Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
File: 8jWG8iDMsNHFLArt9edm7KGhHHQ.mft (raw, json)
Hash identifier: Eu8gyiaOQ/2v8a5OIOpNfCMyd2JBufMoZyqJ9Gx4BZI=
Subject key identifier: 05:53:CE:4B:A4:E0:B2:3A:85:57:06:F9:6B:9F:1B:FD:34:2A:68:97
Authority key identifier: F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
Certificate issuer: /CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Certificate serial: 019E3004A102C3A604B09A879E88FB804DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
Manifest number: 076E
Signing time: Sat 16 May 2026 09:01:10 +0000
Manifest this update: Sat 16 May 2026 09:01:10 +0000
Manifest next update: Sun 17 May 2026 09:01:10 +0000
Files and hashes: 1: 8jWG8iDMsNHFLArt9edm7KGhHHQ.crl (hash: cS51wouVLvef4iApVMtZ9292+MXDKB0J0W0KEfYyyWQ=)
2: Hkxvl640wTVaCG4wxC1K28YsvUQ.roa (hash: ekA7LP7tcvUQDtaAhAw2EppmtQVZSvzCUQgbHmX4j7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:a1:02:c3:a6:04:b0:9a:87:9e:88:fb:80:4d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Validity
Not Before: May 16 09:01:10 2026 GMT
Not After : May 17 09:01:10 2026 GMT
Subject: CN=0553ce4ba4e0b23a855706f96b9f1bfd342a6897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:73:a5:68:a0:ac:35:2e:ec:18:5f:35:d9:
2d:b2:3f:0d:5d:b8:d7:0a:24:de:f2:23:f8:b5:94:
a0:16:90:67:39:21:b4:1c:7c:7d:5e:71:fd:f8:d4:
5e:59:a9:5d:cd:73:36:b7:9e:da:65:b8:da:15:4c:
c7:ec:22:33:6a:6b:1a:d4:19:b8:25:4e:34:a6:54:
6f:63:5b:b4:92:67:5f:68:25:db:2b:5d:99:6f:b0:
35:e9:64:6a:99:ea:8e:54:23:21:ad:b6:30:5a:18:
21:1f:c9:9b:e1:4a:26:c3:a0:3f:16:a0:da:c2:ed:
35:13:fd:b9:77:12:a8:69:54:35:b8:fb:d6:28:9d:
56:c8:19:a5:b6:36:0b:44:29:b6:b2:4b:a2:1a:e5:
6a:b5:7e:37:12:fc:6d:36:f9:64:25:e7:aa:d9:ba:
48:d2:8c:6d:9c:7e:15:22:bc:1f:a4:fe:7d:7f:49:
ad:cc:73:02:aa:ee:b5:c4:62:8e:14:21:c2:96:ce:
2a:fd:d4:2a:ae:d7:bb:ea:ce:fe:fa:13:b3:f8:5b:
8b:3e:e5:ab:fe:ca:39:a7:7d:f5:de:8f:03:ef:a3:
ef:02:5e:f9:49:c0:fb:be:32:fe:50:40:1f:f7:b2:
56:78:0b:df:ea:71:93:c2:ad:80:18:cd:09:7c:07:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:53:CE:4B:A4:E0:B2:3A:85:57:06:F9:6B:9F:1B:FD:34:2A:68:97
X509v3 Authority Key Identifier:
keyid:F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:79:31:70:d3:63:ae:7c:8b:3e:2c:05:5c:66:47:c1:56:09:
36:9c:88:a6:61:da:1f:08:8a:4b:09:21:6b:64:1c:5e:d8:9a:
4d:f8:f0:b6:e9:7c:e0:06:a4:d4:0e:4a:80:2d:1b:e3:1a:ab:
22:08:08:e8:7b:5e:0e:22:2e:6f:8e:3e:cf:78:a7:64:f3:02:
09:95:63:b7:1d:8c:11:9d:2a:4c:ec:ad:b2:dd:a0:86:77:fa:
29:c9:6a:7b:af:e3:88:f2:0e:45:f8:96:8a:fe:08:7b:a1:9b:
10:18:26:46:b1:30:40:a6:35:b3:1f:be:0d:9d:b5:97:c5:f7:
02:d1:d6:5b:48:cc:2d:b7:52:d3:a4:28:28:70:c1:53:ea:15:
a3:02:09:5e:1b:1d:3e:83:05:a5:7f:76:b9:34:23:e4:d6:f1:
6e:1d:17:37:fe:fa:05:aa:1a:40:6c:e0:33:b4:39:28:3f:41:
b9:fb:a2:2c:a0:5d:6a:e9:e9:1b:b5:05:d1:56:65:c9:cb:28:
b7:f1:ed:f4:56:e0:ac:f3:19:27:8b:01:51:d7:e9:3c:63:b6:
27:ee:8c:ea:7e:62:ef:35:04:c2:66:78:6f:66:4d:13:15:02:
ae:46:4d:2e:1e:09:67:45:0f:84:77:4d:b6:d2:a7:7a:15:86:
81:fa:93:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:27:10 2026 by rpki-client