Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: VFHN8Y3ZJ4f2aXyl0DbzEur12mdi773wlrQlXOAneSQ=
Subject key identifier: C4:9B:FE:95:DF:AA:F7:CC:E3:EE:19:E7:00:AE:D4:83:4E:74:B7:5D
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 019EBDA30B8E19BBB33D31B792AFC0D42F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 124E
Signing time: Fri 12 Jun 2026 21:00:39 +0000
Manifest this update: Fri 12 Jun 2026 21:00:39 +0000
Manifest next update: Sat 13 Jun 2026 21:00:39 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: mmND1SHnKOr51TarYr12KwhQX4oiDg88nktz+hNHcSc=)
2: VK5J5QXmsEfKr-yeuBSA7pgMRS0.roa (hash: QEOQEZoGmfNdE7eYFQFsPYIivVEyHZdR3wVt3CbFPeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:0b:8e:19:bb:b3:3d:31:b7:92:af:c0:d4:2f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Jun 12 21:00:39 2026 GMT
Not After : Jun 13 21:00:39 2026 GMT
Subject: CN=c49bfe95dfaaf7cce3ee19e700aed4834e74b75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ef:67:d1:a0:71:4f:74:44:67:a5:10:c9:94:
e3:4d:86:11:76:cd:58:5c:a7:2a:1c:a2:dc:8a:e5:
46:e0:89:c1:08:bb:d3:0c:ad:46:19:8b:50:57:de:
fb:46:50:7c:10:57:be:ed:1d:c0:54:a3:7c:34:f9:
62:91:c6:d1:ed:92:75:b3:c0:2f:0b:45:a3:e8:43:
f8:2a:16:e4:f7:68:f3:52:0b:2f:9f:20:cd:86:d2:
9e:2d:3b:cc:4c:74:4f:17:35:6c:f6:fd:d8:38:e6:
5c:31:a8:e4:3a:b8:1a:e7:1a:88:2a:7d:b2:86:d0:
7c:d7:f1:5a:96:76:02:62:a2:64:90:da:37:0f:37:
a5:2b:d6:c7:ef:b8:45:16:88:fd:66:42:c9:93:e4:
8f:b4:e2:9a:ef:65:96:12:ab:70:de:ed:b6:7d:bf:
0d:b0:a9:9b:56:cb:bd:26:16:fb:18:4a:16:d6:14:
bf:8c:02:21:b1:41:64:77:a5:76:d2:38:3b:09:71:
5b:a0:40:b4:4a:13:6d:09:aa:69:bc:10:1c:21:c6:
19:ff:b5:c2:64:e2:3f:20:c7:9a:16:29:52:87:63:
92:fa:d6:e6:5c:7d:49:8a:75:6a:31:ae:71:65:4e:
01:09:8f:c0:14:c8:61:dd:ce:94:68:fe:4a:0b:dc:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9B:FE:95:DF:AA:F7:CC:E3:EE:19:E7:00:AE:D4:83:4E:74:B7:5D
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f6:da:c5:40:0a:ff:b7:fd:5e:b2:aa:dd:af:4e:ad:12:5c:
a9:0f:8e:a6:1f:ed:0f:97:c2:52:23:ef:09:1f:9e:26:d5:a2:
a7:77:10:1e:bc:0e:4d:95:5f:6b:28:89:d2:24:12:52:f6:69:
df:79:97:19:66:70:de:4a:01:38:ad:0d:98:7e:4b:8f:88:9a:
5d:a2:40:2a:ed:f6:b8:7f:d5:ab:c1:bc:8c:8e:19:40:58:91:
34:f8:70:9e:4c:54:52:b0:c0:a9:7d:cd:62:46:ff:02:c4:b6:
2d:39:de:39:57:9d:94:c9:94:ea:c0:a0:f0:29:8a:e6:9f:3d:
9b:3e:e9:5a:a8:ae:dc:e4:9c:54:93:0f:91:d6:ae:28:a1:7f:
52:30:f2:d1:8d:09:be:db:c7:8c:24:4b:ea:0e:d4:42:a7:2f:
a6:c8:5e:41:08:3a:f1:e8:f9:44:57:01:13:1e:e9:07:79:d4:
d1:0e:fa:10:fd:27:50:de:34:ab:75:0d:24:38:91:55:80:44:
7e:b3:56:17:a2:db:09:1a:2b:30:72:fe:d1:a1:0e:15:bf:33:
f4:e7:78:22:1a:62:79:49:12:46:e4:72:c2:31:c4:28:b5:a1:
44:1b:5a:64:e8:dc:ae:e1:72:ea:f0:a5:ca:01:a4:26:61:9a:
ea:e4:89:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:27 2026 by rpki-client