Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: asJoNZnEW/j9LiqmFIZk+Z3o+muXo/AqKuygWyIjufQ=
Subject key identifier: 13:CB:4B:1B:BB:2B:84:EE:E6:A9:9C:66:D8:22:3D:AE:6F:AA:8F:3B
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 019E31BC35BEEC69EC1DCD97ED31F95014A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 135F
Signing time: Sat 16 May 2026 17:01:18 +0000
Manifest this update: Sat 16 May 2026 17:01:18 +0000
Manifest next update: Sun 17 May 2026 17:01:18 +0000
Files and hashes: 1: 5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa (hash: 4jlaZxhWTA1CCnRRprrMPJev1XSLyXsPJzXP/xH6h+Q=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: Tgl6gzvP8Uzh8qp1JOFwMoC+O8RYgOCumd4VwieEzIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:35:be:ec:69:ec:1d:cd:97:ed:31:f9:50:14:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: May 16 17:01:18 2026 GMT
Not After : May 17 17:01:18 2026 GMT
Subject: CN=13cb4b1bbb2b84eee6a99c66d8223dae6faa8f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:90:3d:12:c5:5d:cf:aa:aa:12:99:16:4a:
6a:dd:88:3b:df:b3:59:9f:64:18:b9:69:10:9e:f2:
be:6e:c2:34:52:72:b6:85:88:30:01:08:ad:4e:d7:
ae:c2:fb:8e:14:b9:15:a5:5b:1d:5f:f6:bc:24:3c:
5a:26:0c:9f:24:a4:80:5c:f4:cf:8b:a6:73:a1:76:
fe:2d:bb:20:c0:cd:f6:e7:26:ec:90:25:b2:60:2d:
e6:ea:ab:77:d6:7c:0d:72:36:75:52:0a:7b:2d:84:
86:45:1f:d6:02:ad:ab:e1:b4:f4:c4:ad:06:44:8f:
7f:a9:df:30:26:8a:f9:05:5e:da:cf:45:31:ba:0d:
3c:48:e7:a8:eb:70:1f:9b:9e:d4:8e:88:1b:6f:86:
d1:08:4a:b4:f6:36:8b:ca:64:bd:89:51:3a:ce:48:
33:77:37:9a:60:90:a2:21:41:70:31:6c:c8:b2:63:
f4:c1:fb:ec:46:da:fe:f6:18:11:1b:34:24:7f:95:
2f:31:38:ce:8a:91:de:31:a1:db:3c:6c:06:57:31:
4a:20:d6:58:d6:ef:0c:3d:d7:7f:f5:e0:61:b2:6a:
45:52:2a:67:c0:5d:df:bf:58:ff:b7:10:a2:dd:5a:
3b:89:9c:da:2f:f8:fb:ae:b8:6d:4b:89:9f:a1:52:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CB:4B:1B:BB:2B:84:EE:E6:A9:9C:66:D8:22:3D:AE:6F:AA:8F:3B
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4d:b5:84:42:41:8d:70:c0:8c:32:10:2b:73:cb:a3:4a:32:
d3:85:32:35:a1:4c:5d:59:40:b4:dd:b4:55:4a:c1:70:96:32:
bb:c9:ff:e3:8d:4d:77:7b:77:7d:77:95:a6:c6:41:7c:81:ac:
45:f9:f0:21:15:04:a7:9d:0a:95:25:8d:bc:16:52:6e:c9:45:
21:86:db:82:9b:f0:f6:28:43:f7:a7:4c:33:3a:db:ea:69:f4:
b1:63:fe:41:17:2d:26:72:1c:f1:04:8f:d2:51:df:55:e1:81:
b0:e3:4b:d8:86:5a:da:86:42:1d:bd:53:df:9d:9f:da:4a:fd:
73:9c:51:c3:0a:f0:bb:f4:59:50:65:08:1f:9f:f7:2a:14:a8:
0f:ab:c5:8c:00:20:09:51:e4:fa:ff:73:65:df:f7:68:f0:49:
95:72:a9:b8:aa:e1:a3:cf:a8:44:07:fd:d5:c4:e1:8b:1c:ae:
e1:c1:d7:ad:ed:26:21:03:fe:c7:c2:d4:90:f8:06:72:59:4f:
0e:56:9b:1d:d6:19:a1:f3:73:9b:3f:ac:bf:27:5d:87:e9:eb:
9c:a1:73:0c:60:46:1a:9d:61:8d:25:07:9a:47:d3:50:91:d6:
04:d3:3e:ed:74:3a:0a:01:41:ee:50:8e:81:9a:25:1b:ec:83:
f2:94:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:29 2026 by rpki-client