Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: JCljKOASBE/JYJHEQ1xWFMM+6yulluQLMfesW5bF+h0=
Subject key identifier: E4:90:4C:30:94:29:0F:DB:3C:A5:A1:30:93:F6:25:D8:78:F1:2A:EA
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 019EC06D21547428B45DBAB9549E73C63FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 0A1B
Signing time: Sat 13 Jun 2026 10:00:37 +0000
Manifest this update: Sat 13 Jun 2026 10:00:37 +0000
Manifest next update: Sun 14 Jun 2026 10:00:37 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: bnNS5PyiK/sks5OtvkVk1/vRfJK668MI5H/0VamuER4=)
2: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (hash: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ=)
3: iLu5B9aeu4NSBPHA9ivJ0i8Z4AA.roa (hash: acJKMRQ5Omks2WW0pWsL2TS7UwZ6+sYIZuHt+6L6NH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:21:54:74:28:b4:5d:ba:b9:54:9e:73:c6:3f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Jun 13 10:00:37 2026 GMT
Not After : Jun 14 10:00:37 2026 GMT
Subject: CN=e4904c3094290fdb3ca5a13093f625d878f12aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:f9:cc:4f:00:4b:ab:a7:51:e3:1e:d0:2f:
7b:88:5d:4b:49:30:85:35:fb:36:c0:bd:fc:52:6b:
4c:dc:5d:3e:52:f3:b8:53:50:76:6e:19:90:04:7e:
01:6c:c1:44:d6:79:92:1b:68:42:69:a2:2e:aa:70:
2f:33:78:e1:d5:5b:85:a7:70:98:f5:d2:8f:af:cc:
ce:96:d9:04:8c:f7:4b:c0:01:69:73:5e:8f:e6:53:
13:2a:24:3c:c6:71:b9:69:49:9c:7f:59:cf:8f:4c:
b5:24:4e:bf:f6:4c:60:e6:6d:10:45:86:a3:3f:c2:
7b:70:de:8d:4b:fa:8a:d5:95:43:f8:dc:0a:40:5b:
cd:15:a5:ec:a9:58:b1:87:7d:2c:6a:b6:73:94:ce:
2c:86:db:97:40:d7:90:0e:f9:6a:cc:fb:32:c1:28:
32:21:bb:21:a1:6a:a7:99:c8:fe:05:d1:5d:4e:b6:
99:0d:1a:d0:b9:8d:77:b3:d0:87:d2:b1:92:6d:3a:
e7:ca:d3:a7:b8:e8:d3:da:66:a3:e6:ea:24:11:29:
25:36:9b:b6:fb:7c:1f:69:bc:52:49:62:73:63:0a:
8a:ab:ed:e4:66:21:5b:9d:77:c3:9a:91:36:6b:ac:
2b:5e:bc:14:7b:09:b4:40:58:43:18:ce:91:f7:27:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:90:4C:30:94:29:0F:DB:3C:A5:A1:30:93:F6:25:D8:78:F1:2A:EA
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1c:6e:58:2f:e2:d4:ca:ab:cb:13:53:af:bc:55:9d:f2:47:
92:c3:a5:67:3f:04:a5:ae:42:f3:ff:3d:06:16:36:6e:82:38:
73:bd:71:8a:b8:75:8d:61:e8:32:f6:71:75:ca:2c:a0:a2:71:
a5:fd:2a:72:da:20:41:05:58:a7:99:49:37:f4:c3:43:71:b7:
d3:48:ac:20:d1:7a:56:7d:c7:b6:ac:98:64:a3:d8:6e:8b:aa:
b4:71:38:90:58:84:93:b4:5e:44:e2:e9:8b:ef:e4:77:95:db:
33:a1:b0:7d:56:7c:9d:86:6e:eb:08:57:e3:40:a1:b4:a4:f0:
ca:da:6d:5a:86:b4:01:b3:72:29:60:19:ab:df:14:35:42:af:
0c:41:54:e9:3b:67:6a:4b:f7:7b:22:96:36:44:de:e2:53:4a:
82:d4:9a:27:49:db:d9:92:ee:06:6e:83:d4:bb:46:90:3d:cb:
e8:03:d5:b4:1d:d4:5a:6e:65:29:fb:81:2b:35:db:40:6b:89:
ff:cf:7b:87:c6:00:30:9d:32:8a:1e:85:65:18:7a:53:c9:f5:
3c:0a:25:dd:f5:cc:c0:24:c8:1e:a4:83:5e:77:02:72:4b:82:
92:2c:d0:de:bb:f3:6f:9a:02:05:03:10:c1:15:fe:dc:d1:0d:
fe:94:44:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:11:04 2026 by rpki-client