Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: ysf8wg3kd5ffdAIVwMYniQUyMqyBlVke6dlIIpb5YNE=
Subject key identifier: 97:31:52:87:4F:A9:60:1F:0C:85:4A:8E:A4:7A:22:33:4F:8E:69:93
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 019EBE4801D94273CD3412E97CBFD19451DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 11EB
Signing time: Sat 13 Jun 2026 00:00:50 +0000
Manifest this update: Sat 13 Jun 2026 00:00:50 +0000
Manifest next update: Sun 14 Jun 2026 00:00:50 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: 3z9d7FlFC8h6yAI22fI7NpgpL9gykOliR2BkuClThIE=)
2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:01:d9:42:73:cd:34:12:e9:7c:bf:d1:94:51:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Jun 13 00:00:50 2026 GMT
Not After : Jun 14 00:00:50 2026 GMT
Subject: CN=973152874fa9601f0c854a8ea47a22334f8e6993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:6d:3f:07:97:b7:af:43:0a:31:57:0e:0f:
cc:a9:84:15:9e:e3:38:92:3e:aa:7f:af:4a:31:7f:
c2:c1:9c:6e:39:f0:ee:b3:87:17:c0:b0:09:b1:b6:
3e:bb:ef:b7:3b:3d:0c:45:87:71:ca:20:92:d7:aa:
aa:6b:75:96:cf:45:1b:b3:7e:a6:32:00:c7:bf:0a:
35:be:29:9f:eb:d3:b2:75:37:cd:98:b8:48:17:5f:
4f:55:f4:8f:5d:35:73:da:d1:17:64:fc:6a:39:f1:
6a:45:67:bd:5b:50:56:3c:46:fc:90:7d:69:97:67:
4a:f8:04:3a:5f:a4:27:d5:b6:59:ca:7a:e6:fc:43:
ad:3e:6b:a8:07:32:ad:c8:3e:e1:12:3c:a9:56:9f:
a2:e3:fa:e4:d8:09:69:42:06:9d:be:10:93:2c:db:
d9:27:4a:ca:05:b9:70:df:cd:92:40:d8:2f:77:26:
db:63:ca:00:12:ac:37:ef:d9:c9:8a:d8:83:3a:7d:
81:19:e7:1c:6f:40:40:6b:58:46:a8:fd:ba:79:97:
65:ac:7a:c8:2f:ab:34:d0:e3:35:21:80:59:92:70:
57:3b:93:92:13:d3:a0:c1:6b:b0:97:5f:ef:f9:07:
02:ce:bf:db:67:68:60:c7:73:7c:71:bc:60:00:6e:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:31:52:87:4F:A9:60:1F:0C:85:4A:8E:A4:7A:22:33:4F:8E:69:93
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a3:43:ad:bf:65:9e:6b:cf:b1:c2:9c:e5:6c:ce:94:5a:b3:
05:39:3e:4a:6b:46:5d:6b:29:f0:05:fa:79:62:c4:92:83:bc:
47:3d:e8:3f:07:4d:7e:33:4f:6e:9e:e6:11:d3:6a:d5:9f:7f:
88:72:cc:30:08:be:f6:66:52:9f:32:f5:82:7d:60:a7:87:54:
cb:63:61:ae:3d:0b:e1:2c:c3:97:e2:77:1f:56:48:56:c0:e1:
c7:6d:71:38:c5:3d:f3:d5:9c:1a:09:99:41:0d:f2:bc:fe:2c:
ec:30:d5:df:31:d0:2e:d7:ac:5d:82:5a:56:fc:33:6f:0e:46:
a1:d2:eb:00:38:a8:74:05:2f:65:d2:b0:08:ab:07:a1:9a:94:
62:01:5c:6e:6e:3d:08:77:dc:12:fe:bc:87:79:09:e0:14:2a:
21:b3:a5:65:5b:ac:ae:bf:a6:14:45:9f:9d:e4:93:82:92:0e:
a7:8e:45:df:03:5b:27:ae:05:1d:1d:8a:eb:e8:47:d5:83:79:
f4:38:e7:c2:3a:43:37:0b:c1:c1:9d:bc:45:52:51:56:a1:9f:
4a:f2:2c:ed:2e:75:e9:5d:fa:53:86:f2:14:e2:12:76:4c:4d:
22:25:05:4a:d9:ae:98:3e:d0:63:84:8e:0a:d7:81:0f:56:50:
a5:99:c9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:26 2026 by rpki-client