Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: g+V1GKdaQJGita4hab6DgRDDDeQAUqvrb2WCkRIp6OY=
Subject key identifier: 84:8F:B7:E9:B8:B6:DC:C2:08:57:33:42:E0:25:FF:AD:1D:EB:CA:44
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 019E307205FA6A9DC10259DD81ED176F9313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 11:00:39 +0000
Manifest this update: Sat 16 May 2026 11:00:39 +0000
Manifest next update: Sun 17 May 2026 11:00:39 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: YLpWwHozxZrAwocQgZgPXdhjrEn0aOlruXTbITWsrms=)
2: NuU8W7V2quwnNAYLT9_LV52Vbbk.roa (hash: SGhDxlcXeif+7R/rxn7Q7SC8rZycoqSPaENJlB28piw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:05:fa:6a:9d:c1:02:59:dd:81:ed:17:6f:93:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: May 16 11:00:39 2026 GMT
Not After : May 17 11:00:39 2026 GMT
Subject: CN=848fb7e9b8b6dcc208573342e025ffad1debca44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:ca:7b:58:59:20:f3:03:ed:91:5b:92:6f:
18:3f:b4:e0:4a:82:47:de:44:89:20:d7:4d:6a:53:
90:21:d8:83:28:d4:a2:7f:fe:ea:8a:1d:b3:84:27:
5f:92:d7:0f:7d:d9:fc:ab:65:b6:01:af:c7:13:4d:
97:39:27:f8:40:50:39:b4:3d:be:57:82:74:5a:b7:
49:09:17:20:f7:6f:f6:6c:f0:42:e3:23:8e:31:54:
4b:44:ce:e9:fb:c8:01:89:b3:d9:5e:3c:4c:74:c7:
87:21:1d:58:30:48:e8:2b:3b:08:30:02:0c:ce:63:
b4:bc:e3:20:04:1a:4d:18:f9:36:28:33:42:55:14:
7a:4f:b8:ca:be:cf:fa:51:cb:fb:57:ad:84:fd:1e:
e1:cd:67:7c:04:55:be:d5:85:9d:d0:a2:15:3f:7f:
92:c5:e9:9e:54:78:ba:1e:76:65:c8:29:7c:7a:f2:
3e:10:78:b4:94:ba:e2:37:74:3d:b4:fd:2f:0a:5a:
cc:34:96:a4:9c:69:33:ca:08:05:22:38:3d:9d:6f:
cd:0a:28:d1:94:e9:6a:33:f0:68:fc:b5:74:7f:80:
21:29:22:d0:25:8c:8a:d1:95:e2:35:3e:02:b4:b1:
2d:54:ca:57:65:ff:d8:58:bc:6d:91:01:7a:b9:e5:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8F:B7:E9:B8:B6:DC:C2:08:57:33:42:E0:25:FF:AD:1D:EB:CA:44
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1a:8f:ef:2f:8c:34:e7:95:6f:ae:1c:7b:7c:02:78:4e:af:
aa:22:82:d0:22:e5:99:14:6b:27:f7:66:77:ad:3a:9e:44:20:
ec:55:74:7a:f1:b2:88:aa:e2:ab:63:42:5a:49:ba:6e:8d:6f:
51:65:da:92:40:11:dd:2b:a4:b1:ee:d1:93:ee:56:bc:44:06:
32:28:5d:7a:53:ef:5b:a1:0d:5f:41:45:8f:d8:32:b8:b3:9d:
7f:8f:4d:25:99:fd:7c:7a:76:ac:cc:ff:2f:59:23:ff:78:1c:
c1:bd:e6:9b:7c:ef:43:3d:ec:d5:b0:bb:d4:69:72:e5:f7:f4:
60:3f:b7:c2:c9:f5:88:7f:e7:3d:ae:c2:74:d1:65:8a:39:bb:
e2:22:15:d3:a5:86:f7:67:72:6e:6c:a8:a6:e6:b5:b1:63:f4:
7f:12:d9:0c:88:5b:ea:53:66:aa:bb:89:14:dd:5f:08:28:91:
9a:1c:3f:3f:e5:6a:09:78:dc:a7:01:63:ca:86:27:5a:8a:51:
84:e1:53:d1:6c:d1:2e:3f:4e:61:51:05:fe:e8:99:02:4a:e9:
5c:ff:b1:c1:48:f6:56:c4:45:21:52:fa:11:94:1f:e6:4a:18:
64:f4:9a:6e:93:8f:00:eb:07:61:c2:40:2d:06:c6:b8:08:16:
ac:c6:80:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:08 2026 by rpki-client