Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: T+0GzKRV4/pVFIlSMLTfHXRochlwjfG8CYNWPVhMX50=
Subject key identifier: D1:7E:96:22:83:BC:8F:09:16:85:00:81:A6:19:5B:E6:8C:FA:ED:DD
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 019EBE7EAB76C4ECA34905BE6C618CB766CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 01:00:32 +0000
Manifest this update: Sat 13 Jun 2026 01:00:32 +0000
Manifest next update: Sun 14 Jun 2026 01:00:32 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: ic0ZLm/oHOUbtoLxHM0zgqiyCWLWyYLiqkSHEW45/Ds=)
2: l6d-s6pGrwjzo2MVrYFXt_vj8FQ.roa (hash: GWCGfDBQXbx8zU/9pE2/fyqt5ipxe1FQBrMDGvjciQY=)
3: wNW1OJ6nNt-LJ_qt91rusWZGqUk.roa (hash: Uf/zMrnHEJKdoypvZyEP0WBvkTlQGSBhuCZb5Fsvgco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:ab:76:c4:ec:a3:49:05:be:6c:61:8c:b7:66:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Jun 13 01:00:32 2026 GMT
Not After : Jun 14 01:00:32 2026 GMT
Subject: CN=d17e962283bc8f0916850081a6195be68cfaeddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:31:66:ec:c3:4a:72:c8:1c:8a:9f:9b:b8:
6a:ea:25:56:6d:a6:3f:34:ac:de:4e:81:6d:11:0a:
92:59:5e:56:67:c1:be:6b:f5:95:35:92:9a:e8:c7:
4f:02:ac:42:67:d1:78:98:df:f6:30:9a:b4:34:56:
42:dd:a4:85:8e:b9:e6:31:3d:ba:42:cc:5f:cb:50:
e5:99:b6:2e:cc:02:c3:40:14:22:62:3c:45:e5:bf:
3f:f8:08:b4:e1:7b:e2:b5:9e:a5:c0:80:4f:e5:15:
54:44:52:db:d3:73:2a:86:80:04:71:cb:9a:60:27:
0a:c2:89:ca:97:31:c6:89:48:2d:d4:14:42:8e:8b:
b0:70:60:10:0f:40:c8:38:47:86:df:b0:c4:58:a5:
71:13:fa:8a:df:be:8a:58:5b:ea:1c:63:10:6c:2d:
e0:79:6d:65:dc:18:9f:e5:00:55:db:32:58:fa:e7:
ed:4d:cd:d0:8f:e1:fd:d9:67:2b:5e:72:a4:67:36:
a4:2d:9a:9e:58:a6:67:07:ca:aa:b1:1a:e9:90:5f:
b1:e2:20:73:c8:bc:e7:97:79:3d:d6:d8:18:8f:12:
ff:da:49:a2:63:61:30:0f:e0:13:9e:fc:87:fc:f5:
4e:8f:dc:29:79:e2:c5:fa:f1:b1:20:7f:c5:18:c0:
e8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7E:96:22:83:BC:8F:09:16:85:00:81:A6:19:5B:E6:8C:FA:ED:DD
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:44:cb:ea:5b:20:3d:02:6a:7f:00:1f:03:87:eb:d9:33:6f:
85:49:4f:1a:f0:ed:5c:c0:1f:0f:45:dc:95:a2:05:e8:b7:42:
12:03:ac:f9:fe:87:aa:5a:e9:fa:a5:b2:88:b7:7d:74:a8:dc:
9d:00:22:9f:45:25:5c:ae:8f:34:08:72:8a:71:86:94:b4:69:
ab:17:3b:17:4d:cf:df:09:36:40:c8:a4:e1:ed:4d:fd:43:e9:
34:7a:47:b4:ad:28:93:cd:b4:b0:42:fd:4f:d9:23:13:35:2c:
48:64:68:be:5e:fd:aa:22:fe:e9:ab:4f:8f:40:75:f8:a1:d1:
a7:8f:67:4a:93:a9:7e:c0:24:9f:5d:1d:9f:87:5c:df:fa:ad:
21:b9:71:b0:41:77:b8:d4:52:a3:ce:e8:b1:d7:93:23:8d:6a:
21:32:48:5f:00:fd:e5:6c:15:a4:27:c2:15:19:9d:0b:0d:30:
03:d7:f2:32:94:48:b8:ef:b9:c1:7e:05:76:06:f4:6a:5b:7b:
e2:bb:d3:1c:c8:2c:f5:be:49:57:5c:a0:28:da:d0:de:32:4b:
11:66:18:0b:97:6d:db:f6:71:81:57:e6:5a:75:51:dd:76:24:
9a:7a:e0:e9:7d:61:4c:f9:ad:07:bf:8f:77:6a:68:4b:a3:e6:
70:92:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:48 2026 by rpki-client