Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: OV52NWs8V1SGnxofCFpdChSYUQUbmgMjJFaFCwWUvBI=
Subject key identifier: 59:8C:BA:ED:43:A6:FE:29:89:B1:69:A6:9F:80:31:6E:11:50:77:B4
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 019E303B970E0A475F26AFD3E3CDD99F04D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 18A1
Signing time: Sat 16 May 2026 10:01:12 +0000
Manifest this update: Sat 16 May 2026 10:01:12 +0000
Manifest next update: Sun 17 May 2026 10:01:12 +0000
Files and hashes: 1: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: b8LBesdRvnHKWMUbfBUKWvyxLN6+ltycfxVWDxCog3M=)
2: GYXVPChjE0NPSEdDhucM44Q05y0.roa (hash: Aj116UIxTV5UX+R+IJJ14L/FveXnD0nSIlVBqSjnPM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:97:0e:0a:47:5f:26:af:d3:e3:cd:d9:9f:04:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: May 16 10:01:12 2026 GMT
Not After : May 17 10:01:12 2026 GMT
Subject: CN=598cbaed43a6fe2989b169a69f80316e115077b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:f7:f7:d5:dd:77:0c:38:ef:df:15:c2:cd:
06:69:4e:ab:d5:37:0d:7f:b7:f6:36:91:11:7e:6c:
22:7e:a4:2b:40:b2:b0:83:aa:b9:9c:4b:14:0c:da:
44:45:90:ad:e9:29:65:43:ab:6f:69:78:5e:53:ad:
43:58:bd:ef:51:58:ee:ea:ab:7d:a3:d6:36:c0:8a:
3e:f9:f1:82:53:3c:05:19:48:61:03:83:c8:79:1e:
3f:0d:c1:66:af:25:89:e8:ec:16:64:ba:53:2d:8a:
f9:79:dd:ef:7a:5d:c0:67:33:6f:73:3e:94:c0:44:
6b:bb:ac:c5:35:ec:49:6c:7b:50:eb:69:53:e4:2e:
60:a7:62:05:5b:af:1c:5c:d8:72:b7:2a:f2:f6:68:
d4:cf:a1:aa:f0:2d:75:d9:0b:ad:14:e2:ce:27:ba:
a3:45:a3:95:7d:04:ba:f7:91:92:90:3e:c7:c5:c1:
0c:7e:23:69:ff:f3:42:f7:4a:31:f2:a6:96:b5:6a:
60:84:33:3d:9f:c7:77:5d:3c:bf:cb:a7:e9:5d:22:
d0:24:f8:f1:7b:ec:5c:1b:be:76:16:ac:e1:c1:74:
e8:ac:41:e7:e3:f9:34:10:c3:4e:54:16:61:61:2b:
cc:8d:70:a4:f3:9c:8f:ca:33:b1:0f:4a:8f:f8:30:
02:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8C:BA:ED:43:A6:FE:29:89:B1:69:A6:9F:80:31:6E:11:50:77:B4
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:60:4e:a3:67:77:60:81:5a:f8:77:f4:f7:57:1a:f9:b1:c2:
d2:53:fb:3b:1c:3a:4a:6f:49:ed:79:84:2e:cb:63:61:38:1e:
e9:30:46:33:5b:63:e0:5c:13:2f:22:1c:5e:c5:e0:5f:32:ee:
8a:90:c9:ec:dd:3f:8c:c2:07:f1:38:7d:83:c2:bc:fb:70:0f:
cf:ec:f1:54:89:48:78:c1:16:a5:27:cd:a2:f2:b5:bb:f9:8d:
47:35:7d:44:70:09:1e:72:74:67:cb:96:17:00:95:df:22:dc:
c8:26:d1:b0:a0:b8:a6:86:63:99:0e:f4:55:7e:b7:b0:eb:e2:
55:1d:a8:65:3b:3c:e0:bc:c9:4e:5e:a8:c1:9a:19:f5:a0:d6:
35:e5:10:2a:e1:6c:3d:3e:a2:c6:d1:f4:3e:cd:2d:c1:7f:75:
e3:ce:d8:c1:36:57:67:39:7a:90:41:39:05:b7:cb:eb:a4:7a:
65:51:d0:b6:be:b3:d9:81:b4:ec:d1:47:5d:4f:27:a4:e4:80:
a2:ff:ab:c2:09:44:9b:4d:1e:fa:87:9d:9a:f7:8e:b3:e6:6d:
50:81:ee:a8:fd:9a:bd:e6:00:c3:49:fa:cc:0b:5f:3c:05:65:
fe:b9:f2:26:62:58:4e:d3:b3:3c:85:47:bb:cc:b9:05:02:71:
8b:d3:27:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:59 2026 by rpki-client