Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: SJJ7UXK6I3CsfJaa+gWbWdytGFGTey2hKRUruymjJd4=
Subject key identifier: AF:7A:17:73:07:CD:95:AC:16:68:57:AD:A6:10:90:FC:F9:81:29:F9
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 019F17C2734E93A06B2A65DECD1BECCEB850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 09:00:47 +0000
Manifest this update: Tue 30 Jun 2026 09:00:47 +0000
Manifest next update: Wed 01 Jul 2026 09:00:47 +0000
Files and hashes: 1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: kvVz672WfxxobVB0fdqKqAW6ZXj8+rrXpdFZNUZjrkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:73:4e:93:a0:6b:2a:65:de:cd:1b:ec:ce:b8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Jun 30 09:00:47 2026 GMT
Not After : Jul 1 09:00:47 2026 GMT
Subject: CN=af7a177307cd95ac166857ada61090fcf98129f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:5f:fb:e4:fd:0d:c8:fd:91:d9:7b:c6:b2:
b1:a6:4a:c1:64:21:60:52:82:02:ee:f0:78:29:9d:
e2:ce:2e:64:c2:87:1c:96:fa:20:c9:99:d7:cc:29:
5a:4e:82:b9:c0:71:62:ec:43:fb:e3:94:28:a2:11:
99:4f:7f:27:ec:9b:0b:16:cf:ec:d3:05:bb:5a:7e:
8c:1c:80:8f:1c:5d:ff:53:c6:19:f2:53:5d:a8:17:
04:cf:22:54:b3:52:04:a8:39:a0:66:da:0d:1c:fa:
3d:d5:66:d9:da:31:8e:09:1c:05:2b:75:0c:ff:e7:
5a:c1:13:f2:3b:a5:fa:b8:c0:36:d1:9e:2e:4b:b7:
ab:39:d7:db:23:e7:f6:48:43:e8:47:e1:09:35:d3:
b7:98:6d:9c:4f:d4:b4:4e:05:5c:02:8c:e6:e1:01:
0e:81:f2:49:fe:73:af:ab:1b:08:cf:2b:37:53:b0:
c5:8e:7f:b2:5f:8a:97:99:8c:87:e1:95:05:4f:84:
c9:61:55:5e:30:c7:77:ba:76:1f:23:eb:7f:13:5b:
0b:ed:a0:50:ff:0f:11:79:b6:e0:d7:cd:b8:44:6c:
65:e4:0b:4e:3f:ac:e4:7c:9a:6e:f0:be:ad:11:18:
4b:7d:9b:03:8a:9f:80:e3:ec:ea:ca:3b:33:7f:b8:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:17:73:07:CD:95:AC:16:68:57:AD:A6:10:90:FC:F9:81:29:F9
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:77:3b:5b:ee:be:c4:fb:38:d5:55:93:a5:96:b7:45:ee:b0:
98:ed:e6:3b:40:27:ec:c1:fe:1a:af:ac:e0:cf:75:0b:c9:58:
0e:be:8f:d7:65:a6:ab:b2:cc:f9:6e:93:77:de:be:f2:c9:cd:
43:ae:aa:89:b4:76:b2:ef:35:e3:98:67:ff:27:eb:92:54:8c:
3e:8d:1a:6f:2e:89:ab:a3:25:0e:f8:d7:f7:01:d9:09:b0:bd:
f7:ef:4c:5d:75:44:9a:23:e1:93:d7:08:7e:35:c5:e8:27:40:
e0:1e:27:f7:b8:e2:38:54:bf:63:2b:00:2f:c0:1e:6e:96:23:
1c:c4:20:f6:fd:c3:6e:09:a8:48:21:c4:32:74:75:68:73:37:
22:d2:92:66:9c:c4:e3:fd:85:c3:b5:17:bf:74:4b:e8:b6:5f:
09:e1:da:52:ff:90:2e:8b:d3:be:e6:94:4f:d1:09:70:a0:22:
ef:19:d0:68:02:2c:02:da:d5:fe:03:3a:35:85:e6:fb:cb:0a:
cb:e1:2a:ec:86:cb:90:d8:43:95:20:df:8f:f5:32:29:2a:8a:
8e:8b:24:eb:25:7c:49:3b:a1:5d:17:58:62:86:db:cc:c8:c5:
4b:a5:01:c4:31:fc:e2:bc:a1:9f:53:01:bd:01:da:3a:28:5a:
17:9f:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:44 2026 by rpki-client