Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: brjHAMJIUrqZV8csDjArUNuLcQSeMNvUOaPSyee57W0=
Subject key identifier: 54:3B:23:B2:23:CC:96:70:D1:21:44:EE:69:75:42:FF:A4:80:22:12
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 019EC06DE32DE430AE0861B9B04B6EBBD1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 1961
Signing time: Sat 13 Jun 2026 10:01:27 +0000
Manifest this update: Sat 13 Jun 2026 10:01:27 +0000
Manifest next update: Sun 14 Jun 2026 10:01:27 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: X8U0qKSd6DlzafrNFhS98vRnEzJ2VKVXIls/3ZCXlHg=)
2: l6d-s6pGrwjzo2MVrYFXt_vj8FQ.roa (hash: GWCGfDBQXbx8zU/9pE2/fyqt5ipxe1FQBrMDGvjciQY=)
3: wNW1OJ6nNt-LJ_qt91rusWZGqUk.roa (hash: Uf/zMrnHEJKdoypvZyEP0WBvkTlQGSBhuCZb5Fsvgco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:e3:2d:e4:30:ae:08:61:b9:b0:4b:6e:bb:d1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Jun 13 10:01:27 2026 GMT
Not After : Jun 14 10:01:27 2026 GMT
Subject: CN=543b23b223cc9670d12144ee697542ffa4802212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:71:4c:ef:04:92:79:9a:fb:4d:8c:f3:6e:
15:56:1d:fa:4e:fc:2e:20:b5:f9:d6:62:d4:4b:a6:
ee:9b:11:f1:0e:55:03:5c:9b:30:f8:90:10:89:27:
5d:ac:ee:d2:7e:21:2b:61:27:13:1e:5e:6f:d8:dd:
bf:d3:08:b5:7c:08:40:d2:71:f8:81:c2:90:95:47:
1b:46:c9:8a:98:63:45:81:6a:d3:30:bf:f0:4b:79:
c1:17:54:ef:da:b6:bb:78:2f:40:6d:c4:98:fb:0c:
5e:a1:a9:b4:d5:ea:4a:d6:5f:32:db:d4:7b:79:df:
bc:61:31:2e:38:13:84:f4:de:6c:19:a0:42:7e:af:
0a:9f:6c:6f:a8:ee:66:32:57:2e:f4:54:d3:07:88:
93:65:bb:cd:04:b9:35:c6:85:43:61:1e:0f:73:90:
24:a4:68:bb:21:3a:bd:55:d3:87:98:cf:61:2f:c6:
38:df:17:20:62:f6:63:fc:0f:26:8a:ac:2e:06:6b:
aa:35:06:61:ef:45:9f:31:bb:79:8e:9c:d5:bb:e3:
80:b7:8c:ef:b6:e5:c5:51:8d:32:3b:74:59:60:21:
2e:57:d1:06:a5:33:8f:3f:e1:fd:ad:6b:46:03:41:
ce:bc:a8:ba:e9:a0:c8:a1:40:82:78:b9:82:6c:81:
8e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3B:23:B2:23:CC:96:70:D1:21:44:EE:69:75:42:FF:A4:80:22:12
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b7:6b:c1:59:41:cc:06:d1:f2:35:39:96:c7:8c:8d:8b:f3:
74:30:0b:f9:01:fe:1f:3c:1e:fa:2b:aa:55:f6:fc:ae:a5:31:
53:66:c6:dc:a0:df:b7:f6:64:20:83:88:4d:0d:e6:68:f0:92:
94:57:76:0c:4b:44:55:f9:c0:62:7b:38:7e:6a:ab:65:d3:12:
ec:1b:cc:09:57:9d:d8:04:ed:1c:db:b5:df:4d:75:10:39:10:
43:19:07:c2:a4:ba:5f:a3:84:16:3f:02:71:b8:aa:19:c1:e9:
87:74:1b:60:6b:a7:c7:ba:4e:ca:73:6c:70:01:6b:72:95:aa:
ce:02:5d:42:49:50:67:91:83:50:ec:28:fc:b8:aa:bf:63:1f:
ef:f7:83:37:04:54:b6:f2:83:ed:93:b2:93:04:8b:35:fa:3c:
89:96:87:7a:85:82:ca:30:8e:3f:d3:34:83:cf:2a:d4:16:7e:
84:bb:a9:2f:0e:7b:a8:56:c9:d9:55:04:79:f6:f9:f3:e8:84:
92:66:d2:a1:c2:b5:24:be:0d:d7:99:06:43:6c:90:47:bb:d8:
e7:3a:19:82:5e:d2:1f:b6:a9:e9:fa:f5:1b:f6:2c:76:3f:11:
97:6f:1c:12:e1:09:35:02:2c:a7:f0:de:3e:5d:3f:c7:41:95:
b3:0f:f4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:36:47 2026 by rpki-client