Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json)
Hash identifier: 5ly3lt5uyI/ezmmNj62YxN133hecTtCuAwUqrUqB0pI=
Subject key identifier: 4B:07:28:1C:44:FE:C4:D9:20:E5:AC:A2:09:DA:B2:7B:D1:15:68:18
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial: 019E3004DCBA4C223405B57C1CF64D45081E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
Manifest number: 0BC8
Signing time: Sat 16 May 2026 09:01:25 +0000
Manifest this update: Sat 16 May 2026 09:01:25 +0000
Manifest next update: Sun 17 May 2026 09:01:25 +0000
Files and hashes: 1: 1e3-ee_DDB8uKbq4DDF2oeY9brA.roa (hash: d1HzxXfkVXwQpykJbxZZ+w5Pxsb18cIOczK6ype9Npo=)
2: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: p84yCX/RFsrX+MkDQVB6lMCD+QdSjbZvdAshIJJJpCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:dc:ba:4c:22:34:05:b5:7c:1c:f6:4d:45:08:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Validity
Not Before: May 16 09:01:25 2026 GMT
Not After : May 17 09:01:25 2026 GMT
Subject: CN=4b07281c44fec4d920e5aca209dab27bd1156818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:87:9f:8b:78:82:b5:56:25:03:43:81:c4:
56:8a:7c:43:94:7b:34:51:b7:4d:30:b1:2f:e4:13:
8d:60:50:a9:87:c8:cd:a5:f7:a2:73:fd:49:93:66:
64:87:1b:2d:65:ad:5a:88:b3:d5:68:d6:2a:02:c5:
23:0c:58:25:74:11:e5:10:44:7e:c5:a3:28:69:22:
8d:8b:69:c0:58:2b:11:98:60:5f:20:06:1e:43:1e:
5b:c4:5a:3b:60:57:cc:19:d5:f5:78:de:7d:ed:32:
6f:8c:3f:c3:38:a5:bb:ed:cb:af:6a:9c:59:eb:de:
56:d1:9e:82:88:a0:fd:1f:21:04:ab:67:a1:38:c5:
ca:ab:65:1c:ff:61:01:66:94:89:87:c5:93:db:df:
64:f3:ab:89:ab:04:55:c9:df:30:76:d6:8e:48:60:
25:f3:97:10:20:12:9c:00:cd:49:f2:04:8b:04:4d:
23:24:30:a8:76:d3:4c:7b:05:a5:0d:aa:b3:2e:a7:
97:28:23:da:7c:68:23:79:37:52:a9:63:49:70:2c:
2a:6c:9d:1e:21:63:cd:69:33:c8:6f:e3:af:96:c1:
fe:68:6c:55:2f:15:28:9e:9a:16:76:56:e2:8f:1d:
86:55:55:f2:6c:9e:4e:5d:be:d6:30:5b:0a:6a:20:
30:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:07:28:1C:44:FE:C4:D9:20:E5:AC:A2:09:DA:B2:7B:D1:15:68:18
X509v3 Authority Key Identifier:
keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1e:14:9e:92:f0:3b:7b:fc:35:00:0a:b8:07:99:b8:b1:62:
5c:f4:a4:21:25:50:03:67:36:69:07:71:ad:d2:64:b2:da:7a:
8f:42:ae:32:0c:2c:e4:30:a6:90:26:5e:63:61:9f:25:fc:78:
50:be:32:99:d1:91:01:7e:16:92:ef:8d:dd:73:95:65:2f:58:
41:2e:6d:64:af:ec:9b:4b:c8:84:e4:ff:f8:ac:ee:58:e6:4d:
00:b2:8a:cb:cd:c5:19:82:00:13:5f:62:c9:9b:9f:79:65:62:
7a:35:66:b4:88:80:6a:9f:13:9f:54:be:68:3a:d2:1a:1f:13:
eb:8e:58:1c:20:60:22:89:c3:b7:d8:48:c2:e2:1d:12:e9:03:
16:1b:e6:5d:6c:39:2c:40:f9:43:47:e7:ea:e0:d8:98:d6:05:
92:ed:86:37:ab:5d:2e:23:28:b9:67:b1:b1:82:ec:9d:0e:21:
f8:23:21:46:13:fc:d8:d9:82:9e:a2:93:71:12:78:05:43:bd:
cc:40:c6:cd:ea:fb:fa:5e:bb:c9:86:23:90:7e:22:b7:06:3d:
e4:72:6c:86:f8:8f:0a:dd:89:d0:38:d9:88:3b:98:d6:c9:67:
de:95:92:ff:42:6b:de:2e:15:1a:c1:40:b1:7c:a5:4d:e5:da:
04:2b:9f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:56 2026 by rpki-client