Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: kBEYsHTM7K/2oT8XKGiYsbs+qnkeYMeCkCJ2cEaenfQ=
Subject key identifier: 24:76:92:DE:3F:B8:4D:86:D7:4D:DE:0C:2F:13:AB:F3:8C:1F:B2:C8
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 019EBE7FE74D5A3129FA5F255896E90EEF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 149A
Signing time: Sat 13 Jun 2026 01:01:53 +0000
Manifest this update: Sat 13 Jun 2026 01:01:53 +0000
Manifest next update: Sun 14 Jun 2026 01:01:53 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: q8O2ujYv7YXAdUzVTFE1rT5kzyeKPZw/N2tqjJuhd0g=)
2: EMaV_sDtEC3ONnRr_ZacRZkjYek.roa (hash: uEhrTJgtxikjiJZwpMeYSv1aaXx9clVq4b4CFPBvQgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:e7:4d:5a:31:29:fa:5f:25:58:96:e9:0e:ef:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Jun 13 01:01:53 2026 GMT
Not After : Jun 14 01:01:53 2026 GMT
Subject: CN=247692de3fb84d86d74dde0c2f13abf38c1fb2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:23:f0:23:01:7e:8f:ab:86:e4:8b:cf:1a:
35:7c:8f:e3:75:b6:2d:d5:67:0c:3e:95:e9:10:0b:
08:28:45:22:70:73:32:a0:48:f7:a3:b3:0c:5e:85:
62:ec:92:d3:8e:d0:ae:6b:b0:4c:af:86:4a:9c:a0:
d1:1f:e5:24:fb:6a:f1:f4:1f:eb:c6:af:1a:a6:8b:
2f:6b:b6:80:a5:1a:ec:ea:55:d1:58:69:84:e8:42:
80:c6:da:8a:ea:c2:ac:ac:36:e8:f2:37:05:6a:de:
d4:b0:9f:44:27:dd:6a:b3:12:10:a0:24:a2:2a:bd:
21:95:89:94:4d:18:3a:47:91:c6:e4:73:e9:ab:86:
b5:30:77:dc:ce:25:67:27:a5:c7:21:92:53:ce:db:
9b:be:d2:ef:e8:a2:86:56:03:12:57:72:e2:50:11:
21:36:4c:72:d2:b9:e7:54:0d:8a:67:9e:d6:b2:6e:
5e:38:26:af:70:a9:a7:80:d7:7f:83:d3:43:e6:f9:
ac:33:84:6a:33:0d:26:b9:c0:9f:cd:c8:22:50:4e:
98:41:5c:ae:5e:4f:d0:14:95:e6:fb:11:9b:32:44:
71:8a:0f:e1:df:5d:f4:51:58:14:6f:d3:ce:7e:0a:
22:ee:4e:83:af:4c:fd:ed:81:bd:eb:b0:62:db:15:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:76:92:DE:3F:B8:4D:86:D7:4D:DE:0C:2F:13:AB:F3:8C:1F:B2:C8
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f5:83:ce:1e:da:24:3e:2b:81:9f:ac:20:19:f7:cd:81:86:
3f:4d:f6:0a:2a:3c:94:02:3d:cd:07:fe:18:eb:3b:c7:db:54:
d0:12:b7:80:58:81:11:1a:e4:a9:3b:4c:3b:93:ac:fd:4b:a1:
5d:f7:32:9d:e5:20:fd:00:07:04:ca:12:15:0c:55:99:37:79:
66:75:9b:b6:70:90:d6:f1:94:f6:72:54:dd:bb:55:9b:46:f8:
fb:df:9d:57:88:ef:13:3c:37:f0:77:d5:a6:37:6b:cd:31:5e:
1d:69:73:76:93:d5:7d:5c:32:02:29:b1:50:e3:85:37:e2:e6:
79:7a:c9:f1:24:43:68:ae:e5:cd:4f:98:85:a8:72:bf:53:6f:
cb:35:e6:d4:50:58:58:3a:5e:34:8e:6c:be:fa:1f:0c:16:c5:
07:5d:14:ae:33:96:86:4c:6f:46:b3:19:f1:4e:8e:70:cd:d2:
c8:d4:09:e0:c4:78:81:e5:f5:6a:6a:6b:52:bf:d8:02:41:bb:
c9:f3:ee:13:77:47:b2:a9:f3:55:ef:c3:21:37:8f:6d:74:92:
65:51:f4:46:5f:21:52:d6:4e:2d:1c:98:93:c6:7c:ef:0c:43:
4e:bd:ce:34:bd:e7:4f:36:28:aa:fb:1b:c9:1f:70:3f:79:db:
15:b0:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:09 2026 by rpki-client