Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: O9TIJsbDOrojB1HoVr0hysgG4dWB8GkJX5zv5QWu6mQ=
Subject key identifier: E2:DF:F8:74:F1:02:95:42:16:EB:C9:99:21:D6:91:20:BE:94:E1:04
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 019EBFFF385D8292E2E683605F66C6E768DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0AD9
Signing time: Sat 13 Jun 2026 08:00:34 +0000
Manifest this update: Sat 13 Jun 2026 08:00:34 +0000
Manifest next update: Sun 14 Jun 2026 08:00:34 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: hgXimZcuLgEyYcvUNsUkrL9WNSOZsvla+WWli/ce3BI=)
2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:38:5d:82:92:e2:e6:83:60:5f:66:c6:e7:68:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Jun 13 08:00:34 2026 GMT
Not After : Jun 14 08:00:34 2026 GMT
Subject: CN=e2dff874f102954216ebc99921d69120be94e104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:68:30:e8:09:06:27:6c:08:4f:aa:ba:30:
ae:80:3e:ef:a7:76:75:6a:c3:82:b5:2c:99:4b:0d:
25:ad:46:4d:e9:96:59:f2:10:b9:54:0c:4b:17:09:
e0:10:2f:ac:f6:50:1c:34:57:d8:0b:26:db:f9:ec:
4f:74:a2:21:3a:98:cb:b7:3d:be:4c:fe:93:48:88:
88:e2:f7:5a:1b:a9:e2:52:2d:53:0f:ea:1d:f3:83:
8f:11:ac:da:15:f5:29:4c:22:ea:f2:6e:7f:93:60:
47:c2:2f:c8:df:2b:5f:84:86:13:0c:95:c1:92:23:
d4:8a:68:e9:19:e7:0c:64:63:eb:d4:b8:8c:24:67:
73:1b:60:cc:b0:b3:eb:5b:3e:ee:24:8d:e3:5d:50:
1a:40:10:66:ae:20:bc:5f:63:b6:3d:92:ba:2e:ab:
36:e9:1a:24:6a:30:73:ff:43:4c:41:b4:2d:c5:f5:
0b:88:9d:9d:23:4c:6f:3d:b4:dc:a2:9a:29:f7:2a:
cf:33:27:60:a3:6c:b7:80:4d:26:0a:97:66:f4:48:
14:bc:a1:dc:fd:50:6b:0e:af:19:cb:65:a3:af:0c:
ae:19:a1:50:be:07:63:17:20:56:2b:13:e6:f1:30:
bc:f7:61:00:06:d5:c8:a7:50:a0:ca:fe:20:de:5e:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DF:F8:74:F1:02:95:42:16:EB:C9:99:21:D6:91:20:BE:94:E1:04
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ec:8a:5c:4c:9a:3e:b5:26:de:d4:18:3b:5b:68:27:52:11:
11:17:b9:6a:03:88:da:4b:14:a3:e0:e4:66:57:3d:57:6b:61:
ee:2b:2d:04:27:f5:9a:a0:2a:0e:b3:ef:2c:d8:3d:8a:27:25:
f9:7a:22:1c:ff:1b:67:44:26:d1:54:35:a8:3f:08:3e:53:a9:
f0:b9:6e:e2:8a:92:5a:21:9a:cb:a8:a4:36:99:63:eb:eb:f8:
aa:a5:c9:52:85:81:b5:b2:a1:0d:aa:69:73:eb:73:4e:ad:3b:
06:65:8b:ae:10:7f:a9:31:21:42:83:8b:4c:27:1b:54:5a:cb:
88:b4:6c:ee:61:51:a2:21:04:a4:23:4f:68:71:97:a3:87:0f:
aa:94:4f:9a:c4:17:c6:7f:5e:38:28:a0:eb:45:1d:79:73:a9:
5c:c0:1f:f9:8b:de:3b:8d:72:8b:aa:56:93:d2:40:d2:06:e4:
bb:9a:fe:4a:cc:ba:40:1d:62:9e:f6:eb:9c:98:29:ca:72:a8:
68:af:92:b7:3c:e0:d0:5c:7c:b2:42:97:13:83:49:34:3e:ad:
b0:94:bd:24:a7:c7:49:2a:02:1a:89:b7:f4:6e:fb:33:08:d1:
32:2c:db:da:ca:1a:75:6a:a9:a7:46:2b:83:cc:38:d3:50:26:
46:ba:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:12:07 2026 by rpki-client