Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: Ejm35GTY8iqj4AYhm5FEISIftilz3/fnStgwiWIXJk0=
Subject key identifier: 20:5D:1B:10:13:48:12:31:05:42:BF:A1:73:AF:F3:F0:89:50:FE:54
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 019EBEB62563E8723D17B1FF34B93C39D1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0F8C
Signing time: Sat 13 Jun 2026 02:01:08 +0000
Manifest this update: Sat 13 Jun 2026 02:01:08 +0000
Manifest next update: Sun 14 Jun 2026 02:01:08 +0000
Files and hashes: 1: Oyzshlci-9jPVV78Pg3C9EqgWpQ.roa (hash: bjeZr+jgrrjOajuuWHyD7Sxiyz43CZIWH0Yks80/PvM=)
2: ZGp0FDP8qvB8cgr-1S3_xdm1jys.roa (hash: 9rCAt6z+0Tts+8L8PuhpJuck/ju+E8/tnJZUEMT7+6Y=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: Cl3ma0z+wlI6FMCeVgtEsxli9j7C+hHTKvsW5R21ol4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:25:63:e8:72:3d:17:b1:ff:34:b9:3c:39:d1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Jun 13 02:01:08 2026 GMT
Not After : Jun 14 02:01:08 2026 GMT
Subject: CN=205d1b10134812310542bfa173aff3f08950fe54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fe:5d:cd:08:2a:49:83:34:ae:9b:45:40:d8:
f8:2f:67:c0:56:18:80:f4:f9:e7:e0:67:fb:a8:6a:
1f:e4:a0:99:46:81:91:b6:9f:a1:21:e8:42:c3:3d:
17:27:78:1f:09:5c:2f:b1:c9:e5:48:20:90:db:c8:
65:0f:84:bc:71:bf:4d:20:1f:40:f8:75:34:9e:91:
2c:75:ed:ec:41:0d:cc:c2:69:82:5b:d2:05:18:b3:
f1:e5:04:59:b7:38:52:f4:75:8e:55:86:34:9b:03:
b0:1a:92:43:aa:f8:31:31:f7:3b:5f:e5:6f:7b:03:
85:8c:8c:21:9f:96:3c:72:f4:b5:db:9c:3d:3a:1b:
91:68:46:ae:d1:2a:e7:25:65:02:82:f8:13:e1:37:
9e:93:e9:0e:73:fb:eb:5f:e6:57:22:70:09:d6:2a:
e4:e4:af:b5:4c:3a:1c:51:75:8b:00:be:60:78:44:
47:92:c5:2c:ec:48:cd:50:cd:38:7f:43:9e:6c:22:
8c:f9:38:13:b7:67:b7:df:3b:41:d4:6a:44:52:9f:
52:a7:dd:98:ad:7f:fd:fb:b3:ce:5a:fd:c4:00:ee:
2c:dc:3d:a3:b9:a0:2a:0f:49:cc:a3:b4:1a:95:f2:
4f:dc:68:9e:77:67:ed:d9:11:77:b7:7d:8d:09:bb:
6f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5D:1B:10:13:48:12:31:05:42:BF:A1:73:AF:F3:F0:89:50:FE:54
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:77:bc:4c:75:0d:87:cd:d6:a7:3e:8c:27:ac:b2:6e:1c:39:
ce:f3:18:61:6a:48:c8:5e:94:06:9d:c1:80:ec:28:7f:f5:e8:
08:ed:e9:33:f7:58:df:72:27:b7:8e:72:48:10:77:53:38:30:
27:3c:2d:57:f6:6f:19:06:1a:22:80:32:ec:ec:83:4f:2e:12:
27:42:c7:4c:08:bf:81:83:f4:36:8b:36:39:4b:7f:60:8e:90:
21:a7:a6:5e:f1:fc:a3:1c:c5:8b:63:d7:97:bc:54:6d:d9:ec:
7a:81:70:00:3b:93:16:f0:e3:75:75:a8:9c:ea:2f:72:2d:44:
63:78:a1:97:d3:15:f9:72:e8:4d:b1:2d:a7:7b:ae:6d:4f:70:
f0:c9:c0:3f:79:d4:e7:ba:70:93:35:67:0d:74:00:1f:e1:4c:
01:50:c0:4a:95:36:42:de:68:d5:a6:9b:f0:39:82:ac:82:8f:
7a:b4:b5:c2:c5:ac:f2:15:b4:97:27:d9:f8:e8:3c:67:b3:e6:
3a:ba:d8:78:fd:3b:d2:a5:38:3b:31:be:c2:cd:8b:59:50:3c:
1a:8a:12:78:49:9f:11:df:ea:fe:82:7e:4c:62:91:1d:2b:5e:
98:40:ec:51:1d:9d:7a:29:35:09:7b:83:62:31:09:69:bb:ed:
ea:30:14:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:44:14 2026 by rpki-client