Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: JIHAyIiDbFgGeORLFl4Pa1X4yktJyZiPBZ66vZAuDjw=
Subject key identifier: F7:2F:2F:53:FC:05:76:14:6B:8B:8F:FD:B7:C1:41:D5:07:53:02:47
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 019E303B336826D91FD45F09EFD8E7CEBD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 1359
Signing time: Sat 16 May 2026 10:00:46 +0000
Manifest this update: Sat 16 May 2026 10:00:46 +0000
Manifest next update: Sun 17 May 2026 10:00:46 +0000
Files and hashes: 1: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: Drjum6YqXkirMEqYrfcJ2hH21rFhwgfZL4FevT51c2Y=)
2: iir-MP9u--5X9N6sLaapXHQB96w.roa (hash: KYgiiMZkt1y8OXMvRPUfLQi6b3EsUMCv28kMOUxnz3s=)
3: l8WM5SXhhLHZk6-0rTuPZujifDU.roa (hash: OwasY0cE4RjsEomhMQYGit6AbKnSUZ5M+37Aov/WE20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:33:68:26:d9:1f:d4:5f:09:ef:d8:e7:ce:bd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: May 16 10:00:46 2026 GMT
Not After : May 17 10:00:46 2026 GMT
Subject: CN=f72f2f53fc0576146b8b8ffdb7c141d507530247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:a3:51:4b:69:cd:a4:0b:ef:df:b6:c6:a1:
86:f0:ea:30:e8:d0:4b:6d:11:4a:de:4e:08:fb:9a:
40:1f:15:fc:a7:9a:7d:af:37:eb:20:57:f9:7c:4b:
e8:9e:5e:51:37:9c:2c:43:5a:a4:76:18:e3:40:29:
bc:56:15:76:4b:0c:09:28:8c:f0:58:fe:ed:68:7d:
8f:c0:cf:a1:32:ae:26:11:aa:10:2e:eb:4e:b4:34:
3d:87:75:8a:eb:c4:b8:12:a7:e2:f6:da:dd:0f:16:
68:93:ed:59:0b:1e:85:bb:4a:ad:2f:09:3b:35:92:
94:6b:62:ae:03:2b:16:00:5d:f3:1a:21:0a:04:f4:
68:bb:1e:8e:18:35:04:a5:50:b4:6b:99:9f:0c:21:
fa:48:9a:b7:17:c1:77:88:8e:19:e1:e2:0a:65:fd:
5a:66:9e:d1:cb:2b:ce:9a:20:c5:ea:72:22:13:de:
d0:16:19:8c:69:82:cc:e5:62:b9:c0:f5:bd:9a:70:
bf:29:6d:f4:4e:15:97:ea:45:d9:46:b9:6c:69:fa:
be:72:83:f3:2d:91:59:05:d5:6f:dc:01:8b:7a:90:
7d:ce:0a:b9:d8:ce:73:80:d2:cf:f4:71:1d:cd:70:
12:9c:9e:77:8e:36:74:45:81:2b:ef:71:86:2b:e4:
32:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2F:2F:53:FC:05:76:14:6B:8B:8F:FD:B7:C1:41:D5:07:53:02:47
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5e:22:8f:78:29:57:ed:28:ed:88:3f:d3:84:2b:70:fb:e6:
6d:9b:4c:ba:70:e8:3c:5d:9d:70:ad:92:8d:9a:e2:02:87:f9:
6c:18:98:73:79:14:ee:02:35:bf:a6:d3:5b:5a:50:d7:6a:18:
fa:27:8d:c0:d0:99:0c:c6:c4:b6:f9:e6:cc:5a:a2:32:df:c7:
83:e4:ad:5d:bd:f8:c1:48:c3:fb:a7:97:49:af:b2:8f:4e:da:
2a:bb:3e:fe:65:1c:e1:51:81:25:35:fb:c2:20:fb:1e:9c:91:
23:d6:18:d7:80:56:5c:f7:c5:12:1e:f8:2b:6a:cc:70:19:74:
77:4a:0f:dc:95:19:3c:2e:ad:97:7f:c7:99:48:48:de:c9:d3:
0d:6e:d3:06:86:97:57:53:31:dc:dc:55:5d:8f:b5:5c:99:b7:
0e:ef:43:f6:dd:a3:ae:0c:e8:e9:78:af:bf:b2:f2:30:29:f9:
c8:d8:6c:6f:01:be:4d:df:09:84:27:5a:df:a7:46:0b:c3:bc:
5c:a0:c2:b5:e0:74:06:09:82:c8:5e:66:04:2f:00:a0:d9:00:
82:ea:b4:ba:a9:5c:db:9e:b8:7a:6a:13:f7:c1:2b:c7:3a:5a:
1e:8a:de:f7:37:7d:61:75:ab:3c:07:86:04:b3:3e:4f:58:80:
49:0e:c2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:56 2026 by rpki-client