Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json)
Hash identifier: Gn4RovmskA5sJk6TA62fQJ6cZhQ3BLHcbZh9CIorfMs=
Subject key identifier: 58:6E:7B:47:64:03:72:47:86:93:49:49:ED:02:36:E4:76:C3:6D:0C
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial: 019F17F93C9D5D399C2190B8D07AEB67F8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 10:00:37 +0000
Manifest this update: Tue 30 Jun 2026 10:00:37 +0000
Manifest next update: Wed 01 Jul 2026 10:00:37 +0000
Files and hashes: 1: 2SUVJ80PsPV5Sm7U3L8hHtyTcHk.roa (hash: KC9QuJ44Bvhyw7hXPqUGMgqZJZPJd+t4xVPwghxLews=)
2: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: LnohboRWoyIFuItfChAlocqDzofgB8tycS5UIjGjJJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:3c:9d:5d:39:9c:21:90:b8:d0:7a:eb:67:f8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Validity
Not Before: Jun 30 10:00:37 2026 GMT
Not After : Jul 1 10:00:37 2026 GMT
Subject: CN=586e7b476403724786934949ed0236e476c36d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:ef:38:4d:fa:87:ee:95:f1:84:fa:a6:d6:
b1:f9:35:ed:b6:82:cd:96:9a:75:30:e2:c9:db:03:
0d:f9:44:a2:9a:ab:16:10:6e:01:f0:44:3e:5f:30:
1f:ff:66:ba:b6:e3:39:c6:19:37:9c:28:fc:14:38:
b1:96:98:d3:40:ea:58:30:2b:00:20:04:18:75:e9:
8e:06:7f:de:c3:cc:61:63:1f:b5:27:ca:88:02:7d:
22:95:9d:40:b8:15:7c:52:5a:94:2a:97:ac:4b:d7:
61:25:3d:09:70:46:e4:59:e8:cc:11:4c:37:51:8d:
6d:b8:b8:f4:6d:5c:70:45:a8:42:3e:57:97:08:7f:
b1:5c:8e:cf:d1:0f:b5:0a:0b:e8:62:b1:b8:c2:8a:
52:20:f9:52:73:1f:91:65:a5:3a:7e:cc:a8:92:10:
93:d8:10:a8:3c:df:11:c9:35:91:20:68:47:0c:3d:
7f:0d:3b:1d:e8:8f:14:34:ce:4a:75:e2:a6:0d:4c:
c7:a0:0c:b9:6f:0c:9a:0a:1c:57:59:2c:29:bf:5b:
d9:6a:8c:c4:bc:bf:07:b8:bc:7b:b2:40:92:8c:b6:
6f:40:16:4d:49:0f:a0:e4:1d:1f:02:04:88:4e:54:
1e:d8:24:f0:99:09:b1:4f:a5:44:bd:f1:b4:b9:89:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6E:7B:47:64:03:72:47:86:93:49:49:ED:02:36:E4:76:C3:6D:0C
X509v3 Authority Key Identifier:
keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bf:e9:2d:f0:cb:3d:e8:e5:34:53:23:8f:56:63:f1:20:d5:
58:a6:21:7e:36:71:f7:d7:99:e2:4f:c1:f6:ea:d0:70:ec:62:
41:80:ab:5d:6d:55:76:48:69:99:ce:66:59:09:83:6d:d0:8a:
27:a0:bb:88:5f:51:dc:2d:e9:d0:d2:80:4e:41:de:b8:0b:21:
2b:1f:7e:d8:bf:b0:dd:9d:36:c6:81:f2:54:78:33:8a:9a:22:
9a:8c:03:d8:db:04:c7:42:aa:9b:30:df:ad:b4:bf:84:c0:0b:
c5:ec:87:c9:97:77:54:83:6f:fa:23:94:b3:8e:bf:64:92:69:
c6:6a:cb:9f:65:eb:bc:9e:81:88:57:37:3a:6d:63:e3:d5:04:
81:3e:96:65:74:a5:fe:4c:67:18:89:55:95:d1:98:3e:aa:5b:
6a:61:cb:4c:ba:93:94:a5:e5:bd:e4:ff:48:89:0c:58:d0:04:
8e:0c:d2:75:35:0e:5e:2d:c2:2d:eb:d8:b2:32:9f:17:2a:05:
92:27:e8:f9:d4:2f:e0:ec:07:ac:f7:1b:84:01:3d:50:6c:04:
12:fa:e9:ac:fb:5b:3b:00:da:7f:b0:58:6c:2c:62:20:46:7b:
e4:40:15:bd:02:ca:72:b6:dd:3e:60:44:41:1b:d8:c5:76:b5:
62:c4:fa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:06 2026 by rpki-client