Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: pOb2+89SMHDkYSxzbcvcmZv4GHp25xkaTMCAMGrgNTU=
Subject key identifier: 32:B0:30:46:C2:B0:9C:CE:2F:33:97:3A:30:C0:B6:85:38:D3:0F:AF
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 019EBE10A6927E082422B5501FB6C0FC8077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 1403
Signing time: Fri 12 Jun 2026 23:00:22 +0000
Manifest this update: Fri 12 Jun 2026 23:00:22 +0000
Manifest next update: Sat 13 Jun 2026 23:00:22 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: sgi2ICbekn8qRjDehdCpQTv/Ou5/HJiAdR6udUT7DEo=)
2: 9hD2ERgxFZRceTwyPk94l0SmsBw.roa (hash: 7W+094dJdVnFZLMoB+fr0KNBxnfuASm7T/kRouyIeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:a6:92:7e:08:24:22:b5:50:1f:b6:c0:fc:80:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Jun 12 23:00:22 2026 GMT
Not After : Jun 13 23:00:22 2026 GMT
Subject: CN=32b03046c2b09cce2f33973a30c0b68538d30faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:09:c2:7b:20:76:1f:4b:a6:67:d1:f8:bb:
8d:eb:64:65:13:2c:b2:5d:9e:bf:f0:65:b8:d1:4f:
ed:48:8d:c9:eb:09:1a:e1:8f:95:ef:3f:3e:f3:97:
f4:df:58:21:6d:69:86:f3:e1:64:ec:06:bd:b9:4a:
fe:df:42:b3:1b:3e:13:5a:eb:55:47:25:c3:8c:0c:
1d:07:61:26:1a:10:18:55:89:71:f2:ad:ca:03:35:
0f:de:de:86:88:70:5e:ef:5d:67:74:1a:c4:6b:d9:
8b:50:28:1e:c6:43:8d:4d:7a:76:3c:98:f4:9f:75:
98:ca:39:4f:4c:df:7e:3e:0e:31:79:65:13:37:3f:
35:cc:81:41:f4:eb:5b:f7:f2:06:9c:a8:41:b4:f1:
37:0f:77:76:c3:87:9d:63:b8:d5:3a:e8:e2:04:71:
8b:ab:b3:9e:0f:a0:2a:52:59:da:31:9b:87:34:70:
ae:a2:6f:27:77:90:06:07:96:f8:3a:a9:eb:4b:ac:
75:37:d0:ac:b4:d1:3b:d7:fb:21:6a:ae:ef:42:ae:
f2:6f:b4:08:ce:1d:fc:ba:46:4b:74:d7:70:9e:ac:
59:7a:89:d0:87:7c:6a:15:16:d0:fb:eb:27:bb:5c:
b8:60:d2:ec:ee:60:6b:5e:12:d6:64:69:97:6c:db:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B0:30:46:C2:B0:9C:CE:2F:33:97:3A:30:C0:B6:85:38:D3:0F:AF
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:13:d9:57:f7:37:4d:1e:0f:d4:35:e1:e1:0d:7a:9c:5c:d6:
2e:93:e7:cc:55:6c:ad:51:10:ad:53:ac:c9:2a:b3:7d:26:f9:
b8:db:49:dc:e6:92:3c:84:57:b1:47:08:46:ba:20:23:f1:12:
6d:e3:c9:24:62:f6:f8:95:17:45:25:44:db:ad:57:13:50:de:
c1:96:59:79:16:7d:d8:a7:a0:a1:f7:11:25:1d:ff:b0:c8:1f:
34:ae:bb:e8:30:81:36:c0:30:e0:e0:7b:bc:53:9c:51:0f:ee:
c0:b3:13:af:3f:53:a8:65:d6:98:4f:cf:e9:d1:5d:0a:25:7c:
e9:40:0f:45:c7:da:9c:f6:9d:30:1b:df:ec:47:ca:6d:89:c4:
d9:42:58:7f:b0:e8:db:9d:1c:fd:ba:b0:99:d6:50:68:c2:78:
96:d1:e2:42:22:df:13:74:2c:bf:6f:9e:b7:b2:29:e7:03:d6:
1b:ca:55:51:c2:42:6b:5f:09:3c:d6:21:8b:43:fb:dc:9a:de:
0d:b4:84:65:a4:1f:cc:9e:7a:ae:a5:6b:cb:2a:8c:73:4f:3d:
5a:5d:7e:71:e0:e7:4f:dd:50:0f:5b:66:08:53:50:69:37:a2:
6d:43:2b:f6:76:21:47:62:eb:ed:a7:c5:c7:b0:dc:c8:73:88:
d7:73:54:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:22 2026 by rpki-client