Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: xOr0zy0BjNb/Hdzho3p1U4Viw8SDU+xiAvKPN3vcG8Y=
Subject key identifier: 4B:CB:24:7E:74:8A:88:2C:48:8F:61:41:12:A3:96:9A:5D:F1:0F:1F
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 019EBF238DC8E1232B756057FA4104FA6AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 10E7
Signing time: Sat 13 Jun 2026 04:00:38 +0000
Manifest this update: Sat 13 Jun 2026 04:00:38 +0000
Manifest next update: Sun 14 Jun 2026 04:00:38 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: 3fohYMUWbChUXf4kqZoIHsg5UAtFVKnRXyK/VgP/48I=)
2: kAZmzQ0U-tWvr0f-02x69bXjUAU.roa (hash: 5WlvJHiQOeb7v4dnN4FdtefOtV8drHOu9JZO31PSCrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:8d:c8:e1:23:2b:75:60:57:fa:41:04:fa:6a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Jun 13 04:00:38 2026 GMT
Not After : Jun 14 04:00:38 2026 GMT
Subject: CN=4bcb247e748a882c488f614112a3969a5df10f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:81:ea:c5:d3:72:18:f3:d5:ea:ed:c4:31:
76:48:3d:7b:5a:b0:c6:6a:61:25:45:da:d8:14:74:
96:24:2c:4f:79:ae:36:40:41:64:5d:2b:b3:85:fa:
61:f5:74:19:55:a9:b4:f8:74:77:e9:50:3c:c6:24:
eb:88:67:d5:0a:4d:03:80:b6:94:a9:4b:76:22:32:
80:19:5b:8c:09:4d:0d:37:16:69:76:91:bb:2f:74:
e5:43:89:b4:7e:ff:ce:10:44:35:2e:71:41:87:33:
5b:80:9b:6b:52:1c:a2:3a:fe:d8:d1:80:5e:ff:8b:
6b:26:49:0c:f5:d0:7f:a0:19:2c:cb:f5:ef:52:fc:
ec:1f:9c:d0:6c:be:ff:e6:b2:aa:31:c2:6d:6b:9b:
fd:3e:15:05:a3:99:80:27:9c:ad:2f:d8:6a:5b:ad:
d8:d1:9b:c3:f7:1e:67:a8:fe:17:a7:95:f3:49:24:
79:87:d4:e0:d8:48:fb:e1:e6:66:e1:ef:23:67:0e:
dd:1c:32:c0:fd:91:8c:64:75:b5:80:87:00:04:84:
06:d4:55:ec:4d:02:4a:26:27:0b:f2:b2:1c:dd:ee:
5a:60:78:2e:28:7f:55:e6:c4:65:f4:35:96:66:92:
45:ce:70:8d:c8:cc:d1:81:60:84:44:79:e0:14:48:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CB:24:7E:74:8A:88:2C:48:8F:61:41:12:A3:96:9A:5D:F1:0F:1F
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:16:98:34:11:b7:2c:e1:3c:1c:c1:88:d3:00:03:ad:7b:50:
45:53:e9:67:99:16:bd:f0:6c:f8:29:d1:16:44:af:23:22:fa:
b5:a9:33:f3:5c:1c:01:53:6c:e8:a8:5b:14:5d:f0:79:3c:81:
b0:dc:85:e2:0e:08:ed:3a:d1:a5:fd:69:15:91:12:23:99:bb:
49:c8:d2:7f:3c:38:f3:d8:02:8d:ed:35:ea:7a:7c:48:5c:42:
bc:7e:39:dd:3d:ea:f0:bf:a2:b9:d6:a4:b3:9a:1e:a0:73:9d:
f5:76:e6:48:4c:26:c4:0f:71:a1:ce:20:70:7f:22:64:db:de:
ee:d0:27:9d:06:26:8d:58:bb:8c:9f:b0:a7:e0:c4:ef:75:e6:
26:16:45:80:ce:d7:d6:08:85:93:11:73:ca:24:c8:f1:c4:11:
a5:90:0b:1f:4f:3d:7c:0a:b8:6a:36:ce:86:91:12:83:ea:93:
88:0f:39:00:ae:15:5f:f4:d0:ea:4a:a7:32:30:52:7b:c1:56:
de:81:59:2d:2f:75:15:da:42:bc:52:fa:b9:df:b9:d0:7f:2c:
a3:46:e3:67:c7:3e:77:81:fd:0e:32:07:a7:e6:cb:8f:e0:cd:
9a:64:71:42:d7:6d:7e:63:00:fc:9d:72:d1:68:15:f3:b8:fa:
ab:83:f3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:15 2026 by rpki-client