Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: AAM8aMuiVAzmfVBpRQj2wLLaidgLv9K+iWKvpD8xrN0=
Subject key identifier: 42:C0:59:46:7D:52:B3:E7:E7:6E:76:13:73:8E:70:C9:C4:AE:5F:B1
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 019EBF23374D3B215B4C21AC749E2CE9A50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 13A3
Signing time: Sat 13 Jun 2026 04:00:16 +0000
Manifest this update: Sat 13 Jun 2026 04:00:16 +0000
Manifest next update: Sun 14 Jun 2026 04:00:16 +0000
Files and hashes: 1: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: GAA7lPDzObAI+M12KG7YeihC6LeJq5bx/Nl18eIstuY=)
2: iir-MP9u--5X9N6sLaapXHQB96w.roa (hash: KYgiiMZkt1y8OXMvRPUfLQi6b3EsUMCv28kMOUxnz3s=)
3: l8WM5SXhhLHZk6-0rTuPZujifDU.roa (hash: OwasY0cE4RjsEomhMQYGit6AbKnSUZ5M+37Aov/WE20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:37:4d:3b:21:5b:4c:21:ac:74:9e:2c:e9:a5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Jun 13 04:00:16 2026 GMT
Not After : Jun 14 04:00:16 2026 GMT
Subject: CN=42c059467d52b3e7e76e7613738e70c9c4ae5fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:7c:89:65:fd:1e:2a:09:6c:0e:5d:25:a2:
f5:f9:57:df:c0:f8:66:6c:f1:69:d8:d5:3f:a2:e1:
b5:70:c4:06:f3:66:2d:7e:e2:f4:d7:5a:84:f2:11:
21:56:ea:20:8d:27:05:fc:68:a1:b2:23:30:52:5b:
b6:0e:bb:29:a9:47:64:e5:e1:56:ce:0a:a7:b9:6d:
77:27:f5:6c:24:b7:24:de:5a:f9:28:c3:af:2d:02:
f7:d5:12:be:36:80:53:f1:ee:aa:70:f1:28:bb:7c:
3a:75:f4:40:3b:48:98:76:4a:83:38:12:a1:61:35:
6f:71:20:d2:98:cd:bd:70:34:0b:e5:44:a5:09:15:
03:64:48:24:82:63:9d:94:c7:e8:d7:ae:e2:99:6f:
1e:27:d1:47:f1:c0:55:54:79:b8:41:b4:b7:3a:55:
c5:c3:ac:83:1b:f0:e0:37:23:2e:91:13:16:67:6f:
63:fc:a2:96:fd:50:d3:aa:7a:ba:a2:8f:72:af:78:
35:3f:dd:be:15:bf:d6:37:d5:99:2a:68:da:dd:1d:
be:ab:28:93:96:08:99:a5:90:5c:1e:84:e6:f4:3b:
92:71:e6:8e:25:5d:5d:81:15:12:a3:9e:50:90:e2:
41:e4:5d:d4:90:0c:4b:fe:76:e0:a6:7b:43:a1:8e:
b4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C0:59:46:7D:52:B3:E7:E7:6E:76:13:73:8E:70:C9:C4:AE:5F:B1
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:be:4f:e0:bd:64:b2:d4:06:60:08:20:5d:d0:b2:69:99:c5:
2d:31:f2:19:d0:27:76:c4:46:49:61:c3:13:47:82:6e:f8:b6:
a4:39:2d:18:f5:7a:3f:db:30:f5:9c:58:c7:34:72:ab:25:26:
27:f1:a7:d2:10:fe:d3:cd:eb:d4:e5:32:be:83:fa:f1:74:d4:
68:3d:cc:83:d3:5e:88:2d:c0:34:91:9a:bc:c8:5c:ae:be:4c:
6f:04:a7:fb:48:91:bf:33:9d:3b:bd:05:af:e8:16:0e:4b:76:
45:ae:08:0c:5b:8d:76:86:cd:34:63:29:36:b8:a0:a3:67:fc:
60:46:fb:1a:45:d5:f5:26:2f:40:a5:c7:7e:eb:e3:6e:4d:b7:
3e:19:06:f0:46:a7:a3:7b:1c:34:94:36:f8:ca:ab:64:62:4e:
27:62:e3:6a:4c:60:b5:4c:3a:05:a8:05:cf:e5:78:b3:22:98:
7c:3e:50:99:f8:af:b1:a9:90:29:0b:46:dd:79:5d:5a:83:b7:
d5:e9:96:19:54:db:19:b2:08:31:f8:2a:e1:8d:a9:0d:46:4c:
19:5f:fc:90:32:72:92:a5:92:c8:e2:0c:1e:f1:ca:9a:bc:32:
46:9e:3b:d3:c0:9e:57:7f:c3:a1:eb:ff:ca:1a:f9:77:b5:62:
9f:8b:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:33:14 2026 by rpki-client