Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
File: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft (raw, json)
Hash identifier: 94ocA9roO8HL+gsXtnzNN7xcjvk14K667zN5OULo2v8=
Subject key identifier: 92:D9:80:06:AA:B2:F9:C4:4C:79:76:BB:70:09:4A:9A:2D:E8:9B:F6
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial: 019E3117186A4E8E5A49563B3107192DC42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
Manifest number: 0AA8
Signing time: Sat 16 May 2026 14:00:57 +0000
Manifest this update: Sat 16 May 2026 14:00:57 +0000
Manifest next update: Sun 17 May 2026 14:00:57 +0000
Files and hashes: 1: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl (hash: qZZJK59Fzsqz1cb+dCzfVCnebv5FtYZTWsWcnHm82x4=)
2: HCLMfVSYMXhaXPDTQeNyUs3_km0.roa (hash: qS9rBLPDOBtr9IKEEF8WbooTuAl7SLlqT29bHOmlbUM=)
3: gBoNUQ_CTGnWgUM07GFr-rBWBjY.roa (hash: FSsCz3l2v0+0v9doEdJtlcnkPmunLIWLZEkaSuag6Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:18:6a:4e:8e:5a:49:56:3b:31:07:19:2d:c4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Validity
Not Before: May 16 14:00:57 2026 GMT
Not After : May 17 14:00:57 2026 GMT
Subject: CN=92d98006aab2f9c44c7976bb70094a9a2de89bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:42:0f:90:9f:72:26:69:37:cb:c8:e9:96:
52:63:08:27:0b:57:49:d7:4c:52:56:2b:39:6f:d7:
9c:0b:81:da:b7:26:ed:f7:57:e8:91:92:7f:2f:6b:
aa:13:f5:6c:1c:12:0b:53:da:ef:1b:8b:a7:9a:b0:
83:f0:32:2b:90:51:36:3b:73:8b:2f:30:07:64:44:
fb:59:68:35:c3:ef:50:7f:4e:f3:7e:ec:25:bf:bb:
9b:fb:aa:7a:c2:c8:5c:25:a1:94:fa:de:c4:52:e5:
e3:bd:67:f1:36:62:bb:05:d1:24:c5:47:81:68:27:
44:6a:17:45:f7:c3:d3:49:3b:f8:6c:81:66:92:3b:
f8:95:f7:87:b2:14:a8:d5:e2:b8:bc:6b:3a:12:24:
79:c3:78:74:39:6f:c0:88:e6:08:74:3a:be:54:1d:
9b:d7:a3:98:db:2f:50:4b:45:4c:61:03:75:1f:c1:
79:76:d9:06:cf:f7:b9:c6:68:5d:1a:3b:eb:9a:3f:
d4:7f:03:f0:9a:bc:a2:81:b2:5d:07:37:07:e0:32:
14:a1:9e:df:e9:d1:2e:c1:0b:e0:6e:dd:af:fd:0b:
13:1a:81:60:0d:58:90:40:86:7c:e2:6c:2a:fe:bc:
b8:ff:27:0f:5c:07:88:55:a4:d5:ef:af:2a:cd:cf:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D9:80:06:AA:B2:F9:C4:4C:79:76:BB:70:09:4A:9A:2D:E8:9B:F6
X509v3 Authority Key Identifier:
keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8c:bc:52:ed:1d:a8:84:28:73:96:3a:14:8b:c8:79:5a:93:
52:c8:83:20:57:77:14:75:66:8c:cb:b9:44:34:a7:3a:4f:06:
e7:58:e6:40:a0:c2:f5:f8:c4:91:cc:cc:7d:62:c3:eb:9b:3a:
ea:b3:22:4b:27:80:cc:03:3c:ad:3b:23:34:a2:88:e4:17:83:
2e:ac:b8:69:19:57:0a:15:8d:e4:ab:f0:7b:bd:f2:1b:d0:0b:
c0:57:74:86:36:7a:d9:75:46:76:6c:88:7f:99:83:bc:1c:a6:
8c:1d:2b:4f:d9:5c:a0:2d:5c:8b:7c:cc:97:63:ce:a1:b8:d7:
07:19:36:15:82:b6:77:1e:cb:ed:fb:c4:16:31:5e:ce:77:48:
4d:a8:94:cd:99:b5:12:05:5a:e0:1b:58:9c:cc:4b:3b:6d:63:
c3:4e:31:ae:32:b4:f7:f0:fd:30:16:6b:74:87:5b:f6:94:94:
b2:de:dd:72:d3:36:7a:89:bc:d0:25:68:aa:81:03:26:a2:51:
1d:ff:2e:2c:d8:3c:d3:be:1b:79:c9:04:0a:34:1a:09:96:ef:
ef:87:7d:55:cf:d2:93:96:2d:80:7c:77:aa:33:ae:fa:fd:67:
f5:2f:b0:97:89:56:0a:ff:2c:0b:50:cd:ff:a1:42:7a:69:f6:
20:28:cd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:23:52 2026 by rpki-client