Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
File: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft (raw, json)
Hash identifier: JJ4bXoKcWRuFSuAcjaZ5jCNC1Um6hVFGQe/rlYIomCk=
Subject key identifier: 5C:65:CF:C9:06:05:32:7D:85:D3:56:B7:05:18:94:FC:78:71:1D:EC
Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
Certificate issuer: /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Certificate serial: 019E3072EBC0F5B3EDCA4F30315DD26DF5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
Manifest number: 0D1D
Signing time: Sat 16 May 2026 11:01:38 +0000
Manifest this update: Sat 16 May 2026 11:01:38 +0000
Manifest next update: Sun 17 May 2026 11:01:38 +0000
Files and hashes: 1: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl (hash: XTwyrvjAtUFsiRUY9B8rjtwhC3bpvFNkrVkp2wd8/O4=)
2: lsrjMA86eRQxhGEgie-FVkLeiRM.roa (hash: F6hSSs8gy1aleZ2DoCsRSqj6enBfgmEx5l9tec+wl2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:eb:c0:f5:b3:ed:ca:4f:30:31:5d:d2:6d:f5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Validity
Not Before: May 16 11:01:38 2026 GMT
Not After : May 17 11:01:38 2026 GMT
Subject: CN=5c65cfc90605327d85d356b7051894fc78711dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:81:90:7f:cb:b0:28:24:66:71:56:23:7c:
c6:2f:82:cb:c5:00:7f:c1:8d:fa:5e:f1:75:85:84:
2c:d2:0b:f5:73:11:12:f5:9f:c2:2f:78:68:e4:ed:
43:f1:76:f9:23:fc:01:6f:00:fd:cd:7d:0d:7d:c8:
6a:ff:f4:a9:8a:e1:b1:3d:7a:12:38:fe:df:29:32:
e5:65:d3:7b:2e:c6:c5:dd:93:d5:c3:ba:24:c4:ec:
f6:ed:07:60:a6:ee:bb:7c:13:02:c7:48:14:db:ff:
05:93:e0:71:8f:23:b0:a4:f9:41:d0:35:29:0a:bc:
70:65:8b:2b:20:88:6f:f0:c3:fd:d2:2b:b7:05:8d:
81:9b:15:30:d4:e4:5a:4e:08:7a:67:35:93:8d:4a:
7e:4f:36:8a:22:61:93:8c:fc:2d:6e:17:e8:56:c7:
97:e2:b9:1b:ce:41:9b:9c:23:4d:93:36:52:74:c6:
06:02:e7:ba:41:2f:dc:2b:93:35:65:82:2c:5c:8d:
cd:62:44:95:9d:53:5a:e1:e3:f2:81:dc:91:29:6d:
6a:3f:ea:1f:27:36:63:7f:0b:2c:b1:f2:a1:11:52:
28:0b:6f:e4:88:40:a8:c7:8b:cc:8e:99:c0:2f:3c:
82:fe:8d:83:6e:cb:e2:8a:72:94:96:6f:44:a7:92:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:65:CF:C9:06:05:32:7D:85:D3:56:B7:05:18:94:FC:78:71:1D:EC
X509v3 Authority Key Identifier:
keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c9:bd:46:2b:7f:80:6b:79:56:c6:30:73:ed:62:ad:ef:02:
be:5c:1e:3f:93:0f:02:90:c3:95:12:1a:ff:95:25:28:ce:8b:
8c:e0:2b:14:3f:c8:05:6f:31:52:0d:80:11:86:f8:b4:85:cd:
82:70:49:cf:0c:25:54:0b:5c:76:33:44:09:ef:f0:22:fd:0f:
16:72:bd:81:7b:82:07:0e:5b:ef:29:07:1b:35:8e:a0:fc:9e:
b1:6f:2e:bc:d6:f9:1f:0e:17:73:d0:ea:08:19:40:a5:c0:7e:
12:69:60:f6:7e:52:a2:1b:02:d9:35:d1:a1:b7:b9:3c:07:2b:
55:ad:de:ef:24:78:98:ca:2d:2c:01:5b:60:e2:42:85:60:14:
87:51:5b:9d:8e:a3:f3:5a:49:df:11:67:6f:68:17:b9:31:76:
3c:a2:54:b2:a7:d9:69:8f:7d:ea:de:2e:22:d0:28:53:cd:3a:
34:5a:f5:97:50:56:a9:85:f1:a7:cb:1a:d6:cc:ce:24:4b:96:
76:3c:16:35:a9:3e:f4:1b:ff:85:31:38:94:b5:44:95:fc:0d:
5e:16:88:70:20:83:94:2e:28:1e:3c:c2:14:5e:e1:3a:a5:67:
c3:8d:63:31:08:3b:41:4a:b8:26:71:89:b7:06:93:18:71:a0:
5f:84:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:29 2026 by rpki-client