Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
File: _8P1ykeS2U0ao2616jqhtAQ80BQ.mft (raw, json)
Hash identifier: fHClFWDq9NZ+BhDtcuQIl66l9ivAuhbZH1CZKbZLewg=
Subject key identifier: 29:7B:69:AC:3D:CB:54:15:A8:51:25:24:89:07:99:86:C8:71:96:22
Authority key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
Certificate issuer: /CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Certificate serial: 019EFD26D8F8236BE9A9D518B02C55ACB566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
Manifest number: 0214
Signing time: Thu 25 Jun 2026 05:00:41 +0000
Manifest this update: Thu 25 Jun 2026 05:00:41 +0000
Manifest next update: Fri 26 Jun 2026 05:00:41 +0000
Files and hashes: 1: 1rgWG4O3JsVa6Vy192wtJnc-5kY.roa (hash: AGWJbzsxdafZPEtjKhcIbgcH63XtDFxzdaV11GVybsQ=)
2: _8P1ykeS2U0ao2616jqhtAQ80BQ.crl (hash: xOG3D7yjO1TqxGHvSbIZ2D+dV+RI6SfuF4/khedDYyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:26:d8:f8:23:6b:e9:a9:d5:18:b0:2c:55:ac:b5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Validity
Not Before: Jun 25 05:00:41 2026 GMT
Not After : Jun 26 05:00:41 2026 GMT
Subject: CN=297b69ac3dcb5415a851252489079986c8719622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:24:2d:13:f3:45:0f:f2:8c:9b:2d:af:5b:
e3:19:82:07:f4:a4:77:17:68:7b:46:ba:e1:b2:74:
a0:91:17:ea:61:28:ad:ab:40:eb:5b:78:68:f9:72:
f2:53:9b:cd:8a:bf:77:aa:ec:75:bc:0d:4f:23:4b:
1a:39:29:47:cd:27:d2:64:5e:b2:9f:0e:44:95:bb:
f8:c6:f8:52:d9:a5:28:4f:d5:4c:f9:1f:77:52:fe:
df:b1:d9:90:cd:6a:d1:82:44:2a:c7:fb:ed:e1:2c:
bb:76:d4:cd:ba:a9:3a:9c:2d:c4:5f:89:03:dc:18:
be:ae:6e:1c:8c:84:2c:da:90:14:c2:fb:be:9d:57:
88:a3:4b:d5:23:4e:5c:87:11:26:70:9b:c1:11:f3:
df:3a:b4:b8:35:4a:6f:fa:e8:8a:35:82:8e:a5:87:
d7:08:20:db:c5:ed:c2:17:e3:9a:94:28:8f:a9:5b:
00:b5:85:85:2a:8c:c0:ad:81:e1:d5:63:39:e0:07:
ff:e1:e4:b7:e2:89:94:6e:09:8f:16:1d:99:c9:5e:
04:ca:8b:d3:03:04:c7:f7:36:07:c3:65:11:24:37:
f8:93:7d:a2:72:77:3f:bf:1c:01:8f:95:9d:b0:15:
09:ff:74:db:cb:c8:93:dd:c3:32:f8:28:cd:a2:a8:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7B:69:AC:3D:CB:54:15:A8:51:25:24:89:07:99:86:C8:71:96:22
X509v3 Authority Key Identifier:
keyid:FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e6:24:65:6c:fe:2b:33:85:79:74:5f:6a:b7:b4:2f:3b:26:
49:b8:f2:01:80:41:ad:05:0b:6f:3c:13:c7:21:87:14:ae:16:
fc:0e:a6:f6:30:92:7f:fc:73:3e:99:cc:ec:61:5b:4f:31:2f:
25:7b:0c:64:29:e1:55:cd:a5:40:0b:b1:14:18:d0:61:f5:19:
46:8a:05:af:bf:8b:43:c7:1f:37:08:f0:7a:fd:69:2f:c5:12:
07:2a:46:44:3f:3d:38:8f:c4:85:0b:c3:bf:6f:4d:42:a3:96:
33:62:2c:77:99:c4:90:a1:01:6a:14:45:cd:58:ee:4b:da:97:
63:1c:01:8a:82:99:a2:37:4a:0a:bd:7f:fc:e5:c3:ae:bf:97:
1c:2c:1d:ac:b7:e4:ba:6d:28:64:76:da:73:e7:0d:7e:3f:ef:
60:1f:ff:b9:d1:a1:4d:f8:98:a8:e1:8e:0c:2b:85:a0:33:d1:
1d:7c:ea:7b:4a:79:03:94:8f:ec:49:fd:c2:88:35:81:33:e7:
3c:8f:66:2f:c9:08:ef:b7:33:46:bc:44:91:7d:7c:4d:45:ce:
b6:2b:5d:1c:80:97:3c:db:17:b7:a6:53:68:a1:c0:c7:a6:42:
66:d0:3f:78:ad:87:52:67:4c:ef:3a:c0:f6:80:39:46:a7:b1:
8e:c4:88:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:41:09 2026 by rpki-client