Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File: 8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier: cSIo7zXH13Lkh3wG4kAMUsP3cWFsExiK/KvprpPRhjA=
Subject key identifier: 7A:69:89:D1:85:6F:8F:29:AF:61:96:6F:24:67:93:A9:16:38:BA:3C
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial: 019E91A5ABD47A2AF3DAD51BDF66384B4424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number: 036D
Signing time: Thu 04 Jun 2026 08:00:14 +0000
Manifest this update: Thu 04 Jun 2026 08:00:14 +0000
Manifest next update: Fri 05 Jun 2026 08:00:14 +0000
Files and hashes: 1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: IwTBxd6t54iHQLDWMbbsDq2GT8MeNXuKMTrcDVqhBmA=)
2: HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa (hash: 6cAQwo1q/0sZVyGynHF1390xD5S+4XKwq9DB6RFsVo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:a5:ab:d4:7a:2a:f3:da:d5:1b:df:66:38:4b:44:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
Validity
Not Before: Jun 4 08:00:14 2026 GMT
Not After : Jun 5 08:00:14 2026 GMT
Subject: CN=7a6989d1856f8f29af61966f246793a91638ba3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:32:a1:5b:0d:31:7a:e4:0f:16:b9:83:d1:
94:99:fb:ec:53:ee:bb:5b:f0:d9:ce:81:51:a3:51:
09:cd:a2:70:b1:32:95:e7:bc:0f:2f:a5:b9:64:05:
19:8d:c2:53:b0:e1:dd:30:59:4a:4e:f3:32:aa:b5:
27:8f:8d:09:7a:58:25:7e:0f:3e:84:b0:be:84:27:
65:3e:23:e3:2e:87:ac:50:45:a8:58:d5:12:91:d0:
83:f3:f2:a5:cd:f1:ab:bc:c0:2c:c9:f9:82:6b:a9:
03:eb:09:c6:fb:44:8d:b0:f9:e3:7e:68:31:51:7d:
38:d8:6d:b8:b0:b0:0c:e9:31:98:e6:4c:7b:67:10:
1e:a2:47:35:13:9d:54:96:68:4c:7d:77:8a:c9:38:
6e:9a:3c:6d:1b:76:5f:1f:c2:eb:5a:8f:7a:72:67:
60:65:fd:3f:22:ab:e9:64:51:08:89:ce:79:7e:57:
6f:6a:52:3a:cd:41:62:d2:b7:cb:fa:36:b5:68:99:
79:68:fd:09:6b:7a:76:af:47:05:51:63:8f:15:d7:
1e:05:f4:a1:73:07:c3:d7:52:e3:cf:85:06:84:15:
65:39:85:fe:b6:15:74:1b:72:e2:0c:64:84:c7:cc:
32:ab:db:6a:f5:54:ce:0b:f1:f7:14:e3:3b:12:ac:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:69:89:D1:85:6F:8F:29:AF:61:96:6F:24:67:93:A9:16:38:BA:3C
X509v3 Authority Key Identifier:
keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7d:24:15:db:bf:28:df:6d:97:bf:5c:b0:56:1b:b4:65:ba:
c1:df:64:1f:70:2d:c1:0a:f3:e6:56:fa:4a:82:bb:c3:6e:7f:
b7:91:ea:ad:28:c6:87:1f:76:c4:ec:2a:39:0c:40:92:64:6d:
46:3e:8e:5e:29:43:bc:4a:2e:b8:f3:ba:ce:e1:c0:f3:f5:35:
dd:9a:5a:66:55:6a:72:50:43:00:b9:46:b6:ae:43:f2:56:7a:
47:6b:07:ca:e5:ed:78:29:09:f5:77:70:9f:51:19:3d:5d:58:
1e:5a:66:ba:24:4b:03:3a:e7:bd:81:bd:69:6d:f7:05:a9:fb:
b6:64:03:ad:8c:67:a2:93:38:8a:21:8e:df:74:ed:3c:7e:11:
76:d0:da:f4:d7:5c:0b:e3:a2:2e:2b:89:ba:fe:d9:48:37:0b:
b0:40:58:0c:01:5d:37:a6:40:7e:b3:73:2d:9d:ca:14:67:79:
28:02:89:a3:b6:12:f6:7f:6c:35:87:77:5a:4d:d5:a6:23:5d:
e4:50:dc:ba:d5:10:12:85:73:98:b1:f7:51:be:19:7d:ac:56:
f7:cc:07:b5:3c:f9:29:04:42:70:77:03:a1:dd:00:9e:d1:c7:
f2:74:63:fc:18:2f:54:76:55:73:23:4e:74:e0:f7:85:17:cc:
41:1b:09:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:10:12 2026 by rpki-client