
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier: Zo5I4nwti5lyeXw1EortzCkq9HQ7H8uF5jYqgUBU3EA=
Subject key identifier: BD:81:FF:DB:16:F2:FD:E6:4E:51:84:99:E6:E8:2C:C0:1A:2B:15:76
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial: 019E2F96DE1A34F5182EA2FE1F834A6B1782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number: 0B0F
Signing time: Sat 16 May 2026 07:01:16 +0000
Manifest this update: Sat 16 May 2026 07:01:16 +0000
Manifest next update: Sun 17 May 2026 07:01:16 +0000
Files and hashes: 1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: 7T1ImEAoDReJpepat3O+OIiPmGCetyHqafbwki6uEXA=)
2: UFBEpO4lAvQQYygzidhd3XdFxgI.roa (hash: UGxXMNFmL4JWlj/CB1VthyOKOfzl2mNWHFy1E8dwYXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:de:1a:34:f5:18:2e:a2:fe:1f:83:4a:6b:17:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Validity
Not Before: May 16 07:01:16 2026 GMT
Not After : May 17 07:01:16 2026 GMT
Subject: CN=bd81ffdb16f2fde64e518499e6e82cc01a2b1576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:3a:a8:ed:1c:94:d4:d3:ce:e8:77:55:06:
e4:e5:bf:b5:59:63:a6:c7:f3:5b:45:86:a7:b0:a9:
67:be:0e:bb:a6:01:14:58:fd:a6:e6:a2:7e:bc:22:
57:98:84:f9:ce:ad:8d:04:97:cc:c4:91:ac:96:43:
28:e7:9c:64:74:fa:61:a6:78:48:ea:77:23:95:c3:
bd:1e:a6:36:d0:2e:c9:6e:4a:3a:0b:24:db:66:04:
9a:fe:ff:0f:f9:53:0e:d4:ea:06:b3:a4:1c:4d:9b:
63:91:1e:2a:38:3f:67:88:d0:f8:b7:e3:99:7f:9c:
85:be:f0:80:11:ab:ea:1e:7a:cf:3e:00:34:a0:e6:
8f:42:d7:5b:1f:da:8d:ea:bc:33:d2:7c:9d:81:ce:
33:55:ee:9c:11:18:81:a2:9a:85:39:c9:a2:d2:ca:
d3:06:65:ed:c1:9e:bf:e4:d9:8e:1e:7f:69:09:10:
8f:15:3e:f6:50:09:14:9e:c8:08:5f:29:82:9e:7a:
1a:2d:f7:0a:e5:e7:16:e3:1c:8d:21:59:6b:65:46:
ff:e5:8e:2a:46:0f:c6:0a:87:f2:27:25:02:5a:56:
0e:3e:4c:7c:8c:80:8d:02:35:6d:43:3a:af:2e:5f:
e6:f5:28:ee:4e:b7:ba:6a:02:c9:6d:95:05:12:61:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:81:FF:DB:16:F2:FD:E6:4E:51:84:99:E6:E8:2C:C0:1A:2B:15:76
X509v3 Authority Key Identifier:
keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:95:15:dd:7b:81:fe:ca:ab:93:74:4c:ab:94:f4:76:c6:4f:
09:cb:10:f3:5f:6e:3f:dc:32:88:07:bf:ef:fc:f1:0f:35:24:
75:3a:8e:6a:f4:0b:94:1c:2c:48:b0:bd:f7:d4:69:e6:6b:6c:
bf:a3:77:3a:2a:1b:1d:e4:1a:28:ef:1e:d8:b0:6c:09:11:c2:
06:0a:10:d6:c9:2b:f5:b0:35:0e:0b:32:a0:2f:de:6f:78:12:
82:6c:4b:4d:08:c1:61:54:ac:c7:d6:8e:5d:82:48:eb:53:9b:
a0:d5:fc:d7:37:e9:66:34:60:7f:ab:9d:db:94:c0:f6:21:99:
2e:82:cb:8b:a6:69:e0:89:a8:1b:23:7f:93:52:94:8a:7f:63:
54:fa:bc:d1:09:ae:77:96:0b:6c:bc:06:1c:01:1c:5c:b1:d2:
a1:4f:15:ae:7f:df:8a:27:d7:b4:df:71:68:22:40:c1:79:d6:
85:92:cb:75:b8:8d:94:c9:ba:98:64:2c:f7:09:17:10:5e:44:
e1:aa:2f:f4:ba:26:25:b0:78:54:c0:24:5f:a2:73:31:da:5c:
b3:b5:d3:74:44:52:0e:e8:35:bf:a0:6d:35:7c:c2:21:f6:40:
84:6b:84:56:75:f9:dc:5c:8e:c6:13:61:74:b0:45:ac:46:ad:
19:b8:ca:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:15 2026 by rpki-client