Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
File: 8kufSnwM67H5f6JAO2Me5tFuxjM.mft (raw, json)
Hash identifier: KdluaX5WVCy/ZqvpNQAJ5BjMVYgapO+w14qH4oM6vGQ=
Subject key identifier: 21:91:4E:FE:1C:1E:19:7D:B0:75:E8:E5:93:52:3E:96:C3:9F:C9:27
Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Certificate serial: 019E32CF19BD06DAA7923C5BA0B359F7BC25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
Manifest number: 0267
Signing time: Sat 16 May 2026 22:01:33 +0000
Manifest this update: Sat 16 May 2026 22:01:33 +0000
Manifest next update: Sun 17 May 2026 22:01:33 +0000
Files and hashes: 1: 8kufSnwM67H5f6JAO2Me5tFuxjM.crl (hash: /D8TfEXH7k6YBpEaT2EaG14BH92fd9leSQRjF2Rap8o=)
2: l226mFgK6T2Z60Q9UPJ4UVEXvGI.roa (hash: sMVz2G2/suJpzTvieIkpkHigX+RGGXDj8VHYY+8cT9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:cf:19:bd:06:da:a7:92:3c:5b:a0:b3:59:f7:bc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Validity
Not Before: May 16 22:01:33 2026 GMT
Not After : May 17 22:01:33 2026 GMT
Subject: CN=21914efe1c1e197db075e8e593523e96c39fc927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:fa:b8:51:f2:27:23:21:7c:ae:fe:13:7b:
50:59:98:a2:90:b6:27:98:ca:0e:65:e1:e2:ba:76:
79:19:9b:ed:3f:49:01:16:00:14:44:c3:58:cc:58:
85:8e:88:15:b0:d8:bb:5b:22:5f:f1:96:d6:14:0d:
b9:7f:7a:29:53:99:c3:0a:66:79:14:c1:c9:a7:e3:
74:4c:fa:cd:bb:64:ab:29:0d:a2:75:f4:a1:95:d6:
6b:2d:36:a1:82:ac:7a:ad:52:d7:a4:f3:e9:04:d9:
db:6b:8a:0c:ea:10:4e:cf:b3:b0:1c:72:20:e2:9e:
20:e9:57:06:5e:7a:80:66:03:5b:84:a4:f1:41:d7:
c2:d8:18:1f:86:e3:6b:5a:25:4c:6e:48:7d:c1:4d:
d8:3a:1f:24:60:4e:46:58:d1:89:d1:78:c9:9d:fd:
48:2d:5c:9a:2a:c1:bd:96:39:92:7c:70:59:69:26:
d6:0d:89:9c:6a:56:74:a1:7e:1b:b5:ed:a1:5a:27:
a3:b5:61:5a:5e:4f:f5:45:5d:8b:5f:cb:d8:ef:c3:
0b:85:91:31:7e:a1:cc:05:ac:64:e1:c8:92:03:90:
04:1e:b3:3f:a0:70:d4:c9:6a:75:9a:77:7e:28:81:
de:17:4a:d7:7c:f9:dc:76:c5:0d:57:5c:98:78:bf:
ba:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:91:4E:FE:1C:1E:19:7D:B0:75:E8:E5:93:52:3E:96:C3:9F:C9:27
X509v3 Authority Key Identifier:
keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:bb:f7:9e:2e:68:c0:a1:34:b9:78:31:13:21:96:b2:ee:91:
4e:54:64:11:bf:6b:f4:4c:f6:9a:65:61:63:2f:de:49:13:c1:
db:83:41:01:9b:57:ca:ff:2c:c5:43:b0:3d:49:15:ff:3a:f9:
a3:63:d4:08:de:3a:58:49:bf:c3:b6:89:0c:4a:a1:b9:e9:a4:
bd:e1:0b:45:03:11:92:2e:c5:2d:47:89:fa:09:44:60:b2:42:
7e:a3:5f:b4:1f:c4:b5:df:74:19:88:fd:0c:cf:75:a5:6b:9d:
19:16:7b:22:61:e5:0c:99:d8:45:c3:a5:fe:2b:a7:9d:78:04:
2a:19:bb:0c:80:3d:3f:bc:b4:61:7f:1f:4e:cd:5f:21:7f:09:
2f:aa:13:30:dc:a6:ec:e2:5a:87:06:b2:69:24:c0:cc:f0:1b:
4a:ad:66:96:bc:3a:90:fb:50:dc:23:79:12:5b:a8:0f:64:63:
b2:f5:8b:b1:56:d4:b4:f3:82:66:de:03:ed:c5:06:98:94:0b:
7e:0e:46:e5:2f:f1:41:38:14:15:a4:0a:12:08:f7:6b:d5:49:
0e:71:cc:10:6e:d2:36:5e:32:7b:d4:1b:9e:e7:a6:7a:8c:75:
0f:65:e0:fc:01:d6:97:e3:a8:21:4f:45:f5:c5:5f:77:b2:10:
d9:26:72:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:26:37 2026 by rpki-client