Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier: xOh3nbSDTRaHruB0wYDhJUj60oqbNaYiamgPOn+uxjM=
Subject key identifier: 90:21:B1:0F:AA:61:B8:CF:48:A3:EB:7E:CC:E4:AA:73:C9:39:8C:9C
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial: 019EBDA2D5E9E0957A7C869F11634F5AC8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number: 0D1C
Signing time: Fri 12 Jun 2026 21:00:25 +0000
Manifest this update: Fri 12 Jun 2026 21:00:25 +0000
Manifest next update: Sat 13 Jun 2026 21:00:25 +0000
Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: nYhcur6U3oEA/uMzSn9drgto0mi0TkTlZOq8+YOhR10=)
2: oDHRY2p4X6qIRWZRDGncYz0E4F0.roa (hash: DS/v77bYi2U6NujVd5gI6DZQbrS7LjtyuAFDzI6STCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a2:d5:e9:e0:95:7a:7c:86:9f:11:63:4f:5a:c8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Validity
Not Before: Jun 12 21:00:25 2026 GMT
Not After : Jun 13 21:00:25 2026 GMT
Subject: CN=9021b10faa61b8cf48a3eb7ecce4aa73c9398c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:c4:55:11:6e:35:fd:f6:57:03:74:35:c5:
c4:12:a5:a0:70:57:16:87:43:f5:ec:c1:28:9f:d1:
1c:e8:5a:46:29:a6:a3:7d:25:b0:f9:04:21:ca:58:
90:5a:8c:0f:b4:23:43:35:be:4c:b9:b0:3a:fe:31:
2d:08:9b:ee:de:43:57:84:2f:ea:c5:ea:ad:80:9b:
36:24:67:b0:75:88:db:0d:d6:04:b2:fa:a2:3f:b6:
62:81:3e:4a:8d:15:78:7b:51:ce:39:dc:6b:d7:51:
7f:52:38:1e:d4:f1:18:8d:10:07:a3:c4:b3:83:c5:
6d:7c:05:b6:3c:55:bd:bb:94:c4:10:61:44:e7:45:
45:8e:ec:8d:a4:23:ec:8b:c5:5e:64:71:af:5a:37:
f5:39:a4:02:f8:3e:db:fb:41:93:11:bb:6c:3f:f9:
00:1a:87:4c:ae:f4:52:b1:79:80:d7:84:07:a7:cf:
e1:09:5b:3d:fd:42:5e:af:d1:55:d4:8e:1a:a0:c4:
83:c4:95:31:6f:25:2d:06:3d:9d:39:7f:34:65:dc:
4a:e3:cb:d9:25:62:f8:5e:b1:26:f5:b1:aa:64:8b:
54:43:bc:fe:ed:0f:6f:d2:03:5d:e4:63:a2:6b:d2:
18:60:46:79:24:37:fb:12:47:b5:5b:34:a9:7b:6a:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:21:B1:0F:AA:61:B8:CF:48:A3:EB:7E:CC:E4:AA:73:C9:39:8C:9C
X509v3 Authority Key Identifier:
keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:68:a2:92:96:d3:3b:32:b4:91:5a:4c:63:42:5a:2e:f4:45:
d9:93:fa:32:5b:d1:42:e9:20:9d:f8:69:cd:10:14:4d:9e:0b:
d5:2b:5c:0c:31:12:24:cc:ef:02:a8:ed:cf:43:52:aa:cb:06:
88:00:c7:83:1b:7c:3d:7c:f9:c9:1f:f3:ec:8d:e2:05:71:b4:
33:8e:16:f8:4d:72:f9:fb:ad:af:fa:0d:a6:25:15:c3:22:48:
23:71:2c:b7:6a:fc:96:08:7e:4b:86:7a:6b:02:63:e3:88:60:
59:e2:7f:9b:59:cd:1d:ad:e6:fd:a2:f5:6a:65:6f:54:f0:60:
d9:54:83:fc:a8:7c:0f:6d:62:2c:83:a5:39:b5:aa:07:93:7a:
27:68:5b:ae:a3:34:59:14:f2:a7:fa:c2:29:84:52:16:9d:2b:
86:24:5a:da:b3:99:11:f6:7f:c3:8f:b0:fe:1f:61:80:49:34:
3a:76:a3:07:58:0a:31:2c:a4:58:05:1b:a7:c2:2a:d1:df:1f:
a5:1a:90:9d:16:ba:d2:a8:88:5e:a6:8f:85:ad:bc:02:64:50:
f6:94:36:f1:73:9e:66:3c:d6:64:b2:83:48:e9:2f:1c:93:5e:
bd:0c:49:f3:aa:fa:9b:45:1e:64:03:34:58:7a:6b:e6:d5:94:
55:8d:b4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:46 2026 by rpki-client