Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: 4EtpJsRgCshsJW7IiG7hNap7xzodosFTv9XqrKeLnk4=
Subject key identifier: DF:1D:92:8C:8C:93:C9:6D:08:E0:69:DF:70:33:86:22:2D:8D:56:84
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 019F183058D326B5965F5F4B7FC249E863E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 11:00:49 +0000
Manifest this update: Tue 30 Jun 2026 11:00:49 +0000
Manifest next update: Wed 01 Jul 2026 11:00:49 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: oXakaV4CcdT6AQHUyBEvAAVdVE3BoXlUWUZ41s35aBA=)
2: NuU8W7V2quwnNAYLT9_LV52Vbbk.roa (hash: SGhDxlcXeif+7R/rxn7Q7SC8rZycoqSPaENJlB28piw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:58:d3:26:b5:96:5f:5f:4b:7f:c2:49:e8:63:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Jun 30 11:00:49 2026 GMT
Not After : Jul 1 11:00:49 2026 GMT
Subject: CN=df1d928c8c93c96d08e069df703386222d8d5684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f1:f8:54:72:a1:39:b9:13:55:0d:38:8a:66:
63:fe:ce:79:03:76:1d:53:37:29:d7:22:c6:5a:43:
30:3b:7e:2d:e1:04:c6:2b:03:9d:31:02:84:7d:5c:
4d:9b:51:8c:e0:68:ae:5d:ab:e0:e9:98:f1:a9:d2:
f0:bd:8c:c4:83:28:4a:15:fe:eb:91:85:cc:b4:cb:
1d:12:b7:ad:60:63:b5:8e:d1:1d:75:80:e6:b3:6c:
42:a8:b3:39:fb:6c:a5:68:3a:1f:85:ba:af:0b:b8:
05:dc:7e:b0:2c:bd:e6:16:54:e2:03:b9:85:0f:ed:
48:51:d5:de:bd:22:19:e7:c4:f4:d0:9e:a6:f6:2f:
99:74:e0:d7:85:1b:d7:f9:e2:a2:19:5a:f5:c2:5e:
b3:04:c6:e8:e2:72:e7:c9:46:79:c1:01:39:89:28:
30:ad:cf:d2:30:14:8e:86:4e:d8:b1:bd:81:3e:2e:
9e:9b:53:42:d7:d5:e9:47:7d:c0:13:98:ae:b7:6d:
7a:59:83:5e:7e:6b:a1:72:68:a1:0c:5d:55:16:61:
a2:07:24:ed:46:9d:c2:1e:37:c5:e8:21:a4:72:64:
3d:08:c1:d4:6b:6e:c6:a1:69:ca:3e:9f:4a:3b:db:
7e:b3:8f:14:ac:c5:b2:40:ad:af:cf:cc:98:a9:f5:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1D:92:8C:8C:93:C9:6D:08:E0:69:DF:70:33:86:22:2D:8D:56:84
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:a0:43:03:60:77:1c:e9:bd:d0:46:5a:83:53:3b:56:72:50:
c2:43:9a:22:55:cf:ef:34:14:d9:ff:fb:38:0c:bd:0c:0b:b9:
5a:46:73:92:46:9f:9a:60:18:ed:20:2d:84:d8:43:58:2f:3a:
0d:8b:55:46:7b:6f:8c:33:ca:fc:db:41:7c:87:c2:b3:c4:52:
b0:48:43:24:9d:30:69:01:7c:9b:85:f6:fe:bd:d4:a1:b6:fc:
57:f5:8d:40:da:3c:cf:48:5f:6a:fc:e9:09:17:3f:c9:cf:8c:
72:3c:56:79:a2:d4:2a:33:f3:4b:f6:69:c8:3e:da:34:b9:72:
de:de:bd:4b:28:96:0f:51:84:83:20:7f:e6:b4:2e:af:22:66:
e0:21:b9:40:3d:1d:75:91:63:03:3e:3a:89:67:2b:45:cb:81:
27:2e:64:26:97:cd:63:99:84:f5:86:2f:01:d4:44:e7:cb:33:
99:58:d6:f5:30:8e:7f:ca:24:cf:93:98:3d:0a:08:6c:de:c8:
ac:94:bc:18:85:65:a2:88:9a:b4:ae:e6:f1:08:e3:4d:4f:c5:
0a:1b:20:4b:a3:a3:9e:a8:8d:a7:58:a8:a7:e6:15:84:72:e0:
87:d9:13:a3:fe:d9:4e:b7:5e:1a:29:a3:17:04:31:9b:d2:6d:
67:b7:5f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:59 2026 by rpki-client