Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: O76643O0m72G4ZkTZeDAZSMGD6xsFz+FCA12WATCFj8=
Subject key identifier: CC:2F:02:B8:3C:AF:68:7B:5F:A2:7A:AD:E1:9D:14:DF:A9:7C:12:1D
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 019F115298593D34C2144F143064B0F95E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 03:00:53 +0000
Manifest this update: Mon 29 Jun 2026 03:00:53 +0000
Manifest next update: Tue 30 Jun 2026 03:00:53 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: 5HBLx0x49tv4u3zv3ST8hcP+7kdQg0B+RCvdz5a39vg=)
2: PLcdq8HBbATb33TrLOZuRDuXEVQ.roa (hash: XGsrxoZcwiWsioFa6/X1psR1kn5m17Bl9f4lBLZE5dk=)
3: yYbe2iJW7P_sCDhFY34_L0RrDto.roa (hash: a8JSg8aR8AsTXy0JLCDrOWelsw6IkJ4MgTxTFuy83io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:98:59:3d:34:c2:14:4f:14:30:64:b0:f9:5e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Jun 29 03:00:53 2026 GMT
Not After : Jun 30 03:00:53 2026 GMT
Subject: CN=cc2f02b83caf687b5fa27aade19d14dfa97c121d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:8a:b0:0e:bc:e1:60:a8:80:a9:fd:83:51:
cc:78:a5:4c:1a:8a:de:08:cd:5b:8d:09:b4:4a:d0:
c8:d9:a6:5a:af:51:f5:e2:21:f1:51:b3:54:63:23:
27:f9:c9:35:3b:74:6c:9f:5f:bc:69:6e:9f:36:61:
6b:04:9a:62:72:a0:22:7b:08:47:bf:a9:d3:8f:d7:
7b:45:d9:77:78:d2:6a:b2:79:c7:79:30:7c:b2:b6:
a1:80:0b:82:22:77:81:18:ec:e6:b7:bd:4d:01:d5:
9a:43:52:44:6a:47:77:17:fe:1a:d6:33:89:15:32:
a7:73:c3:4b:e9:3c:68:74:bb:5a:e3:0d:fa:36:9b:
72:1f:55:ff:29:9b:af:86:c3:9d:c7:2e:1d:dd:81:
14:ab:f0:14:97:4a:02:97:ca:ad:21:7a:24:82:44:
4c:96:b0:a6:a7:1f:c1:8d:2a:ba:49:ea:b9:40:c0:
10:fe:3e:af:93:81:9b:11:e9:18:8d:2c:fc:47:ef:
25:e4:30:63:d5:f0:f3:3d:a2:04:3d:2c:06:d7:12:
e9:4b:d7:52:fa:8e:c5:d6:49:96:e8:57:21:ef:32:
77:4e:bd:01:64:8a:1d:f7:3c:4f:d5:41:9b:e1:80:
66:00:1f:de:e3:b5:70:16:46:2f:7d:f7:be:11:8d:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2F:02:B8:3C:AF:68:7B:5F:A2:7A:AD:E1:9D:14:DF:A9:7C:12:1D
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e4:96:14:a2:33:12:de:86:22:d8:b0:19:56:bd:f2:9b:6e:
49:f0:f1:ae:de:b5:b0:f2:30:ce:e4:e8:5b:5b:fb:cb:3a:77:
27:ca:ce:fd:97:7c:e7:6e:40:80:57:0e:ae:fd:22:be:e4:4c:
d6:22:2b:18:78:59:da:f3:bc:21:f8:70:bd:ff:52:ef:1c:12:
0b:a9:0b:62:f2:73:a9:46:36:bc:a4:4b:e8:b4:40:27:04:36:
fe:1b:24:9f:37:2b:db:59:33:0a:70:7a:55:73:03:e0:5e:29:
2f:4b:b9:d0:f9:72:61:89:db:02:e5:ce:33:0f:11:4e:76:8d:
fc:e2:e6:a4:ce:0d:b5:7e:cf:07:95:5a:1c:4f:5d:6e:ae:2e:
87:5a:a7:8f:65:4b:ca:3a:9d:05:df:3c:ee:ae:fe:f7:15:81:
96:7c:f6:36:db:f8:37:0b:f0:c3:53:7e:b0:9e:7a:eb:6e:7d:
8e:0f:a6:69:7b:38:31:b1:d6:91:56:fe:fd:0b:11:6b:e4:20:
83:e7:b0:e8:30:3d:a1:ef:a6:e6:76:8c:7f:b4:1b:44:f9:1c:
5a:56:f1:8e:4c:65:0d:0d:5e:03:f5:9d:79:0a:e0:43:07:6b:
a3:d3:94:5f:a5:49:f2:1a:72:38:8b:d8:0e:6a:1a:df:0f:51:
4c:95:22:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:44:37 2026 by rpki-client