:3e:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7C:B5:98:34:A1:95:C6:8D:7C:AB:8F:E9:F4:C8:C2:30:E7:6A:2C
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:18:f3:a3:01:5b:b7:19:73:98:20:a9:47:a8:6e:aa:fd:06:
dc:81:16:35:6f:18:47:3d:47:9b:91:a7:43:3d:c2:55:0e:60:
0e:62:6c:e9:20:13:1c:29:25:2d:ca:6c:bd:da:9e:c9:97:08:
f3:24:51:aa:78:0c:8c:70:e4:72:4c:ee:4e:60:e2:01:ae:31:
8b:10:07:4d:28:e4:10:39:67:54:d3:2d:87:cf:91:47:11:30:
d2:a7:6f:9d:72:bc:77:a8:23:3c:e7:51:b3:fe:e1:29:cd:66:
d2:81:6c:64:66:fd:55:72:8b:fa:41:2d:7c:70:19:ae:90:ec:
e0:0d:ee:53:ee:24:a9:5c:61:ea:44:04:34:68:c4:e5:fd:22:
17:85:55:e7:cd:33:7c:44:16:3b:15:12:87:fe:66:a7:11:0a:
03:24:89:d6:44:23:13:5e:7d:3d:ca:6b:63:47:14:f5:d0:80:
c9:77:da:b2:70:40:86:0e:5b:7c:c7:3e:63:fb:20:9f:7b:f1:
69:39:d7:bd:39:25:f2:b2:52:99:a6:cf:2c:c9:27:f8:fe:a7:
f4:c8:a7:a5:70:6d:88:db:a4:59:7e:3a:ba:e3:98:1b:37:6e:
38:e9:5c:8f:bc:8f:39:d6:ff:c4:20:63:4a:24:9d:67:b5:d0:
bc:8d:5f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:14 2026 by rpki-client