Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
File: 8A5uimGIP2gBZbX0FUhfjw1PWo0.mft (raw, json)
Hash identifier: f6o/jM9RL6CBflbzTDUSqz7HTaiXpje8A/yMUyTY88s=
Subject key identifier: FB:2E:38:12:5C:01:FE:6A:D6:13:E4:9E:9A:B5:F5:68:A1:DA:B7:7C
Authority key identifier: F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
Certificate issuer: /CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Certificate serial: 019E300592825B3A436B2B1FBB7937A24204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
Manifest number: 1608
Signing time: Sat 16 May 2026 09:02:12 +0000
Manifest this update: Sat 16 May 2026 09:02:12 +0000
Manifest next update: Sun 17 May 2026 09:02:12 +0000
Files and hashes: 1: 8A5uimGIP2gBZbX0FUhfjw1PWo0.crl (hash: yuPESkWcH3BQtEFdPrQ+MtQi/ypYwFpPlZfdnw3gujA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:92:82:5b:3a:43:6b:2b:1f:bb:79:37:a2:42:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Validity
Not Before: May 16 09:02:12 2026 GMT
Not After : May 17 09:02:12 2026 GMT
Subject: CN=fb2e38125c01fe6ad613e49e9ab5f568a1dab77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:4d:f7:72:ea:57:74:8f:5b:ad:e9:c6:05:
4e:e9:94:90:41:37:da:d7:f2:2b:99:0d:53:27:10:
c5:96:42:d1:16:2b:f3:04:b6:78:88:6e:83:3f:f0:
e1:40:3f:70:11:08:d6:c3:7d:4d:1b:8d:f3:4d:7d:
4d:d4:7b:8b:86:47:92:e8:f8:09:6e:af:bf:3b:d1:
39:8a:d6:90:7a:87:dd:8e:a6:81:af:36:3f:fb:9e:
67:6c:aa:d5:6a:f0:a3:39:cf:ce:1e:8c:cc:86:a9:
3d:ae:02:8b:fa:74:91:14:ba:70:d0:d8:89:82:c9:
2a:bf:dd:d7:d8:18:79:2a:0f:31:d8:a2:7b:3f:81:
6e:93:aa:9e:d4:80:1c:c1:23:ef:56:52:68:ee:f7:
84:f3:15:60:a1:63:88:f2:fa:8d:ca:f1:de:2e:86:
fd:2a:ac:4e:50:5c:78:1d:2c:af:47:4e:5a:a2:99:
78:2a:1f:df:7b:46:26:ee:0d:7b:22:6e:df:f2:f1:
25:34:ca:3b:b1:a5:30:3d:80:f4:ad:9f:94:78:c7:
15:87:cd:20:51:b5:24:c3:c9:84:bb:90:e4:43:d2:
f2:75:6a:d2:bf:51:20:8b:06:b0:00:0d:0e:23:79:
b7:bf:01:57:57:e2:d5:f8:c6:6c:3c:06:29:dd:b3:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2E:38:12:5C:01:FE:6A:D6:13:E4:9E:9A:B5:F5:68:A1:DA:B7:7C
X509v3 Authority Key Identifier:
keyid:F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9c:46:cc:be:35:d4:00:54:5c:25:69:9a:5d:13:f1:58:05:
46:4c:f7:a6:45:b6:0f:bb:e6:11:1a:02:29:f6:99:e4:39:d4:
79:40:98:8e:da:a0:57:51:07:8a:ac:ce:ad:89:ca:b1:7d:4f:
ea:24:a0:b7:b0:f5:80:83:d6:6f:c2:81:86:da:d5:e8:d8:10:
1f:30:3d:ee:f7:c7:c3:77:a9:a9:23:6d:4c:54:95:3c:2d:95:
1a:d5:5f:a9:fc:87:65:06:94:ca:aa:cb:46:f1:7e:62:3c:26:
63:2f:a1:43:0c:53:ec:4f:f1:71:83:9f:2e:27:1d:4e:71:c2:
80:0a:77:c4:1e:f3:10:16:ba:ae:20:d7:7a:d1:35:79:14:f3:
45:95:4a:62:b4:f7:85:c1:7e:06:db:91:71:e3:7f:39:a5:d8:
32:7a:8a:4b:27:1b:ba:ce:5e:87:29:93:84:f7:cf:e3:9a:4f:
f2:d8:85:d6:d1:75:1c:9f:ac:35:de:d2:49:19:9c:9c:25:60:
c0:bf:da:2b:58:d2:e1:64:74:c7:06:9b:b8:2f:7f:48:43:0d:
8a:de:bb:ed:b6:57:62:41:a4:1f:57:a4:1e:4c:f5:33:09:b1:
d3:51:a9:ca:da:e3:4c:b5:6f:79:e2:d1:c1:aa:1e:71:a6:62:
75:9a:b4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:52 2026 by rpki-client