Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: C7oYm7dW1QlkeYrscQ3o0ot6JuGxHqfsDigUw5gxJGE=
Subject key identifier: AA:FC:DE:91:FA:31:1D:06:62:74:21:BE:F9:13:B7:0A:17:61:4F:AC
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 019EB87C6584D437340C9DA6A51C0F15CE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: 04B9
Signing time: Thu 11 Jun 2026 21:00:20 +0000
Manifest this update: Thu 11 Jun 2026 21:00:20 +0000
Manifest next update: Fri 12 Jun 2026 21:00:20 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: iNEAoRaKbC/0RlY7a1EEIHFrrWMSJ2rP6Zki9jNzjZk=)
2: sdMta7c0gW915yu9rkbP8a3pD1A.roa (hash: dpcGKoEnYqxFtG+MmQSOKo58GUsu+Url2Igp0+ElIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:65:84:d4:37:34:0c:9d:a6:a5:1c:0f:15:ce:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Jun 11 21:00:20 2026 GMT
Not After : Jun 12 21:00:20 2026 GMT
Subject: CN=aafcde91fa311d06627421bef913b70a17614fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:4a:54:31:ca:f1:5d:fb:90:e2:36:d0:38:
7a:5b:66:24:fa:28:4a:47:fe:a6:15:74:26:85:4a:
9f:7c:9a:c0:91:fd:a5:46:7f:93:75:cf:ab:64:d8:
1d:63:6a:65:86:87:d3:61:c5:22:00:d7:5e:c9:79:
12:82:c7:bd:bb:81:e2:3f:c8:2f:43:b2:b5:4c:d5:
7a:65:de:a1:27:51:51:72:ad:47:66:35:6e:ff:2a:
de:24:23:e1:0c:1b:47:46:bf:d5:20:18:c8:03:23:
6f:20:1f:d8:09:35:c4:42:55:53:bd:94:a3:da:06:
7b:e9:ec:ba:a7:58:c8:15:c2:89:b4:9e:06:ca:b8:
2a:f1:15:c0:cb:de:0e:5f:38:c2:f3:6b:25:25:60:
d7:7c:e7:9b:81:ba:08:2a:b4:45:35:98:62:1b:21:
52:6b:3b:57:4d:0b:d3:0d:6c:4c:dd:3d:d1:33:ed:
63:fb:d1:ca:d1:63:52:ca:87:7d:10:df:24:d3:cb:
01:b1:0a:c9:d9:83:17:fa:c6:e2:81:42:55:11:e5:
0d:aa:22:3b:64:84:b2:ff:09:80:ea:73:04:b9:f1:
d0:56:e2:56:f5:6f:a3:e7:d3:53:e2:81:e9:48:70:
c9:35:04:82:51:69:38:f3:f9:17:57:88:42:09:16:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FC:DE:91:FA:31:1D:06:62:74:21:BE:F9:13:B7:0A:17:61:4F:AC
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e5:c5:69:dc:6f:40:44:c2:ae:22:78:6b:0a:bc:4c:a9:af:
cd:46:5f:8a:20:c0:fa:0a:03:c9:e0:af:4d:a1:32:37:eb:ca:
55:0f:1c:2c:18:46:2c:2d:cc:f3:5f:ed:ce:5b:93:fa:21:ce:
ca:52:53:ec:44:11:be:7d:db:b1:c4:c6:32:bb:f4:de:61:d5:
b9:9c:63:27:d4:3e:5e:4a:19:16:3c:f2:78:6c:f8:86:2d:aa:
12:7d:a5:a2:25:ee:7e:74:99:03:ec:ed:11:55:c8:7f:4f:05:
16:46:a0:60:ec:87:4d:03:d0:13:6f:fb:5f:c9:a6:25:22:99:
6d:94:bc:a8:46:3d:2f:1d:29:b4:29:5f:6a:26:a0:79:89:44:
3f:13:a4:13:02:a7:20:12:06:ce:4e:20:79:2f:bb:b0:23:3e:
bd:d4:5e:f9:9b:33:df:e8:b6:8b:90:b0:e3:d8:a3:59:c8:56:
c3:d4:18:48:5a:30:21:ab:d4:cf:70:fc:59:49:e2:c6:09:b4:
32:6a:33:30:2e:8f:76:4c:70:f7:12:c8:8c:0c:24:e8:62:a2:
ac:80:0e:98:6a:32:33:e3:d4:33:62:4b:e7:b4:ab:5b:81:10:
4b:2b:e9:f6:ac:c2:3e:58:4b:3d:3c:c8:cc:9b:30:00:cd:bd:
43:05:3d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:18:48 2026 by rpki-client