Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: sUleeW0x+H/u1CSiI1aihei9CLdOIj68SO8VcNRmbjg=
Subject key identifier: 56:BA:F6:D4:C9:3E:42:27:F7:6F:AC:A0:17:53:91:6B:97:1B:02:AF
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 019E30E0CDE5ED1E014924190B45593AD4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 12D5
Signing time: Sat 16 May 2026 13:01:39 +0000
Manifest this update: Sat 16 May 2026 13:01:39 +0000
Manifest next update: Sun 17 May 2026 13:01:39 +0000
Files and hashes: 1: 2hKU1NYjNBDhpco5HEAK3um-kbE.roa (hash: YhjeByYxX6wVLssUtZI4v3Qulxa9a1zwl57K6O3z8yo=)
2: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: GfkNOycauOft/IXA5YOX3qWCtT2k+SHNAmJrK/X9/j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:cd:e5:ed:1e:01:49:24:19:0b:45:59:3a:d4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: May 16 13:01:39 2026 GMT
Not After : May 17 13:01:39 2026 GMT
Subject: CN=56baf6d4c93e4227f76faca01753916b971b02af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:be:3d:35:5a:1f:ca:e5:ff:26:c2:6e:4f:
7e:aa:e8:41:f6:b1:ad:ef:2c:d8:5a:8f:da:c4:4d:
e6:f3:3c:54:97:a5:79:c6:e8:05:8f:b9:21:d3:b0:
0a:e7:68:91:4b:f5:c7:f3:de:82:f3:92:2d:9a:3d:
57:40:fd:cd:79:6c:64:4a:6d:2c:75:13:e3:f1:ec:
ed:d6:1f:e4:6b:a3:29:43:95:43:4d:49:e5:bd:8f:
3d:2b:8e:51:43:f9:26:ec:45:6c:76:13:ea:32:fc:
de:b0:b7:e3:6a:1d:ed:25:86:be:21:09:37:bd:9b:
ee:e2:08:1b:da:4b:ca:76:bb:a9:05:e9:81:a1:66:
89:5a:76:1d:2d:94:cd:5b:28:d6:52:34:15:71:be:
bf:9f:c4:8f:57:f3:e1:8d:78:f0:78:01:4f:82:7e:
5b:36:58:58:77:b7:8f:bf:55:c7:b6:71:86:1a:a1:
ac:d0:66:22:37:1d:8f:1c:1a:67:b3:8d:01:35:ee:
d6:c7:c1:99:49:13:b3:22:73:ea:73:97:8e:6a:97:
9a:78:4e:a6:24:60:22:ed:b4:93:15:23:26:44:35:
0d:d7:a6:4f:19:67:ed:a1:49:9b:59:5e:43:8c:80:
46:c5:26:30:2a:3d:7b:a5:ca:36:90:55:1b:6f:21:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:F6:D4:C9:3E:42:27:F7:6F:AC:A0:17:53:91:6B:97:1B:02:AF
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1b:2e:e3:24:62:4c:0b:0f:8c:da:c1:8d:06:3e:de:ff:ec:
3d:ad:70:ba:9d:c6:39:93:b2:54:1f:71:b4:52:27:8b:b7:b6:
c8:db:00:23:88:13:74:7f:c2:01:83:07:1c:e5:e1:81:33:2c:
24:37:e9:89:04:02:e3:3b:84:5d:a2:18:49:79:7b:a7:3b:7c:
ea:6b:f5:89:78:cf:ad:5e:1c:15:a6:49:1e:b4:9c:09:1b:dc:
b8:bf:e2:4d:ae:73:29:34:cc:67:d3:f7:c9:84:31:1d:93:14:
c6:12:87:84:af:03:a5:e1:3c:a5:b7:5c:69:b6:f2:a6:58:1e:
8c:5d:2e:92:d1:71:48:47:ca:3c:8d:5b:2b:a8:bf:ec:10:50:
a1:c4:01:60:46:b3:de:96:22:2f:4e:44:6b:07:71:16:50:c8:
ce:47:d4:9a:17:42:a2:e9:9c:77:5c:8c:1b:32:7c:9c:f8:85:
ac:5c:b1:c8:6c:5a:0e:46:36:2e:ed:c7:2b:f8:b5:7b:aa:37:
70:c9:f2:c6:9f:cb:af:01:d1:5b:39:70:11:19:ca:53:1c:84:
ce:d2:18:30:d5:1a:71:2b:1e:20:30:b5:47:a4:c2:2a:05:05:
a7:4e:19:89:60:d7:bd:5f:fd:24:ef:38:99:71:54:35:a5:62:
cc:f6:53:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:10 2026 by rpki-client