Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: BNiiRPOJuYv9pPbDfQGHAHpIdg2xQm4AXkL/nPHLgNU=
Subject key identifier: 41:D4:DE:04:63:E9:C4:3C:89:5A:CD:22:DD:A6:57:20:85:1D:68:AD
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 019F189EE43A2B0EA984BF17F22BA5A328EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 134D
Signing time: Tue 30 Jun 2026 13:01:34 +0000
Manifest this update: Tue 30 Jun 2026 13:01:34 +0000
Manifest next update: Wed 01 Jul 2026 13:01:34 +0000
Files and hashes: 1: 2hKU1NYjNBDhpco5HEAK3um-kbE.roa (hash: YhjeByYxX6wVLssUtZI4v3Qulxa9a1zwl57K6O3z8yo=)
2: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: iKGyg568ODIr4pT1Vl9IRuwZVQ/xGobNauOZHmWJOfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:e4:3a:2b:0e:a9:84:bf:17:f2:2b:a5:a3:28:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Jun 30 13:01:34 2026 GMT
Not After : Jul 1 13:01:34 2026 GMT
Subject: CN=41d4de0463e9c43c895acd22dda65720851d68ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:6a:2b:47:d3:36:32:94:17:6b:e9:b0:64:
d8:26:af:e2:8e:c2:f1:5e:c3:55:14:2d:2a:bc:a2:
3f:13:c5:34:07:0f:49:f2:d6:b9:a0:66:98:84:9b:
19:52:fa:48:ec:9b:08:8a:3a:0d:8d:94:e7:99:c4:
16:27:58:1c:13:64:ab:f6:90:f1:63:4a:11:04:86:
7d:ac:10:1c:ea:45:7c:75:4a:5b:b0:63:25:43:f1:
bd:18:e8:42:ba:c1:f7:e7:fb:3b:48:0c:64:32:ff:
75:d1:ee:52:d5:20:ed:af:da:39:29:e4:b1:d5:2a:
59:b7:5a:76:44:9b:6c:b4:6f:c6:93:77:6c:e3:39:
09:2b:08:42:55:ce:1d:e4:ce:f4:9d:96:6c:b0:e5:
d8:86:04:09:11:29:ba:59:b2:b7:8d:43:32:c7:4f:
58:31:1a:93:4c:63:dd:99:9f:8a:14:28:c2:bc:a7:
50:21:6d:cf:02:2f:88:07:32:b0:31:c1:8c:bd:fd:
47:31:22:f1:b3:62:21:2b:23:f1:c0:a8:dd:b7:dd:
58:4a:3e:be:90:89:ff:03:8d:96:0a:cf:ad:38:c1:
d4:6a:d1:38:10:9c:fc:80:a2:6f:e5:55:02:99:ff:
8c:38:2b:aa:65:73:34:7b:89:13:ce:36:7c:8a:82:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D4:DE:04:63:E9:C4:3C:89:5A:CD:22:DD:A6:57:20:85:1D:68:AD
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:48:00:cd:2c:a7:42:04:80:bf:63:a6:eb:5b:6d:a3:1d:bc:
a2:81:21:cc:29:20:db:cf:07:ca:71:dd:f5:26:4d:1e:ad:70:
a3:ab:3e:d1:12:1a:da:25:fd:5f:15:be:cf:af:74:b6:9c:10:
d0:65:86:19:54:41:91:a9:57:ba:eb:46:bf:7a:c5:51:e1:93:
0d:3d:43:e7:48:9e:ff:dd:21:5d:da:14:45:e9:54:9c:80:e4:
25:b9:b7:26:ac:5c:90:03:59:a4:bd:79:1c:b4:56:d2:18:21:
57:c0:45:08:b0:30:8a:b1:af:07:73:af:b2:16:70:ec:21:fb:
f8:19:a8:14:3d:c2:fe:9f:cd:e8:4d:29:88:ef:87:b7:b5:e9:
bd:fe:d2:73:f9:65:fb:39:7b:27:85:3f:ac:f4:5d:0d:f5:c9:
91:78:11:6d:d7:da:36:77:7e:fc:7d:d1:0c:90:90:44:bf:42:
07:05:ea:39:69:83:b4:60:ac:c2:93:99:97:cd:94:db:65:76:
14:79:55:3d:2c:5d:ef:b1:fe:bd:25:40:b6:7b:b2:4a:b5:cc:
56:47:e0:59:48:2e:f2:d9:4a:1d:8f:39:c5:c4:68:1f:17:e7:
65:9d:fd:13:8b:70:13:28:f0:59:42:b9:22:7c:88:3b:13:61:
06:49:ec:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:08 2026 by rpki-client