Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: z93vzVoZLjM8P9bfRzAQ67J4k9xW2Gk4rZzTd+LnBcA=
Subject key identifier: 8B:33:F0:32:EC:7F:4F:01:67:A4:B5:D9:FB:5C:07:16:29:CB:20:3F
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 019E300588F9FAA974C4764BBAFE8246BD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 17FC
Signing time: Sat 16 May 2026 09:02:09 +0000
Manifest this update: Sat 16 May 2026 09:02:09 +0000
Manifest next update: Sun 17 May 2026 09:02:09 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: Y98FZ1kuAep/Fp5GUJaFz3Otkk77agqwYetR2FjjY18=)
2: IxS3kvRzUMr-NtO3nifzXWWmSJk.roa (hash: qpDGvej7zkl86WzGIYhDDPadX2GYJjhi3gTeMhgBZQc=)
3: SFE5HwFeeJrezj4ibh1knL4-c9k.roa (hash: sbuJSFJ3P5x9iliJOK4C/RfPfo5sFVvKp2ueiDAMwxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:88:f9:fa:a9:74:c4:76:4b:ba:fe:82:46:bd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: May 16 09:02:09 2026 GMT
Not After : May 17 09:02:09 2026 GMT
Subject: CN=8b33f032ec7f4f0167a4b5d9fb5c071629cb203f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:fd:17:bb:e4:6d:26:97:1d:a6:7e:f7:17:
24:4b:cf:82:1a:09:99:64:86:e8:57:05:b2:86:9c:
15:47:1d:0c:34:12:2c:eb:8d:e7:59:79:85:f1:f9:
bb:bc:cb:84:3a:3e:68:88:54:08:07:30:37:47:8d:
10:2d:08:57:20:48:26:12:fc:ae:3c:74:8d:22:05:
1c:69:7f:51:1b:8a:4b:da:ca:2d:f0:2d:7a:6b:3f:
00:22:11:c4:33:8d:fe:15:34:07:12:11:31:71:32:
5d:85:25:da:b6:89:8f:e6:84:27:63:51:b7:08:c1:
29:a7:e4:4c:cb:bb:fd:56:2e:76:6e:a1:0a:36:ac:
78:27:3b:ae:7d:19:77:44:4a:b0:a4:2a:e5:0e:83:
7f:32:db:35:0a:b2:21:48:5b:ca:5a:c7:1a:9b:e8:
29:51:e5:fc:8b:51:2a:f1:e4:f5:6b:ac:f9:bd:6b:
f7:26:d9:cc:ca:ba:50:71:d6:ae:77:95:a0:f3:ee:
2f:fe:9e:3f:54:9e:7f:37:3d:90:b3:69:b6:56:6a:
3b:f4:f2:68:23:dc:94:4e:37:40:65:f7:39:7a:41:
a9:98:77:f7:6a:1a:af:4a:0a:ab:b1:2f:84:bb:89:
4b:4f:64:f0:82:91:67:1d:c3:f9:1d:c0:89:fe:67:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:33:F0:32:EC:7F:4F:01:67:A4:B5:D9:FB:5C:07:16:29:CB:20:3F
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b4:37:dd:e9:76:28:20:f9:8a:70:bb:6d:e0:2f:12:76:0e:
fc:00:c3:6a:04:9a:d0:98:26:c0:89:c3:72:ff:fd:82:57:f0:
b9:ba:c3:7e:ca:82:35:40:16:00:58:3e:b3:74:15:dc:05:96:
cf:14:5c:5c:84:4a:38:d4:9e:be:24:7f:bb:2d:71:b1:a1:cc:
77:71:e5:70:62:63:85:b2:08:d5:80:7f:d4:3c:ae:a0:ec:4d:
c2:46:9f:0d:80:85:b6:c6:0e:77:fa:53:11:11:94:1f:20:0a:
09:fe:85:da:c2:c3:cf:d3:bd:35:bc:7f:10:10:92:6e:45:76:
97:0d:d3:07:5a:17:6c:31:ae:ee:6b:ec:40:66:fd:00:d9:3d:
9d:8e:77:18:1d:1b:a7:4a:09:92:ba:f7:94:f2:a4:52:26:02:
25:d3:9d:0b:96:77:b8:d9:13:e1:43:b9:82:93:b5:4f:bf:a1:
bb:56:87:90:47:69:2b:20:75:6f:2c:6f:da:f7:1a:55:78:67:
f0:56:ce:33:ed:2f:42:f9:a1:55:08:2a:ea:58:47:e3:92:84:
1a:65:ba:1c:bf:6c:31:a9:8e:8a:18:1e:17:f0:7e:95:8f:c8:
bf:89:89:bf:38:0f:50:f0:51:ca:8e:08:16:a2:57:32:60:ca:
9b:9d:49:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:10 2026 by rpki-client