Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: Xrs5GS0UyhhNl2s+7U8BJ0yVUJXj9kfBOsqxfJSTA68=
Subject key identifier: A5:04:9E:27:C1:1F:0F:70:9C:8B:DD:91:47:9E:68:B1:FE:1A:C7:26
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 019EBEEC4A6FDEA0AC8425D4A3B4B6850310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 03:00:17 +0000
Manifest this update: Sat 13 Jun 2026 03:00:17 +0000
Manifest next update: Sun 14 Jun 2026 03:00:17 +0000
Files and hashes: 1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: d+rSgWkujwe98++e0ELB1gA/1Z0ES3a18BD2WCmc0+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:4a:6f:de:a0:ac:84:25:d4:a3:b4:b6:85:03:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Jun 13 03:00:17 2026 GMT
Not After : Jun 14 03:00:17 2026 GMT
Subject: CN=a5049e27c11f0f709c8bdd91479e68b1fe1ac726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:52:c2:da:ec:d2:7c:3f:31:c8:95:a9:9f:
f7:d8:dd:0f:7e:7e:7d:34:25:32:75:31:8a:7a:c6:
c2:3b:0f:49:3b:de:53:85:f9:05:5f:20:b0:b5:ba:
4b:ac:50:1f:fd:bc:63:04:39:a6:8c:a6:11:ea:e8:
94:ab:d1:98:e3:a6:2b:db:d0:43:d3:e9:bf:f5:91:
cc:54:9c:62:03:fe:83:c4:4f:38:c8:e6:32:3a:17:
79:d6:dc:15:96:1e:28:d5:c3:38:60:9d:29:ac:a2:
e4:6a:7a:ba:c3:54:b2:b4:35:e0:55:65:d0:a7:72:
6a:d7:84:e6:05:09:19:14:7c:fe:c2:66:7a:1f:b1:
67:dd:84:21:e1:fc:8a:f3:0b:e0:7a:15:68:60:1e:
1b:26:2c:6d:35:69:11:e4:83:da:b1:ad:0d:28:8c:
67:77:ca:85:ee:f2:e2:59:4f:dd:e0:0d:72:1a:4b:
04:d3:19:ce:97:d0:a9:64:a5:03:6c:18:4b:58:fb:
83:a1:97:92:40:b9:c7:68:77:5f:61:9a:9d:b5:c4:
b9:28:db:a8:8c:0f:dd:57:27:25:92:38:3f:e3:f2:
e7:48:81:b0:e5:f3:c4:d2:af:79:17:fe:57:0b:79:
2d:27:7a:b2:ff:90:50:a5:a2:cd:a9:cc:93:fc:e4:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:04:9E:27:C1:1F:0F:70:9C:8B:DD:91:47:9E:68:B1:FE:1A:C7:26
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c2:bf:6a:ca:ce:31:0a:f8:e6:c5:c9:72:fa:20:2d:86:3a:
44:6f:42:d4:a1:10:70:14:ad:a1:82:c5:02:e5:a2:a2:24:f2:
7d:1e:10:8f:34:6a:d9:8d:ab:fa:44:fe:62:19:74:60:95:54:
e1:35:16:c2:a2:0b:e7:a3:b9:41:2d:e8:cf:48:09:dc:f2:67:
de:40:d3:ad:4f:7d:ef:fe:d7:5b:77:70:f6:32:a4:7d:8f:68:
df:42:c9:5f:05:72:92:5b:cd:b0:a5:c5:80:9a:bf:c9:55:f9:
7d:96:36:5a:01:1e:b8:de:89:10:8f:98:cd:cf:af:17:19:9d:
6d:c2:ff:3c:14:6d:a2:d3:85:ed:40:53:d1:9a:ee:cb:7a:de:
59:18:07:b0:6d:7b:81:12:f8:f1:33:c2:b5:1a:7d:08:5a:e2:
1d:f7:b0:ea:45:66:2c:32:13:61:a8:a4:88:bc:77:91:17:52:
b6:72:24:9c:a4:e0:30:42:64:9e:19:ac:c1:3b:b2:4a:82:6c:
cb:cc:74:9f:63:76:25:a4:b3:ed:c6:54:8f:bf:5b:6a:62:be:
55:d1:54:69:ed:51:60:ac:d1:9b:0b:25:87:0c:48:9f:d4:e0:
84:5b:7b:c4:11:c0:57:d8:c6:98:1a:9e:ce:ef:f5:55:c3:2d:
47:9e:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:21:31 2026 by rpki-client