Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: uM1sTVdirqW/ReKSENRTOA3wP5Pbv0zCJvv1UElWma4=
Subject key identifier: 8B:4D:F0:4E:EB:AD:4C:D3:9B:E8:83:2D:00:CC:A1:05:29:BE:64:74
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 019EB87D2232E1913D9561E31F35066D9B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 10C4
Signing time: Thu 11 Jun 2026 21:01:08 +0000
Manifest this update: Thu 11 Jun 2026 21:01:08 +0000
Manifest next update: Fri 12 Jun 2026 21:01:08 +0000
Files and hashes: 1: 4-1jTpLuCOAg2Vrbi_YFCr92v_4.roa (hash: fO6SjPHBF8aFGKNbO8o4HrubgQPH9aKLn7J3+znKEj4=)
2: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: BzxOEw2tQItHGQ0+Kk3YCmRp8/EIb+USY7zamDm2bZQ=)
3: Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa (hash: ArKoVR1HvT27XmVZlqzha6BxLY/5mnRJvZnwQwU+NF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7d:22:32:e1:91:3d:95:61:e3:1f:35:06:6d:9b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Jun 11 21:01:08 2026 GMT
Not After : Jun 12 21:01:08 2026 GMT
Subject: CN=8b4df04eebad4cd39be8832d00cca10529be6474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:ba:d8:1b:ae:09:ee:50:07:0e:b6:d4:8e:
77:d5:42:33:fc:82:e1:d6:9f:aa:7a:9c:bd:ce:68:
0e:ab:8e:b3:5e:4f:8a:b1:48:6f:7a:80:79:ee:3c:
4f:83:f3:e7:00:85:84:4d:a9:31:08:c8:4e:90:4e:
35:74:ea:9d:8a:eb:78:8d:a0:cb:8f:b9:54:fd:44:
da:44:39:5d:dd:b1:92:d0:44:bf:e9:0b:a7:f7:bc:
8b:38:4b:1e:11:91:68:12:cd:9b:c3:7d:f9:c0:8f:
d1:ae:a3:a2:14:79:14:af:be:e5:2e:46:a6:9d:f1:
e6:cf:b0:08:00:a5:e9:92:2e:63:6d:9e:5c:84:dc:
74:b6:b3:cf:2b:0d:62:c9:89:87:07:bc:87:c2:98:
15:62:ac:ae:db:86:20:37:d4:80:4d:f9:55:11:c7:
2f:e5:4e:23:86:e8:99:1e:ab:57:bf:ea:91:1e:8e:
91:65:f7:06:90:02:a8:35:57:f5:75:90:78:8b:6d:
21:86:93:34:bc:c7:4a:41:bb:1a:29:e6:64:c8:b2:
b1:fb:c1:99:e4:33:a2:ed:da:58:1b:af:41:6b:23:
a4:7a:21:c7:19:6f:7e:ed:66:7a:e6:a9:f2:7f:d7:
c6:51:6f:f7:7d:76:e1:b1:e5:73:92:1b:98:8d:82:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4D:F0:4E:EB:AD:4C:D3:9B:E8:83:2D:00:CC:A1:05:29:BE:64:74
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:11:ec:4d:63:c4:f2:52:56:8a:ef:e7:0d:c1:4a:0a:03:a5:
f9:3c:af:22:47:7d:cf:30:f4:ec:45:5d:8b:57:f5:f9:08:3c:
d5:9a:94:90:bb:72:dc:38:4e:a4:15:5b:92:5d:b9:62:0f:f1:
a8:b8:79:d0:ba:88:2e:eb:b1:3c:97:9c:27:6e:3c:a3:90:10:
e4:dc:e4:c1:f2:22:6c:53:fa:6c:4c:a3:05:d5:9b:d3:02:de:
92:24:61:22:d9:fb:a6:79:7f:59:3e:0a:62:e7:36:84:4b:b9:
5c:0b:59:c5:04:0d:b6:18:5d:f8:de:49:b5:71:2f:eb:65:7d:
2c:a1:d3:f6:e8:f2:69:d5:9a:b8:90:c2:fb:27:47:7e:4e:06:
c9:ff:d2:dd:66:3f:11:62:33:56:90:39:ad:71:67:4c:86:1c:
34:b8:e3:4d:71:50:3f:7a:42:d2:d1:57:c8:8b:7f:16:22:21:
a7:5d:d5:d8:ec:12:45:19:fd:b4:e7:f9:4b:80:21:9a:98:34:
b4:9a:9e:87:c9:bd:54:7a:44:79:cc:84:3e:02:88:49:45:cc:
f1:fe:d6:71:9f:5b:9f:fc:31:dc:0b:84:bb:8e:ce:d0:9f:fe:
9f:d2:8d:a3:28:eb:6f:9b:dc:06:b1:d4:0c:a8:bd:18:f1:40:
20:9f:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:49 2026 by rpki-client