Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
File: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json)
Hash identifier: vHX14LIOGhRsejkB8WolfXoBgXwqDBmcnnCSibCeBX4=
Subject key identifier: 3F:9B:3C:40:9C:B5:BF:34:42:F5:5D:D0:C1:0C:34:7E:32:95:E0:01
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial: 019EBDD9A2E544E24E23E5C4ABE3AC9CF05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
Manifest number: 0AFE
Signing time: Fri 12 Jun 2026 22:00:17 +0000
Manifest this update: Fri 12 Jun 2026 22:00:17 +0000
Manifest next update: Sat 13 Jun 2026 22:00:17 +0000
Files and hashes: 1: 7Nyjbqbs9N9Zh41DGSBoETJC5r0.roa (hash: mi+2zduefLUt/QSaBO9zYe4aEoiLRvtVBwAZPWRpVqo=)
2: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: wX9RMtoVXCPJEwtAWg4u5PZQdFow7SW3N3UgKz5kTQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:a2:e5:44:e2:4e:23:e5:c4:ab:e3:ac:9c:f0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Validity
Not Before: Jun 12 22:00:17 2026 GMT
Not After : Jun 13 22:00:17 2026 GMT
Subject: CN=3f9b3c409cb5bf3442f55dd0c10c347e3295e001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:87:b9:e9:02:5b:49:71:13:e4:86:46:c7:a2:
05:e1:59:ab:e7:d5:aa:e2:10:cb:99:79:b1:47:b0:
a3:be:87:df:12:70:31:39:d5:8a:a4:bd:43:da:92:
ac:8b:69:29:d7:19:58:f7:58:98:4a:b3:24:d2:0a:
9a:15:dd:77:2f:8d:fb:a0:16:33:27:29:a3:77:2e:
e1:65:7e:dc:d3:1d:f5:a5:aa:49:17:2a:02:af:11:
c5:a7:61:36:a0:64:c1:7c:2e:b3:56:9e:5d:fc:77:
51:bc:a1:3f:d8:85:ae:d6:88:a1:64:c1:ed:fc:9e:
ce:7d:36:b5:c5:94:40:37:46:4f:99:ec:e4:5c:b1:
1c:c9:72:54:d0:74:b0:38:12:18:8c:f6:a1:a3:23:
77:29:4b:39:7c:16:37:f9:4b:8b:17:49:90:23:73:
68:fc:eb:2f:55:50:ae:c6:94:17:53:82:8b:f2:df:
d3:a0:7d:8b:26:42:0e:52:e2:50:3d:ae:57:5f:83:
2b:70:0f:44:75:9c:71:be:79:d6:fd:8c:1d:f6:b5:
24:51:8a:54:0c:29:4f:0a:18:db:ee:01:bc:3e:f7:
fb:cd:32:5f:2f:be:ff:8e:e9:bf:e6:fd:44:bf:7d:
53:9b:dc:d5:4b:7f:d5:0b:a6:33:be:65:7b:fb:10:
cf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:3C:40:9C:B5:BF:34:42:F5:5D:D0:C1:0C:34:7E:32:95:E0:01
X509v3 Authority Key Identifier:
keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bc:89:29:e3:b3:f4:64:76:1b:87:ae:c1:19:e9:88:26:70:
bb:19:5e:e7:97:13:1e:c7:67:91:e3:3c:25:d1:6f:16:7d:71:
8a:2b:83:ca:a2:1a:14:8e:90:e7:33:fe:6f:dc:66:34:6a:5b:
46:ff:c5:a3:68:6c:eb:48:42:30:6b:c3:b0:2c:f5:d6:a1:e8:
90:7a:6d:84:ec:1e:01:a1:1c:90:50:1e:87:4e:da:f4:7a:2c:
ae:b5:92:9a:bb:9c:f1:0f:d1:46:e5:b1:ed:70:70:e9:a0:d6:
45:80:e9:44:a0:33:01:8f:5f:03:1d:44:e4:38:7d:8b:ac:16:
ed:64:7f:73:ca:4b:a1:88:54:fa:3e:03:86:13:d2:cd:98:e8:
89:18:6e:e6:e8:b0:96:e5:a6:d1:b1:27:77:e0:1b:4e:b9:1e:
6f:6c:b5:31:a1:fb:cd:5e:1f:1b:b2:6e:bc:47:d5:46:88:98:
e7:ee:b4:f1:c2:f2:21:84:ee:ba:3b:20:5a:73:ab:e3:09:ea:
03:b0:f3:2d:b8:eb:04:18:fe:de:d1:c0:a0:bc:8b:e9:36:7b:
3c:91:28:e8:9e:03:19:05:09:79:b1:82:58:0c:ad:1e:02:c1:
7e:8a:e3:9e:de:cc:05:a5:0a:23:84:44:cb:d2:fe:30:1b:84:
1c:0d:5b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:35:40 2026 by rpki-client