Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: LIlkTadkWJD68siZUJLBi/765T3Occ4cgWnB3epssxY=
Subject key identifier: C1:20:99:A4:4D:B6:81:30:EE:D1:86:E7:BB:59:9A:92:0B:52:C3:4E
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 019E30A9AC124A0AB9351CE22A81F1E120DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 11D4
Signing time: Sat 16 May 2026 12:01:26 +0000
Manifest this update: Sat 16 May 2026 12:01:26 +0000
Manifest next update: Sun 17 May 2026 12:01:26 +0000
Files and hashes: 1: 7vuFGqZCxLzD91LmtcVrwRVipP0.roa (hash: exBwARjGLtxZJRWm9krMbKUblEEFQ4G0buGpMyQ+bjU=)
2: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: MdjYSlxgvtFQ6+tb7ZVUwP2Bo2OnW6JpgyeyfyAJnnE=)
3: achjIHDKww_TLSJu-NnrKxU3--A.roa (hash: GHcbBAVqUMC4lX8HAJJpjhpVUyf1FlS4/jLemAj83YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:ac:12:4a:0a:b9:35:1c:e2:2a:81:f1:e1:20:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: May 16 12:01:26 2026 GMT
Not After : May 17 12:01:26 2026 GMT
Subject: CN=c12099a44db68130eed186e7bb599a920b52c34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:f9:34:27:60:41:b8:f0:86:ff:1f:17:45:
df:ca:c1:86:80:34:bc:2b:d2:87:41:15:e8:bc:57:
ed:32:7c:3b:40:5f:bf:0e:67:e4:80:8b:7f:d3:8f:
1d:10:60:9b:f2:ca:b2:70:d2:cc:bc:37:94:83:57:
e9:44:76:59:56:c5:d4:b0:e8:ad:fd:93:b5:3b:a8:
00:b8:44:a0:33:de:11:48:4b:90:98:1f:f8:aa:dd:
43:40:92:35:3f:79:e5:7d:29:49:4f:93:65:29:53:
78:32:20:ee:30:69:d4:79:17:b3:98:fa:13:b2:5d:
56:e4:c5:68:74:45:ad:4b:98:d5:90:5c:aa:fa:8a:
3a:cb:1f:1e:7b:21:7b:27:b4:4a:ea:c1:ed:27:f1:
f6:2e:30:f1:0f:5d:35:37:6a:d2:f6:d0:00:82:fd:
9a:02:c7:94:c1:58:e7:f0:b4:12:ab:80:66:3a:99:
d1:0b:c0:37:28:11:79:cc:b3:a6:40:8a:5a:c8:58:
49:9a:ac:dc:ab:ec:eb:46:df:ba:7a:c9:60:38:b7:
7a:19:9c:00:bf:55:bd:09:ad:34:5c:92:af:7c:36:
39:57:31:30:74:61:95:3f:6a:10:48:bb:8e:de:ae:
97:23:b6:3a:71:81:69:37:cc:a4:4d:82:64:0f:51:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:20:99:A4:4D:B6:81:30:EE:D1:86:E7:BB:59:9A:92:0B:52:C3:4E
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f6:6d:17:82:ff:7d:6c:8a:67:3a:d7:cf:ad:1e:68:f3:85:
03:90:fc:0f:fc:86:8e:86:99:b5:62:b0:f8:79:e7:7b:f6:ca:
92:17:3a:0f:35:32:b2:e0:b6:71:6f:f4:31:65:04:48:97:29:
d8:38:d2:88:31:c9:6d:3b:83:93:8a:bd:87:76:43:af:7b:34:
29:18:60:19:8b:81:77:55:74:42:d0:2f:1f:61:c8:6b:bb:eb:
9f:27:27:7d:84:96:ad:44:00:ec:ed:c5:14:68:0f:75:7e:f1:
1c:27:b5:72:2e:69:88:ba:dc:b2:70:60:58:c3:64:d9:e9:c0:
b1:01:55:91:28:ff:26:7f:38:2f:02:12:a9:0a:4d:76:fe:86:
2d:e9:c6:b6:65:82:25:de:62:86:d5:0f:d1:bb:4d:a9:a6:db:
c9:c6:e5:30:d3:37:9f:b2:d0:11:91:43:9b:9c:f5:6d:9a:58:
08:58:2f:66:95:da:af:45:62:79:b0:3f:f4:b6:db:91:45:e9:
65:5b:76:b9:c8:35:f8:0c:41:55:f6:a9:ce:2a:20:aa:41:ed:
02:d3:31:20:fb:1b:67:4d:63:97:9e:5e:4c:fd:a1:e2:7a:a9:
da:46:8a:87:ed:bd:62:22:f0:ce:8d:1c:87:17:ca:52:91:6c:
e3:c8:1d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:45 2026 by rpki-client