Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: OEsa8YK6hS+eHqufFaQBy83XuYLDU/CK0cAF0kpmuvE=
Subject key identifier: D1:EA:0F:16:D7:51:C4:A0:6D:8E:EA:B8:74:03:62:C4:C3:AC:21:50
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 019F17C363BD5C67DB29D2E6FDFDE243D490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 09:01:48 +0000
Manifest this update: Tue 30 Jun 2026 09:01:48 +0000
Manifest next update: Wed 01 Jul 2026 09:01:48 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: Ved+fiwKKCXo2CeNil+Bv5KO+O37FOFYkTfJPexb6gU=)
2: ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa (hash: iGCdrPf4Ppnrs4dgUDy3DlxhNj0AHzaCi9s56mQZshU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:63:bd:5c:67:db:29:d2:e6:fd:fd:e2:43:d4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Jun 30 09:01:48 2026 GMT
Not After : Jul 1 09:01:48 2026 GMT
Subject: CN=d1ea0f16d751c4a06d8eeab8740362c4c3ac2150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:38:b7:91:11:b2:61:e6:f1:e8:68:8e:a4:
48:50:2d:f2:d1:02:5d:aa:04:9f:a9:55:01:86:95:
79:be:49:cf:c6:26:5b:71:59:fd:80:ea:e7:9e:ef:
19:84:5a:2c:08:37:0c:7f:8a:20:97:50:10:31:66:
9d:0b:96:6d:37:fc:cc:fe:f6:41:4d:99:65:2c:67:
2e:a0:f6:92:79:19:7e:25:71:57:6f:5c:dd:b6:79:
f1:16:50:cb:e6:b8:e8:ac:bc:a4:29:55:cb:36:e2:
21:0b:a4:90:cb:13:02:3b:7e:ca:03:17:eb:9d:c5:
da:38:05:b1:81:b1:56:aa:b8:f7:06:2c:ce:ac:7b:
46:c0:62:db:57:f2:72:56:4f:b7:63:9d:d1:8a:4b:
7f:04:04:e3:60:0b:f5:a3:70:ec:39:41:12:f9:d9:
40:51:2f:2e:09:08:7c:b1:c5:70:a9:71:71:d2:61:
0b:28:f7:cd:66:f4:72:ad:11:7f:07:d5:07:83:ad:
bc:07:9d:a1:d8:77:d7:64:65:b8:5e:24:de:d9:9b:
2d:0b:13:70:37:a5:55:57:9b:ef:f9:03:88:e4:12:
e7:e1:61:cd:96:ce:74:d5:1b:bc:f9:a8:a0:2f:14:
6b:c1:bc:21:a3:8f:c5:ef:43:5e:d8:58:39:c4:2a:
0b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EA:0F:16:D7:51:C4:A0:6D:8E:EA:B8:74:03:62:C4:C3:AC:21:50
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:95:af:bb:d3:a0:76:2e:d6:a6:b8:f8:9c:41:38:1b:29:d0:
6a:d3:9e:13:10:4c:14:9c:78:f3:c2:24:35:74:0c:78:10:b7:
ba:70:3a:43:de:59:ff:3c:39:42:00:7f:11:a1:e3:ea:89:0a:
5a:f5:fe:7d:88:39:ad:02:60:c7:a9:19:47:cc:92:0f:8d:b1:
87:7b:9f:c7:ca:fd:30:66:2a:0b:42:65:1c:00:2e:d1:c9:73:
1f:d1:af:28:e8:0f:eb:7f:5b:9d:9a:46:fd:61:7f:9e:a2:af:
3d:d9:6f:60:00:f8:2d:b9:6d:d3:b6:12:d8:86:24:a6:41:77:
71:26:ae:3f:b9:5e:9a:58:46:fa:c5:0a:b3:5f:0b:07:13:40:
3c:8c:66:09:26:bd:4e:12:ac:d3:a4:da:5b:04:73:fc:77:0e:
6a:c2:20:b8:9a:79:6e:b5:99:94:b9:13:ac:d5:1a:7c:b1:0a:
51:e4:93:6e:f3:cd:79:e3:de:13:19:fa:b4:87:c2:5a:63:33:
6c:b5:57:00:03:89:f3:25:90:ce:df:6b:6d:89:83:cb:58:ac:
d2:3a:48:09:e4:10:58:7f:40:64:49:af:a4:33:e9:fb:68:69:
c2:99:de:57:71:fd:94:9f:c4:01:c4:43:e5:8a:77:5a:12:d0:
03:51:25:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:11:32 2026 by rpki-client