Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File: 8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier: FPiEWpBun6Eef8h6H5y/nuYXQeTn8JYnSuH4XQ4bYVg=
Subject key identifier: B1:51:27:30:9C:40:8A:8D:D1:F1:B1:81:B9:13:13:62:9C:E0:9B:23
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial: 019E30DFF96F49521FC20FE94C24080E9CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number: 0D10
Signing time: Sat 16 May 2026 13:00:45 +0000
Manifest this update: Sat 16 May 2026 13:00:45 +0000
Manifest next update: Sun 17 May 2026 13:00:45 +0000
Files and hashes: 1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: jXecHDBU28msimNesdl/1pBKVAqrGAB6fBuy0L1ByWg=)
2: uBozqFCRP6q6-fMqqEdxvia5s2w.roa (hash: 7my1TEAY49gz3OCc/3WBB7kXgHGx+R9z5VTiKjlGzfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:df:f9:6f:49:52:1f:c2:0f:e9:4c:24:08:0e:9c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Validity
Not Before: May 16 13:00:45 2026 GMT
Not After : May 17 13:00:45 2026 GMT
Subject: CN=b15127309c408a8dd1f1b181b91313629ce09b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:3a:c2:52:8c:14:da:fc:a9:3f:10:a6:7b:
eb:0c:66:d8:64:24:ab:ff:07:db:08:0e:75:c7:49:
34:9e:96:93:28:05:3d:60:c1:27:86:5a:c1:ab:c1:
f8:3b:cb:9e:c7:50:c2:64:35:07:9b:15:1c:49:b3:
60:5d:ea:d5:5d:7c:40:da:e2:1d:73:a8:d4:50:b0:
49:ba:38:99:e4:4e:0b:c5:f9:5d:38:fd:6b:93:1e:
13:3c:9b:87:d0:8c:de:a6:95:e9:1d:88:8a:aa:b1:
cd:26:39:dc:4a:56:52:1a:67:06:65:44:6f:f4:e0:
52:af:07:94:d8:fa:92:54:ac:bd:0f:c0:85:2b:c0:
55:98:c9:c8:53:83:ae:71:51:bf:0e:a7:8c:41:5d:
e0:36:c0:17:dc:78:43:96:6d:ae:70:82:b3:67:d4:
7b:3a:12:92:bf:9b:ab:14:69:b8:3f:ba:4a:c4:08:
74:23:09:e6:cf:7f:db:9a:2d:4f:ab:0b:40:1c:6b:
c2:0f:da:33:f4:8d:02:4f:30:3c:7a:53:79:fc:50:
cd:16:3b:05:de:39:62:a3:04:7a:4e:68:0c:77:a9:
43:a6:ab:25:fb:d1:3f:79:dd:9a:a9:6a:80:d1:69:
bf:de:79:a0:43:2c:86:e8:c1:ae:58:87:f0:e9:c6:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:51:27:30:9C:40:8A:8D:D1:F1:B1:81:B9:13:13:62:9C:E0:9B:23
X509v3 Authority Key Identifier:
keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:25:6a:21:3b:6a:b5:95:7b:a8:d3:7e:43:e1:72:e2:2a:2b:
cb:18:91:51:b7:d7:ec:85:ea:24:02:f3:0a:65:61:79:f2:b8:
5d:14:fd:65:f9:b2:99:de:43:92:25:ab:35:53:b6:18:61:52:
03:c2:c7:79:79:68:32:ca:17:35:29:e3:fb:60:08:b2:e1:d8:
b0:db:cf:93:06:00:a6:89:0d:26:79:b1:ce:04:f3:d0:76:91:
09:61:6c:99:70:9a:3a:1f:a7:b8:8f:54:a4:fc:b8:2c:0e:51:
f8:9f:f4:bb:5e:33:fa:12:69:98:78:00:43:67:f9:98:11:3b:
2f:ac:db:84:fa:9f:64:1b:5c:fc:e9:40:0b:c0:82:03:38:ee:
5b:9c:fa:04:9f:8d:06:74:1d:c1:14:54:40:e2:0a:e0:e3:97:
70:7e:d3:27:01:c1:04:d1:d3:9f:9d:83:14:55:7f:9c:60:af:
90:98:f8:38:db:09:5e:87:e4:a1:cc:f2:0e:a9:b5:bb:46:ae:
26:7d:6b:3f:79:3a:02:56:52:e5:0a:7c:b4:00:be:08:42:4f:
ac:71:a9:61:38:9a:6a:56:cf:e6:b2:30:e2:ad:2a:1e:62:bf:
6f:11:d9:f5:41:66:04:72:28:c2:39:ff:3e:57:79:67:ef:11:
bd:d8:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:00:59 2026 by rpki-client