Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: u7uc/axxrtZMUM2MRhoooy4hs87RV4sKj1OE29h4BBw=
Subject key identifier: 43:89:7C:03:BF:AB:8B:C8:34:C7:C3:12:86:8E:61:63:0B:93:1B:70
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 019EBE7F75CB3630086C9EF9B9067EA673D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 1009
Signing time: Sat 13 Jun 2026 01:01:24 +0000
Manifest this update: Sat 13 Jun 2026 01:01:24 +0000
Manifest next update: Sun 14 Jun 2026 01:01:24 +0000
Files and hashes: 1: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: FGRsIFU65ck9XO4mjxlXAybpGNuST0IIEjhU2jXJH5U=)
2: RAC2EIsVMHG6hRns7HbMn17gGls.roa (hash: FF3H1038Rgf//9+NtLOprCe/ZirTllG7HflUAk9dINQ=)
3: nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa (hash: iN63qFqYR+Oirh/aAc/OhTjdpHDfVt7KEG3Iws+eD0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:75:cb:36:30:08:6c:9e:f9:b9:06:7e:a6:73:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Jun 13 01:01:24 2026 GMT
Not After : Jun 14 01:01:24 2026 GMT
Subject: CN=43897c03bfab8bc834c7c312868e61630b931b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:fd:85:00:58:35:29:53:a4:4c:d4:ed:05:
c9:ad:e8:48:b4:5a:21:61:40:bc:9a:63:90:1f:31:
f9:10:6b:42:1f:e4:bd:99:1a:0f:2c:8b:bd:a2:19:
9c:f9:7e:87:cb:30:5d:be:7b:5c:eb:fe:82:6a:f3:
ea:45:8d:a0:ad:f3:78:70:3a:50:72:79:3f:70:32:
3a:76:b0:bb:39:aa:40:81:b5:71:23:60:a4:3b:33:
36:7c:57:29:a2:82:39:88:7f:d9:79:a1:b5:f9:ad:
7b:18:f7:73:96:5b:f2:cd:8d:77:98:01:e2:ac:0d:
65:aa:fa:86:85:5d:c6:ef:8d:07:6f:6f:f7:db:26:
29:30:cb:bb:73:cd:2c:ba:52:9d:cf:89:f7:4f:5a:
e0:1f:1e:eb:07:e1:3f:2b:7c:0f:b0:84:ba:8b:53:
ff:e5:e6:80:64:85:7a:76:f0:0f:42:2b:06:ff:e8:
a3:b7:82:c3:a5:b1:42:ff:57:c3:77:8e:7f:bd:c9:
93:db:22:cb:b7:32:db:a2:08:e7:18:0b:4f:08:0a:
d4:db:37:1e:68:4b:1c:52:07:b4:8d:a2:d9:8a:39:
55:ed:15:c9:b3:ca:9f:10:dc:2a:5d:5d:47:dd:70:
b9:6d:43:62:7f:ef:97:30:ff:fa:b3:12:43:04:ff:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:89:7C:03:BF:AB:8B:C8:34:C7:C3:12:86:8E:61:63:0B:93:1B:70
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2f:4b:b7:07:92:f1:9a:68:2b:65:b1:c2:f4:8f:13:c5:e8:
ec:88:9f:77:32:b2:b2:27:ff:b9:88:b1:9e:63:03:69:e5:50:
94:dd:0a:76:c9:4f:34:4f:4f:83:c2:12:dc:9d:95:1b:32:70:
5f:f4:90:72:87:24:18:5a:95:95:f0:4a:13:b5:24:17:bf:cc:
29:f1:d3:24:18:36:07:1e:70:06:b8:a2:ad:d3:ea:15:8a:42:
f7:80:7f:03:77:19:c0:d3:a5:3d:c4:ec:8d:d6:81:81:5f:3e:
a5:10:8d:37:dc:45:76:39:4b:4c:da:07:a9:19:19:38:38:31:
a4:8d:84:ab:fe:0b:a3:64:79:3d:4c:17:af:d2:2b:ff:f0:2c:
3c:ea:53:06:b6:51:a2:52:0c:76:b7:46:4e:74:ab:10:18:4e:
d7:e2:4e:e9:a7:95:9f:c6:fb:9b:fd:5f:ca:39:02:fe:1e:f9:
d5:b6:e5:aa:9f:1a:f6:b7:28:52:de:aa:41:ee:47:0c:be:6c:
55:8e:0f:f5:30:c1:6a:05:ef:2b:6a:7a:a9:c3:77:77:e9:c3:
d2:04:a2:48:4f:ba:03:03:38:86:b9:1e:39:90:19:77:12:6c:
0b:f7:07:b2:16:78:fc:49:d2:b6:a1:48:1f:be:42:c6:2b:8b:
3c:3b:ba:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:54 2026 by rpki-client