
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: 0OqeE+qikY+Z2YITMbs+AlSTGPkaATIm9sQMKtU1dwc=
Subject key identifier: 3B:51:94:F4:7A:CB:A4:C4:B3:5A:8F:D0:92:9A:3F:E6:CA:DB:98:CF
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 019EC18015AEFB5E2478053775DB6A2FFC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 0982
Signing time: Sat 13 Jun 2026 15:00:57 +0000
Manifest this update: Sat 13 Jun 2026 15:00:57 +0000
Manifest next update: Sun 14 Jun 2026 15:00:57 +0000
Files and hashes: 1: 3gZgHbD-hrqcq_Pjyy1piMjeRhE.roa (hash: gOXLcL67YsVsuGlPynBLLbxradMX9qPaxCdbkscokfQ=)
2: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: 4qxKyDgiV7ZDOq0t8x1P3qOSlqnJGYsnX7nWCgeaCS0=)
3: t0K4HGcM7SYmbee1zvHwQlP_JGY.roa (hash: AGbfQJGLAl/VV+53Q0j0FQio/VcRd8jWfQfbs9NOEoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:15:ae:fb:5e:24:78:05:37:75:db:6a:2f:fc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Jun 13 15:00:57 2026 GMT
Not After : Jun 14 15:00:57 2026 GMT
Subject: CN=3b5194f47acba4c4b35a8fd0929a3fe6cadb98cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:51:52:78:7c:49:f9:f0:86:b8:ca:48:55:57:
05:0a:72:ba:7d:0c:54:ae:f2:50:96:6d:20:bc:36:
42:84:ad:56:44:c5:68:df:8b:ee:c3:12:8e:bf:ae:
fc:b2:79:53:49:8b:ba:45:88:e5:36:49:1f:44:d0:
5f:12:1d:b6:8f:5e:db:57:55:0e:6e:57:b3:29:c5:
ce:cb:96:4c:74:2e:76:bb:13:a2:22:a0:b2:60:7e:
70:79:b6:49:37:e1:d1:89:a6:ca:d6:19:8c:e0:d9:
8d:5d:82:91:68:33:e0:d6:44:10:a9:64:67:dc:2f:
f0:bd:42:0c:96:75:46:5a:8f:7a:70:e8:ef:1a:21:
9e:7d:76:54:b3:2e:54:da:a4:9e:7d:1b:16:cc:46:
f0:5f:a3:8b:77:77:7c:19:bd:62:bc:52:75:24:b5:
57:55:93:b2:0b:81:34:40:1e:19:cf:af:80:7f:04:
53:75:99:0b:1d:64:21:8f:f9:44:54:d9:ab:cf:37:
eb:68:35:91:5b:c3:bc:05:54:d4:e8:b3:27:69:ca:
e6:13:85:62:82:1c:1d:42:6e:fa:84:d8:41:af:d9:
20:1d:55:9b:ec:f7:7f:41:79:75:8a:ae:c1:b4:cd:
ac:2c:1b:95:77:21:8e:6b:b0:d5:66:5a:32:1c:02:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:51:94:F4:7A:CB:A4:C4:B3:5A:8F:D0:92:9A:3F:E6:CA:DB:98:CF
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:be:65:b6:a9:32:38:c6:5b:0f:38:37:43:9b:18:fe:36:59:
56:cc:b5:d9:d2:fc:58:80:59:7f:d4:05:b9:6a:e3:da:7d:20:
d4:f0:41:16:d4:f8:e3:96:1e:b6:bc:ff:46:bd:66:9e:37:10:
7f:c2:26:60:fd:5b:9d:84:35:f6:eb:78:d0:b1:40:67:e9:49:
bf:97:a6:6c:1e:ec:81:cb:73:03:41:de:87:54:d1:f4:0d:be:
87:f0:5c:12:e1:10:e9:66:ea:80:6f:99:60:e5:de:5c:fb:1a:
56:8e:8b:da:fa:53:1f:f7:1e:a9:9f:5c:67:4f:21:27:07:23:
78:05:9c:63:99:dc:00:b8:69:1b:db:41:42:2b:b8:31:6f:59:
0a:2b:b8:61:e1:e7:17:18:77:78:08:2d:dd:c1:8e:55:22:08:
54:bf:8d:3a:08:04:ce:fe:54:6e:73:68:07:a1:c9:dc:98:0b:
50:1c:41:99:92:df:d8:4d:7b:f4:50:ba:b5:c0:7a:8f:ba:32:
e1:1d:0d:9f:af:0b:8a:4a:c4:88:1b:19:72:17:d4:27:a8:66:
7f:1c:26:d0:42:20:d2:52:25:13:cc:42:b5:9a:c0:fe:a4:d7:
a7:b7:07:61:24:e3:90:09:56:94:46:a3:3b:25:0b:c6:b6:18:
eb:4d:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:41:53 2026 by rpki-client