Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
File: v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft (raw, json)
Hash identifier: cB1jPzHHQFmpkWPP2di3LJbnVQ7MfzvtfSisS0NUqS4=
Subject key identifier: 1C:EC:35:4C:A4:5C:BD:7E:8F:7C:86:EA:79:BF:4D:01:8F:7B:CE:39
Authority key identifier: BF:C1:E6:D5:9E:8E:0F:12:FC:33:61:B1:71:30:AD:F5:3C:E2:68:72
Certificate issuer: /CN=bfc1e6d59e8e0f12fc3361b17130adf53ce26872
Certificate serial: 019EFC15A07CADDE8C089EFCA29A0005D928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
Manifest number: 0144
Signing time: Thu 25 Jun 2026 00:02:16 +0000
Manifest this update: Thu 25 Jun 2026 00:02:16 +0000
Manifest next update: Fri 26 Jun 2026 00:02:16 +0000
Files and hashes: 1: V9AvU1-J1GEKPmtrDYXycfLN7Wk.roa (hash: uu21sXMMMyhfsxDU3zzrtXgihjX3PJKzctA9l0OnNNk=)
2: v8Hm1Z6ODxL8M2GxcTCt9TziaHI.crl (hash: M1Gz8k1rpvdVBvKIdItjXxb9/CfzSkTr1SiUG4ax5h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 19:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:15:a0:7c:ad:de:8c:08:9e:fc:a2:9a:00:05:d9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc1e6d59e8e0f12fc3361b17130adf53ce26872
Validity
Not Before: Jun 25 00:02:16 2026 GMT
Not After : Jun 26 00:02:16 2026 GMT
Subject: CN=1cec354ca45cbd7e8f7c86ea79bf4d018f7bce39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:0c:fe:bc:14:7b:a3:5a:7d:f8:cb:6d:31:
08:c7:40:77:31:55:27:f7:29:9b:c7:98:ee:6a:d0:
07:59:c9:0d:ed:da:3c:57:45:80:93:91:40:4d:f9:
20:47:51:93:89:c3:e2:50:e5:df:cd:13:11:97:d2:
8c:65:76:d6:1c:85:e9:c7:15:4b:05:cf:7f:cb:4e:
1f:5b:c1:49:92:c5:45:61:93:4b:29:10:f8:02:1e:
74:fa:fb:bd:fd:cb:04:b0:6b:e4:2f:46:cb:16:77:
d9:8a:b9:b6:25:d0:00:26:da:e9:46:45:39:56:dd:
d7:36:72:9b:be:36:db:69:8a:eb:ec:5c:cb:3a:bd:
d3:40:c3:72:57:82:7d:e1:56:9c:93:6b:b8:34:06:
67:20:fd:22:41:29:04:27:a6:fc:77:ab:d2:ae:a1:
8c:7e:fc:74:52:cb:89:a7:4e:76:0e:a0:40:7a:8f:
fa:d6:63:4f:37:13:a9:79:f6:d1:6d:6a:70:98:38:
e0:18:82:e4:07:6e:7e:02:9a:c2:44:60:18:ff:8c:
3f:a5:d1:20:82:13:b7:22:84:35:ad:09:a5:ed:9f:
7d:12:e1:db:f5:35:6d:5c:46:fd:a9:b2:59:0b:5e:
fe:f7:f8:2e:1d:e2:3d:24:18:41:52:fe:0e:eb:43:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EC:35:4C:A4:5C:BD:7E:8F:7C:86:EA:79:BF:4D:01:8F:7B:CE:39
X509v3 Authority Key Identifier:
keyid:BF:C1:E6:D5:9E:8E:0F:12:FC:33:61:B1:71:30:AD:F5:3C:E2:68:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1c:2f:9b:c6:5a:87:5b:3d:54:21:5f:0e:cc:0b:38:64:1e:
8e:08:9d:a3:cb:0e:7a:b8:ab:d3:1a:5c:86:12:39:54:7b:7d:
de:8c:e8:2f:4b:de:c4:0e:bb:5f:ba:4c:9a:9c:12:10:5e:4f:
a4:46:a0:64:91:1f:87:b2:11:cc:3d:f1:3f:86:40:78:e3:7a:
ea:89:6f:95:60:57:10:8e:bc:41:f1:a9:24:98:3c:b5:85:d1:
31:8d:7a:eb:42:80:55:61:59:d3:c3:f8:5c:3a:7f:62:97:35:
19:ed:32:4c:25:53:74:6d:75:d5:34:6e:13:ec:37:97:6c:37:
24:b9:4b:36:b5:a3:ea:4d:14:f1:f1:2d:3f:7e:51:74:a2:90:
74:e0:9a:aa:a6:98:ef:70:56:71:6d:9d:6d:a2:96:98:9e:ae:
93:69:56:62:a3:d1:d2:48:78:77:f9:6d:7e:61:f0:40:3a:ea:
2a:80:27:47:25:48:65:39:9f:a5:35:7f:dc:aa:d1:74:27:44:
ec:68:0f:3e:e2:f4:71:bc:f5:b1:ac:48:70:18:d8:26:c2:bb:
12:8c:6a:0a:d6:a9:a2:76:6b:c9:7a:61:e4:22:d3:37:91:34:
92:eb:6e:48:f8:e5:05:2c:28:29:83:f4:12:ca:dd:45:df:39:
30:d5:fe:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:08:53 2026 by rpki-client