Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: DIgJVUKm7jEMaG5xkW8m0heSQ6K12I53qZRBbJxIJng=
Subject key identifier: B6:50:8B:D7:4B:26:3F:69:1C:5F:E6:A4:F0:41:19:CF:CF:B6:1F:48
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019EC0A40F89AB482B8EA021B6E8642A3F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 11:00:37 +0000
Manifest this update: Sat 13 Jun 2026 11:00:37 +0000
Manifest next update: Sun 14 Jun 2026 11:00:37 +0000
Files and hashes: 1: 1wC70OGBB84YZ8LzzI7GRE1FXLw.roa (hash: 61O42HPTbjFtxU4oF7cNiKUH0sHQufjgX2XI1LEtyCM=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: W/TJjYXfNBElIGtAb60LVDWBT3t74c4eqTsoGpI4mNU=)
3: YVZ-GH3S7Iq0JxeBAHpFVD2_Lx4.roa (hash: kM6UtuYisVsArbzf8eESDr1kRHymSG53rA/gBdAULqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:0f:89:ab:48:2b:8e:a0:21:b6:e8:64:2a:3f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Jun 13 11:00:37 2026 GMT
Not After : Jun 14 11:00:37 2026 GMT
Subject: CN=b6508bd74b263f691c5fe6a4f04119cfcfb61f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:9f:96:b6:eb:f5:1f:2a:06:90:64:ea:2a:
38:fb:5d:5e:17:c2:fe:6f:0c:82:94:cc:df:df:eb:
f2:8b:83:23:60:4e:e0:33:ef:14:98:ee:08:08:da:
9a:1e:c6:ec:4f:dc:26:9c:c5:71:d2:6d:cb:bd:e9:
db:c4:33:73:0b:ec:ae:10:bb:c8:0d:f4:67:5c:b2:
35:42:18:38:a4:b4:40:c9:42:4c:a9:2e:fe:45:46:
50:dc:45:97:94:c0:4d:7f:82:e3:f0:93:de:1c:ff:
e5:c9:a3:51:95:2a:5d:dc:c9:d3:c6:40:14:67:9e:
7b:dd:e9:17:e1:fb:17:8c:dc:4f:0a:8c:08:74:1e:
0a:7d:47:93:3d:04:70:46:57:6d:21:90:2f:e8:6e:
9c:1f:dd:fa:3f:4d:bb:5b:0b:30:2e:b1:6c:b3:17:
73:11:5e:b5:98:a1:fa:a1:b5:22:dc:55:83:33:9c:
33:5b:24:1c:73:e8:9e:74:c1:74:3a:81:0d:5b:8e:
94:5c:0a:0d:94:db:ab:eb:ba:81:27:1f:f2:08:7a:
2d:2f:27:84:4c:16:86:50:fb:e5:95:af:2c:8b:2c:
ce:3a:98:68:5d:3d:02:62:1d:d3:5e:89:d1:b0:4e:
5a:55:e5:7a:19:9c:3a:4b:94:6e:ca:ec:f2:10:eb:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:50:8B:D7:4B:26:3F:69:1C:5F:E6:A4:F0:41:19:CF:CF:B6:1F:48
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e6:65:10:52:a8:98:86:42:bb:35:e1:6e:04:01:66:65:a8:
32:9d:a1:ee:a8:19:5f:13:e4:67:b2:66:64:61:91:04:93:b8:
8d:69:0d:69:67:a0:51:fe:b0:e7:0c:be:28:b1:e1:24:dc:e7:
77:25:bb:c2:a5:24:e3:3e:b0:62:40:2d:37:e8:d5:08:7c:6d:
30:ca:de:39:1f:60:15:66:02:39:c0:6c:20:6c:fe:7c:2f:c0:
16:03:8d:bd:11:57:9a:cc:07:42:b7:6a:b0:5e:8b:52:d4:8f:
0e:0a:1d:5c:fd:87:cf:8b:c0:ea:8a:86:d2:86:1f:0c:a8:e5:
00:fe:a2:71:cc:49:04:9d:a5:e0:10:d5:1b:af:34:18:3f:2e:
b4:ec:d7:fe:51:c0:6b:22:96:0c:ca:fa:23:25:de:b7:e1:20:
85:ba:2d:c4:17:f0:d2:f0:1c:15:39:dc:ae:3d:63:01:69:25:
8d:ba:8f:05:fc:4e:51:3e:16:46:9d:f1:de:22:2d:47:d3:eb:
ce:c8:fe:c3:3a:74:bf:97:d1:cb:87:77:60:de:a0:0a:aa:91:
9b:b1:90:49:8c:37:99:ee:71:fe:81:92:0c:62:0c:92:5a:98:
c6:aa:88:55:c1:3c:72:70:51:eb:3f:ed:23:1c:82:28:04:8a:
c3:36:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:58:15 2026 by rpki-client