Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
File: c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json)
Hash identifier: FMdDUO0r9S60MOC1j47dxVBvJ5wNjOhuZvTbonQvP5o=
Subject key identifier: 48:8A:BE:B3:42:39:52:D6:B9:FF:F1:D7:7E:8E:85:BB:F8:0A:89:08
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial: 019E8E00643F1F181AAA44F0892DCDC5F960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
Manifest number: 0654
Signing time: Wed 03 Jun 2026 15:00:50 +0000
Manifest this update: Wed 03 Jun 2026 15:00:50 +0000
Manifest next update: Thu 04 Jun 2026 15:00:50 +0000
Files and hashes: 1: NcnGkdErOmMk_0NOiHBMY1BqThA.roa (hash: PgvTT7EFBgrWeXVoNUr6zZBzW+dMw+OFLBnU00RhurU=)
2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: aWZxMf7FQluPVCUDYxwL+scWE73uNLyE/CXEDYrxM3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:00:64:3f:1f:18:1a:aa:44:f0:89:2d:cd:c5:f9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Validity
Not Before: Jun 3 15:00:50 2026 GMT
Not After : Jun 4 15:00:50 2026 GMT
Subject: CN=488abeb3423952d6b9fff1d77e8e85bbf80a8908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:65:90:84:34:d3:8c:20:5c:aa:d7:f4:8f:
da:9d:fc:f6:be:96:1e:b6:7f:3a:80:05:d3:2b:7d:
eb:a3:5f:04:4a:59:a5:96:86:19:05:19:88:89:bc:
99:3b:44:74:0f:5b:ac:27:53:fe:83:d1:10:6e:75:
9e:0f:62:4e:8b:c9:30:ee:85:ef:14:06:45:06:1d:
08:4e:3d:38:b2:17:3b:d3:f5:3f:14:a5:87:37:82:
b8:81:d5:df:ee:86:3c:da:97:91:b0:ca:95:69:9c:
03:0c:e6:21:8c:56:17:b1:95:a3:1f:50:a6:70:8b:
b3:8d:1a:70:70:4f:71:80:d5:59:a5:d2:8b:28:78:
3a:6e:48:27:90:b1:1d:3b:e0:31:24:cd:d0:c0:ad:
0b:97:10:27:44:3f:d6:c8:58:e1:a7:de:8d:91:84:
60:d7:4c:cb:b2:b7:a4:39:64:13:65:56:d8:9e:17:
fb:ae:8f:d3:90:5e:ed:a1:36:25:d4:b6:50:ed:0b:
fa:82:f3:6d:63:47:cf:59:96:97:6f:49:16:f4:4b:
dc:f0:f7:7a:c0:da:aa:b5:91:9f:c1:66:1b:c6:7d:
36:e1:4e:ba:1a:87:d1:1e:5e:d9:a9:31:48:e9:92:
ff:bb:b7:bd:2b:0d:df:14:e6:61:64:98:c9:82:6e:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8A:BE:B3:42:39:52:D6:B9:FF:F1:D7:7E:8E:85:BB:F8:0A:89:08
X509v3 Authority Key Identifier:
keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0f:38:ce:55:65:3d:48:9d:c0:3b:66:8c:18:8c:c5:8c:c6:
11:14:52:42:c8:2f:c0:7e:a4:ee:d5:6d:e1:20:33:7a:ab:e0:
d0:66:b6:12:cc:40:eb:2f:af:27:2c:21:3e:c7:ab:5e:4a:45:
65:24:6a:70:41:c0:0a:26:89:22:c7:fc:55:5c:f1:a8:57:75:
2c:44:38:a7:f0:ae:98:5c:ec:ee:c9:d7:f7:63:7a:a9:fd:16:
36:de:14:29:73:45:02:68:11:fc:33:3c:3e:4a:a5:8d:fe:7f:
e1:a2:56:61:6d:99:7b:bb:e8:f3:2c:7a:d5:f8:b3:97:83:7a:
78:45:2d:ce:b7:ce:39:6b:92:d5:83:2c:d4:3a:83:a7:a5:93:
a4:c1:28:9b:24:9d:56:39:32:db:f3:fc:90:89:2c:05:18:ae:
72:b1:fe:4c:06:4c:ca:a4:2b:f9:20:81:64:36:95:e3:8b:47:
18:f2:ab:6c:42:ad:92:57:19:31:ed:f0:0b:0f:e5:aa:9b:3e:
4d:3e:af:c8:cd:8d:70:09:2b:e3:9e:60:b9:48:e9:6d:7e:b8:
3c:c4:98:5e:eb:bd:10:30:c7:f1:99:0a:62:98:7a:bc:d7:aa:
e7:27:93:f2:7b:d5:d3:79:2a:f1:80:5b:fb:25:86:ee:78:f0:
1d:24:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:00:22 2026 by rpki-client