Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: /8tRoM7Qw+Reucxug7U5yGDHnNd0DZ9+Zbu1N98H3gA=
Subject key identifier: BD:F6:C0:6E:67:3B:58:24:A8:C9:50:1D:E1:09:10:AC:50:76:45:DC
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 019E30E06FC5BF412CD82305BF5F8ADA65FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 0925
Signing time: Sat 16 May 2026 13:01:15 +0000
Manifest this update: Sat 16 May 2026 13:01:15 +0000
Manifest next update: Sun 17 May 2026 13:01:15 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: NnCptrlAxW0J69v1/E89FOTdC840SgWwyFNsTxv9N0c=)
2: il7H5XRLlPOMcGmUaTO99BZFn2I.roa (hash: Df3NCzCkDFx+xfWB8WmONNlOHJhDormcIJSvLVXSXWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:6f:c5:bf:41:2c:d8:23:05:bf:5f:8a:da:65:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: May 16 13:01:15 2026 GMT
Not After : May 17 13:01:15 2026 GMT
Subject: CN=bdf6c06e673b5824a8c9501de10910ac507645dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b7:0b:74:90:f8:a5:ff:87:98:ef:8d:10:76:
7b:4c:94:42:f3:ea:dc:3a:51:88:af:ed:64:b7:34:
86:37:84:7b:87:55:cc:b7:ee:50:35:8f:3b:41:bd:
90:32:7e:d8:74:15:00:7e:e7:8f:4b:db:07:d5:19:
4e:85:d1:12:9f:dd:20:48:60:52:48:93:09:6e:29:
6d:17:40:65:4a:dc:26:1b:9e:ac:df:5c:cb:92:fc:
fc:32:ee:5c:2a:d4:ed:e1:f4:fd:36:e0:be:11:3c:
10:7e:a9:c7:7a:eb:ca:bf:52:47:0d:b5:2a:92:c6:
99:c9:f0:27:6c:07:8c:d2:dd:f8:33:3c:dc:5e:2e:
05:13:47:57:e5:0a:5f:82:5a:11:e9:e9:87:56:8f:
e7:66:56:4b:d4:71:8a:a6:ad:62:d0:11:73:15:bb:
e4:26:88:3b:ad:e5:f7:54:43:58:ac:17:04:69:56:
1a:f1:6f:60:b8:34:06:01:f2:30:b0:15:bc:02:24:
a5:e9:0f:4a:0e:26:8b:a4:0e:a3:c5:57:7e:25:b1:
6a:23:7a:65:a0:2f:f7:bd:39:1c:7c:b6:0f:dc:d7:
ad:15:7c:dc:90:71:bd:f0:d8:4d:d8:b9:08:fa:d9:
f7:5a:bd:9b:74:d1:93:30:7d:96:55:fb:dc:5b:71:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:C0:6E:67:3B:58:24:A8:C9:50:1D:E1:09:10:AC:50:76:45:DC
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f9:3d:f6:56:52:20:42:91:d8:0a:04:fe:bb:87:be:c0:c2:
83:84:28:e9:a0:d4:c5:37:0d:c5:2d:7e:1b:d9:38:5b:30:ff:
53:0d:b6:20:59:45:30:83:98:a8:2a:93:90:bd:f8:36:85:c8:
e5:5d:4e:4e:11:c1:b8:c0:c7:b7:1b:4e:a9:f9:60:a0:ed:1f:
ec:05:6e:a0:33:5c:73:ff:db:55:4b:ff:d0:21:1b:50:49:fa:
49:96:47:96:97:66:cb:65:8e:ea:78:f9:ce:b3:04:2c:a9:18:
1f:e5:a2:3e:03:8c:fc:10:62:99:95:a7:17:7d:80:1e:05:e2:
df:03:c3:30:84:37:48:09:ba:e9:f8:7b:45:d3:9e:c8:5d:78:
9b:db:48:70:5c:46:20:c3:9f:26:9c:37:19:e5:f8:04:e3:62:
c6:a7:e3:9b:95:50:86:fa:03:20:75:df:98:cf:70:2a:87:89:
8c:f6:77:25:ad:ac:a1:80:af:bd:e9:30:fd:e8:88:7b:ad:d4:
72:6b:b9:5b:e9:2a:e9:06:fb:ae:3e:c3:ca:47:78:58:98:ba:
5b:87:33:18:9e:7d:c8:91:71:8a:41:91:1e:0e:8c:eb:ac:0a:
36:2a:fb:5d:68:bb:1c:5d:f2:d3:4a:99:b0:6f:ad:b4:a6:ce:
e5:78:a0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:44 2026 by rpki-client