Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: f3pF0ndQ/UCHWtQxf8n/fSLIwRF1FwMsd3B+CxxqaFc=
Subject key identifier: 74:8B:1E:C0:D6:D8:04:E0:52:12:5A:A9:A1:73:AF:00:E7:B2:E4:2D
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 019E303B8C3F7A8D259D58256DAAF502FFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0D8F
Signing time: Sat 16 May 2026 10:01:09 +0000
Manifest this update: Sat 16 May 2026 10:01:09 +0000
Manifest next update: Sun 17 May 2026 10:01:09 +0000
Files and hashes: 1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: O1AXRvoB+XT54hghgLIgaaY+UwVXzPvIQf4U1AIAqaY=)
2: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (hash: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:8c:3f:7a:8d:25:9d:58:25:6d:aa:f5:02:ff:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: May 16 10:01:09 2026 GMT
Not After : May 17 10:01:09 2026 GMT
Subject: CN=748b1ec0d6d804e052125aa9a173af00e7b2e42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e6:27:fb:1e:0c:11:3a:a4:37:b6:88:8e:8e:
c9:f6:fe:6e:df:94:83:c2:87:7c:44:03:50:75:a3:
75:a8:12:17:19:2f:cc:1b:04:39:66:9d:5c:10:1b:
68:22:42:18:3a:f9:4b:a6:92:13:b8:f9:85:58:bf:
c1:55:79:21:34:44:2f:bc:68:64:2b:05:64:e0:37:
a2:74:f3:ae:0e:dc:dd:d8:e7:00:d8:a8:b0:62:5c:
31:f4:03:a6:db:a5:72:5d:cb:16:26:60:61:35:86:
a0:63:76:98:bd:4f:f4:33:85:d4:8e:8d:85:72:2f:
f5:2c:97:ad:e1:11:89:3b:3c:23:fb:9e:60:22:3f:
24:7e:2f:49:4e:a9:a9:17:ca:06:66:d8:a5:d3:8b:
8d:cf:6a:06:87:75:02:f9:8f:c0:84:89:37:c8:19:
67:04:bd:62:c8:98:c1:79:a7:a0:1e:5f:5c:2a:c4:
56:2b:a8:a9:d9:ee:34:73:0d:a9:a3:12:2f:c0:8f:
51:a6:9f:98:88:e7:9d:d5:bb:f4:5b:69:f1:72:f2:
d0:2c:bf:2b:b4:1b:0e:1e:e3:fb:ac:9a:d2:5d:ce:
3e:0e:7b:71:fe:ba:4a:32:73:70:17:ed:36:5a:73:
9a:90:87:b4:24:31:36:fc:41:f3:4c:c3:14:2d:9e:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8B:1E:C0:D6:D8:04:E0:52:12:5A:A9:A1:73:AF:00:E7:B2:E4:2D
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:25:31:24:c9:fe:7f:31:1d:2a:e4:63:52:a7:c6:3e:8d:57:
93:91:ed:2a:c7:65:2a:12:9d:0e:01:fb:7a:43:63:31:d4:fe:
88:09:bf:81:18:6b:37:40:11:1e:bc:2c:ae:78:4a:6e:bd:6a:
ff:5d:21:7e:5d:a6:e6:35:87:a1:3f:9b:a4:e9:3a:c9:d2:13:
a2:a2:1d:78:38:63:af:ff:a5:d2:72:59:7c:01:b9:31:82:a2:
d3:32:70:6f:b4:06:b2:91:e4:35:f6:5f:bd:a5:f4:b4:08:d1:
73:cd:03:6e:03:f9:18:36:a4:70:d1:1d:b9:0b:1c:24:4d:16:
5b:c6:04:af:0a:be:db:9d:e4:ca:8f:e9:c4:a1:9c:91:fe:9c:
db:6e:9f:8f:79:a8:5d:8e:06:ab:58:29:51:26:c8:b3:cd:3c:
e5:18:08:5f:a5:86:b7:54:de:9a:08:59:3d:bf:58:4e:60:f0:
7d:de:37:b2:85:7e:c7:18:1e:b4:5a:54:a1:04:22:6a:f7:b8:
b5:1d:78:d9:d6:01:fb:e5:eb:eb:f7:25:13:bc:b1:b5:3c:74:
b6:07:7d:fa:b2:d4:ea:71:ce:c1:2f:5d:d5:b5:77:31:4b:e8:
49:73:12:76:5a:6d:34:95:11:ed:3d:2a:e4:fe:cd:f3:39:df:
25:21:eb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:03 2026 by rpki-client