Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: 48Hr2Irny/lLcW8hAuS6qFPLZk9rtQSITlLZ0Ev24G8=
Subject key identifier: 59:0C:00:5E:D6:05:04:18:92:E9:C6:F3:06:0C:E4:07:2D:CC:B8:79
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 019EB921E9E3FC468A5DED598C60935392A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 195A
Signing time: Fri 12 Jun 2026 00:01:07 +0000
Manifest this update: Fri 12 Jun 2026 00:01:07 +0000
Manifest next update: Sat 13 Jun 2026 00:01:07 +0000
Files and hashes: 1: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (hash: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU=)
2: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: LWRPlH9Zdu5khaOCl2O+O6FrARZ2AINiVjZ4VaWmgrU=)
3: oGOv0O1ixZRdG92zwrspojU0VwY.roa (hash: IjgFyfvL9U08ADh5P0ZxxkAaF6oStHyHq7QR+Yuo9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:e9:e3:fc:46:8a:5d:ed:59:8c:60:93:53:92:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Jun 12 00:01:07 2026 GMT
Not After : Jun 13 00:01:07 2026 GMT
Subject: CN=590c005ed605041892e9c6f3060ce4072dccb879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:25:c1:d5:c1:fe:80:a9:55:74:0b:ec:97:fe:
0a:de:15:cf:e2:4e:d1:c7:25:44:99:5e:30:9c:05:
8e:82:6f:d5:0a:f2:33:68:82:66:11:a2:3e:c7:70:
3a:2f:88:dc:b4:82:76:6c:83:df:20:29:0f:e2:a2:
a1:83:17:d1:1a:df:5d:5c:f9:6b:e6:51:33:58:1b:
60:8b:f6:0c:ee:cf:04:3a:d0:a3:60:44:82:b2:98:
83:5b:7f:d7:81:5d:e0:4f:3b:8f:48:05:2c:59:3d:
88:fb:bb:cc:bb:a1:d3:7e:45:b0:5c:ef:9e:9c:25:
b1:a5:2d:45:37:ca:ff:ca:cd:62:da:9e:d0:53:58:
b5:31:6c:a6:47:ee:53:12:63:04:d2:f3:80:a7:49:
3f:2f:d9:87:35:be:05:87:e5:98:51:12:f6:5e:ed:
c3:d5:53:0e:71:91:d0:1e:6b:40:3a:0f:6b:66:ab:
ce:62:8c:df:a9:af:01:aa:f7:72:93:32:82:71:63:
c2:39:8d:ad:db:41:4f:50:d9:e9:4a:47:dc:c9:37:
03:e4:ef:75:5f:b7:7a:65:18:e5:92:01:57:7a:51:
dd:7d:7b:4d:57:6d:74:eb:40:a4:44:1b:96:71:e5:
8c:8b:15:0e:c0:28:a4:b5:05:a0:5b:7d:bb:03:7c:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0C:00:5E:D6:05:04:18:92:E9:C6:F3:06:0C:E4:07:2D:CC:B8:79
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ad:e4:e6:0f:04:b4:5e:d7:65:77:51:02:f9:55:5d:2e:fe:
c8:da:39:f2:f4:b3:4c:35:eb:e5:04:76:ae:e2:c2:55:fc:a9:
c8:74:23:ed:9f:e7:1c:71:39:3d:77:e9:7b:7f:36:32:84:cf:
1b:ff:e2:46:5a:13:69:20:c6:75:cb:f3:c9:04:23:3c:3b:04:
ae:99:6e:9a:c8:02:3c:b0:20:00:98:3b:8b:70:77:bc:8b:0e:
64:d5:13:19:9a:82:1e:51:dd:10:28:2c:5b:6f:ac:47:32:d5:
c2:8a:30:f2:81:ca:b2:61:b2:9e:62:3b:3d:96:42:ab:57:2f:
92:41:30:c4:ea:8e:94:91:d4:b3:cf:09:8b:31:b0:5b:0a:b7:
d3:cb:97:a5:c1:04:7d:ee:c1:5c:64:c2:41:21:c2:fe:24:27:
9d:1c:d4:f3:a8:07:5a:3f:6f:a6:a8:13:4d:31:48:05:5f:c6:
b3:b8:14:0c:64:d3:2d:22:0c:6e:72:e7:fa:69:cd:97:c2:f4:
73:fe:e9:38:4a:de:9e:df:d6:10:f6:6f:d3:b6:aa:68:81:3d:
a8:59:ab:22:da:80:97:95:aa:ef:b6:00:74:9b:0f:1b:1a:24:
57:e1:a6:aa:f4:62:af:0d:13:7e:c8:84:08:c9:57:46:b5:f7:
31:05:f0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:37:50 2026 by rpki-client