Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
File: 8KEScQQ06Frl_m-_Qedr3fk4GM8.mft (raw, json)
Hash identifier: UlcAxdqfiVvzJkcJxI9bM7t3cUWDSI80+RFIkmOr3c8=
Subject key identifier: C1:F8:87:75:1D:75:30:7D:65:B5:81:DB:59:0C:86:EF:CD:3D:0A:58
Authority key identifier: F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
Certificate issuer: /CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Certificate serial: 019E2FCDC6D3CAD258E280CA1EE6394224F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
Manifest number: 0788
Signing time: Sat 16 May 2026 08:01:15 +0000
Manifest this update: Sat 16 May 2026 08:01:15 +0000
Manifest next update: Sun 17 May 2026 08:01:15 +0000
Files and hashes: 1: 8KEScQQ06Frl_m-_Qedr3fk4GM8.crl (hash: yAK+bg7eDoJiEUKlj0a/8Et+ytBVD7wMIINO4ldZ/Ns=)
2: nwAF_VA7b5QLJBmqxWMgeg05ev8.roa (hash: c/NjZkh9geRKVWgr/sc352gf8HkePyWjE1VddV8tbrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:c6:d3:ca:d2:58:e2:80:ca:1e:e6:39:42:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Validity
Not Before: May 16 08:01:15 2026 GMT
Not After : May 17 08:01:15 2026 GMT
Subject: CN=c1f887751d75307d65b581db590c86efcd3d0a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:01:9c:7d:c1:6f:a2:da:4c:a9:10:a6:61:
ff:5a:26:44:72:69:67:0f:ea:a9:be:a2:c7:3c:b3:
96:4d:0c:97:af:19:cf:74:4b:47:30:a9:7b:e7:77:
01:30:87:cb:af:d4:5e:c6:de:d4:58:80:0c:59:e0:
66:25:61:db:f2:80:6a:5e:a2:84:66:d8:53:b9:31:
a5:fa:53:aa:6c:8c:82:10:9d:b9:f8:43:0c:79:60:
4b:aa:7a:f5:52:ba:ab:02:aa:29:22:06:bc:bd:3d:
35:32:92:ac:19:ab:2b:f2:51:d1:64:ec:2f:ae:85:
b3:b9:57:61:7e:2b:a9:5b:eb:7a:07:78:ab:ce:b0:
bc:fb:11:5f:b8:35:4e:8d:1c:0d:3f:fe:93:30:d6:
a2:97:e1:45:f5:fe:82:b2:0e:8f:6d:4c:fa:6f:59:
95:f6:68:60:dd:74:8b:d7:57:a7:f1:b7:0d:9f:30:
36:0c:e3:bc:50:1e:fd:63:e9:94:4e:e7:5e:34:f8:
25:38:97:33:29:3c:2c:a4:14:ac:84:af:bc:a3:6c:
23:3e:ba:0f:54:bb:77:5b:b5:20:37:02:c3:6c:0a:
41:cf:91:ce:ba:9a:8c:94:70:94:bc:68:1f:9e:18:
44:b5:fa:0b:a5:67:96:0f:b6:cf:36:4b:ea:95:25:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:87:75:1D:75:30:7D:65:B5:81:DB:59:0C:86:EF:CD:3D:0A:58
X509v3 Authority Key Identifier:
keyid:F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c0:a8:0e:d7:28:b6:10:b8:ca:df:cd:90:d1:30:39:0e:a6:
b8:dd:a8:af:e7:98:e9:ef:f0:8c:5b:2c:80:27:7a:d3:96:44:
0a:f2:1f:e9:09:a7:41:22:72:98:e4:0b:0f:6d:a3:57:ff:ad:
f0:69:41:96:2c:63:57:66:0d:c4:df:d7:a7:84:fc:98:6e:f6:
63:2d:48:d0:1c:e1:1b:f4:68:3d:e0:ef:05:cb:fd:28:26:70:
c0:11:51:3d:32:39:fc:ea:2e:4b:d5:6a:9b:d4:f9:8a:cc:d4:
ad:fb:5b:11:80:df:71:1b:56:00:78:ca:ba:68:7b:31:c6:d1:
94:b5:5c:77:2a:d1:b6:d5:a4:93:dc:6d:68:33:f4:a9:3f:7f:
d0:f9:e7:c8:35:96:75:17:c5:4a:25:33:c8:f9:7e:9e:f1:e1:
13:05:d2:36:3d:50:ce:15:f6:7b:67:09:8e:0c:d1:64:de:c7:
f4:7b:e6:13:5b:3c:5c:6f:b4:99:51:e6:a3:7b:3d:68:d8:ba:
7b:b6:32:07:a3:9b:22:03:37:7c:92:f0:c3:21:b3:1e:3a:5d:
05:7a:5c:e0:85:ea:65:0a:a7:cf:cb:8d:04:88:84:02:d2:af:
35:82:44:38:18:d4:35:66:99:f9:d1:e9:ae:8a:17:b4:93:02:
18:7a:eb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:26 2026 by rpki-client