Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier: RJiH8A8CHDGk+31208NxoYJa7xcCqiU+3tXIA26jQmc=
Subject key identifier: 71:7E:B9:D0:9E:29:09:3A:D0:FA:1B:E0:10:8C:6B:D5:CD:B3:34:0D
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial: 019EBEED3CDC33536B81E7DA8F162CDA863C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 03:01:18 +0000
Manifest this update: Sat 13 Jun 2026 03:01:18 +0000
Manifest next update: Sun 14 Jun 2026 03:01:18 +0000
Files and hashes: 1: 1-0HVLayObU8RuL6OrsnJm4gmTnI.asa (hash: KYPcud2EQy4OYgiyeuat0HLeEC0DLCcTFa4Ml4StUxY=)
2: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: w8GOOVlJ8iuV4A/XmoFDUAmq6h+82hXO0Ozxek79bnw=)
3: ZHNg-iGHdhJIyPbT0YesOHZSckA.roa (hash: jtRC2+2eYimT7dpLaE8cbiYXDkhbQMmqL54jAdK1K3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:3c:dc:33:53:6b:81:e7:da:8f:16:2c:da:86:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Validity
Not Before: Jun 13 03:01:18 2026 GMT
Not After : Jun 14 03:01:18 2026 GMT
Subject: CN=717eb9d09e29093ad0fa1be0108c6bd5cdb3340d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:3c:7d:a0:f4:ff:93:33:1e:eb:88:13:0c:
43:be:ec:da:79:77:4d:aa:47:18:de:81:f4:51:65:
99:96:79:9d:1c:50:0d:c5:44:d6:36:9d:9b:8c:24:
c6:b3:1a:63:7d:b6:c5:14:30:d1:ca:f3:36:64:34:
ab:a5:5d:72:ca:81:36:2e:60:27:38:43:48:be:54:
f2:34:7e:58:07:b7:1e:74:eb:fd:c4:a0:84:a3:68:
16:27:70:85:c1:21:cf:16:2f:a6:0e:23:a1:c1:d7:
98:80:a7:3c:34:3c:1b:19:55:9b:70:11:11:a6:55:
0c:9e:f2:a1:02:09:fd:1e:0a:2c:86:eb:a8:de:44:
b2:90:7d:e3:2d:c2:0b:78:43:56:90:fb:96:fc:5b:
f4:60:51:0e:0b:0b:63:1d:c4:81:10:4a:83:6a:0d:
de:ee:09:63:69:61:47:93:9f:fe:be:a0:72:9e:15:
63:5e:23:00:1f:2f:0b:40:97:35:5d:72:eb:16:88:
a2:50:ba:a9:44:18:83:8e:48:60:51:bb:60:48:d0:
3a:96:70:a3:e1:93:f4:65:0f:aa:e4:b5:88:f3:98:
97:a3:72:6e:85:57:57:43:c5:24:35:76:5d:a3:37:
d0:3a:52:85:fa:7e:1e:fb:08:2b:1d:fd:95:10:5f:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7E:B9:D0:9E:29:09:3A:D0:FA:1B:E0:10:8C:6B:D5:CD:B3:34:0D
X509v3 Authority Key Identifier:
keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:68:b3:fc:4e:09:6e:cb:c2:a7:d8:9e:b2:8e:3a:df:68:a0:
d5:5f:c2:dd:3b:90:18:27:35:10:9f:fc:91:79:c9:61:ba:46:
47:42:88:c6:4e:1d:ed:bf:29:8e:10:2d:eb:cd:b5:0e:2f:dd:
aa:62:60:ab:2a:db:4f:65:9b:3f:cb:80:66:61:d5:5c:6b:6e:
c8:e8:92:4a:1d:4b:c9:5e:7d:06:25:68:cd:ca:5c:5b:5e:b5:
34:24:89:18:c1:a1:3f:d9:02:37:d5:3c:e4:25:9d:e5:f0:ae:
12:47:55:8f:38:97:e0:17:a7:28:17:71:27:ee:fb:d2:58:76:
ee:19:82:2d:e0:84:e8:2f:3d:c6:fa:07:94:55:f4:9b:fd:0c:
20:f9:3b:a9:a9:8e:a6:62:2f:61:c9:bf:f7:53:b5:2e:f1:90:
83:f0:23:db:cd:ce:81:9f:64:3e:94:a4:25:82:0c:0b:83:9f:
e5:08:34:2f:4c:fe:38:1b:7b:04:6b:a7:dd:38:8c:a8:6d:20:
d6:10:cd:f5:c9:ba:37:25:85:4d:9b:36:92:9e:89:64:0e:96:
a8:d0:ef:35:57:89:5a:1d:df:fb:db:e0:93:84:bb:10:3a:2d:
62:93:4a:e4:21:ff:6e:0a:8a:bf:74:7f:f1:da:dd:b6:01:3f:
56:db:f6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:28:25 2026 by rpki-client