Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier: vXXoudhQTW637sVDcDbNdjpVWHdOl2F/VVbcov/vqzE=
Subject key identifier: 42:2B:57:2C:5C:2E:42:80:67:F1:4C:5D:F1:90:B1:28:9B:E0:A8:D7
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial: 019F12658AD372EAE61C1708F98CFF4525BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number: 0920
Signing time: Mon 29 Jun 2026 08:01:12 +0000
Manifest this update: Mon 29 Jun 2026 08:01:12 +0000
Manifest next update: Tue 30 Jun 2026 08:01:12 +0000
Files and hashes: 1: Qg5YVX-ArwviT-5zEMtdK0QZQ3k.roa (hash: N2GUp/A12YuOzgdEUjTB8syXYjaMrKhtAtS9ZwORjp0=)
2: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: xRegvZuz9V0FeGEJUO/pJuJK6xC+BeEfVBVWliTZwI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:8a:d3:72:ea:e6:1c:17:08:f9:8c:ff:45:25:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Validity
Not Before: Jun 29 08:01:12 2026 GMT
Not After : Jun 30 08:01:12 2026 GMT
Subject: CN=422b572c5c2e428067f14c5df190b1289be0a8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:d2:d0:d8:09:88:33:be:ec:83:37:26:36:
a7:f5:ac:81:bd:e3:e8:ff:4d:73:3a:e2:4c:20:cc:
1e:28:98:01:c4:3a:d4:fb:e1:65:d3:d2:c6:22:70:
2c:2f:51:da:e6:78:3f:61:09:27:e6:d0:ce:aa:b6:
8e:77:cf:5d:0b:f8:c0:b1:c6:49:d1:c0:2b:2a:b4:
98:71:ac:75:85:15:71:c4:f7:87:44:1c:7a:1f:f0:
84:66:78:b4:cd:f1:2b:16:7b:96:21:be:65:16:29:
20:7a:1f:ac:17:76:10:52:7a:8a:82:f7:27:e4:12:
8f:af:37:89:73:4c:76:b6:30:03:25:47:50:d9:fb:
3e:87:17:c7:af:9d:fa:6b:b0:63:ea:be:43:aa:15:
64:c4:91:0f:69:57:2a:02:d5:81:90:3a:a6:b7:12:
d9:2f:95:70:e0:88:a2:ec:1c:8a:45:f7:b9:3c:dd:
dc:6e:71:f5:99:74:9f:42:f7:f6:55:6f:21:d1:9b:
75:4b:ff:af:17:a3:c3:f7:44:0e:25:60:09:b7:7e:
45:10:d3:42:d7:14:bb:28:1e:40:6c:9b:c3:39:f8:
cc:02:0e:a3:72:11:15:34:4f:e1:91:c0:ae:3a:8e:
2a:d5:8a:14:2d:bd:53:d1:14:ec:6d:0f:a4:da:f7:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2B:57:2C:5C:2E:42:80:67:F1:4C:5D:F1:90:B1:28:9B:E0:A8:D7
X509v3 Authority Key Identifier:
keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:28:d1:b8:f6:9b:a2:33:50:a6:e9:fe:04:7f:2c:d9:76:9c:
22:c1:68:ed:d6:3f:22:ba:eb:28:e6:92:25:4c:81:ae:f2:01:
79:71:f0:78:6e:00:9a:2d:f0:51:3c:fb:d0:7f:69:5c:36:e7:
f4:e2:d4:c5:6d:21:d5:4a:9f:95:38:13:f5:bf:bf:b8:59:ba:
85:d2:fe:f3:2a:84:ec:ec:0f:96:71:b0:e9:17:09:35:49:3c:
c0:df:0c:96:e9:28:a0:a0:71:dd:42:e5:35:d6:83:06:87:80:
b7:19:2b:c4:c8:50:57:09:6a:90:39:93:cd:3c:39:3a:89:c6:
65:22:b2:c3:f0:fe:fa:9d:ea:00:56:45:cf:ee:2a:4f:84:40:
73:a4:18:1f:72:68:25:21:30:a7:f4:d6:68:f2:75:bf:0a:72:
a0:d4:db:71:3f:7e:12:60:d1:f5:4a:36:b4:3f:ef:73:a9:60:
a3:49:5f:05:ce:67:29:f9:f9:7d:0a:4d:84:9e:62:05:83:b9:
63:54:1f:b9:5d:07:7b:2b:46:59:cf:77:46:72:50:f2:98:d2:
75:1e:7c:26:a9:1e:d1:af:fb:fb:dc:97:1a:22:cd:73:0b:93:
71:f9:75:ba:64:dd:df:0e:96:79:7f:fe:f7:42:81:c0:b9:6b:
4a:f3:e8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:53:07 2026 by rpki-client