Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: DopyqzZLNukdCVNZgcdbUWT0f49xQ8gefTJLmklQJ7I=
Subject key identifier: 78:76:BB:15:2A:59:1A:1E:65:B4:DC:67:B4:4A:E3:78:4D:0F:67:A4
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 019F1943E98DD073089761712627BA5A3838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 14C9
Signing time: Tue 30 Jun 2026 16:01:48 +0000
Manifest this update: Tue 30 Jun 2026 16:01:48 +0000
Manifest next update: Wed 01 Jul 2026 16:01:48 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: 23vQoI+5VyQMZ+3oMKsP8c5+0efQZKN7b1g2pActv0w=)
2: EMaV_sDtEC3ONnRr_ZacRZkjYek.roa (hash: uEhrTJgtxikjiJZwpMeYSv1aaXx9clVq4b4CFPBvQgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:e9:8d:d0:73:08:97:61:71:26:27:ba:5a:38:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Jun 30 16:01:48 2026 GMT
Not After : Jul 1 16:01:48 2026 GMT
Subject: CN=7876bb152a591a1e65b4dc67b44ae3784d0f67a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cc:1c:03:c3:a9:33:de:da:80:76:f2:21:9f:
66:2b:41:de:10:a1:07:7a:d7:e7:7d:4d:56:1d:3c:
28:53:77:ef:d6:7b:3c:98:3a:09:a8:93:a8:90:41:
b8:53:a9:ae:a9:20:27:25:8c:21:84:80:16:59:e6:
da:f6:f1:2e:0d:03:6e:b4:67:82:d6:84:22:9c:c4:
cd:e5:d6:bf:9a:5c:1a:c5:31:d3:44:0e:2c:d7:1e:
f2:91:00:99:39:0f:5f:48:d8:08:96:12:ef:44:7a:
81:79:ef:0b:df:00:7d:86:0b:a2:aa:8d:ab:2a:b4:
75:28:a1:d5:44:59:10:9b:13:51:33:1b:7e:ed:90:
8d:e4:ac:c3:42:63:dd:19:1b:e6:14:63:1b:7f:67:
96:eb:05:a0:b2:d1:44:ea:96:ed:06:84:e9:6e:dc:
b9:c8:d5:df:c6:1a:d0:00:ed:10:c4:bd:be:09:7b:
7d:ab:69:b8:99:a2:0f:0b:ab:7c:f3:82:d6:09:5c:
6a:ad:60:c6:80:e9:17:2c:52:36:11:50:a8:34:94:
8c:c4:57:f5:78:55:9e:2b:df:75:6b:90:02:6b:43:
35:bc:fc:67:fc:63:be:5f:2a:05:a7:a2:bd:28:99:
3f:50:56:a9:b9:ca:71:46:e0:ea:9f:9a:c6:9f:25:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:BB:15:2A:59:1A:1E:65:B4:DC:67:B4:4A:E3:78:4D:0F:67:A4
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:16:82:ea:d7:3a:eb:1e:8c:a6:76:29:59:78:ef:9b:9c:5d:
e9:a5:ab:b1:e0:98:6d:da:a4:68:9d:35:9d:f8:5f:d9:c3:63:
d6:b4:d8:fa:79:d0:32:fd:89:4d:8c:9e:1d:6b:97:67:47:98:
c2:72:f4:f0:a1:d6:32:84:79:14:cb:69:f4:70:73:e2:30:d3:
f1:29:92:7a:7d:56:c5:73:b0:59:f2:04:f6:46:97:e6:a6:a3:
d8:9b:3b:6e:17:f0:d9:64:b8:ed:b8:4c:f9:b4:42:94:e7:22:
08:db:b5:ed:86:9c:b9:44:3e:8c:5d:85:22:89:43:eb:75:e8:
76:df:27:cf:73:26:92:02:67:9a:5c:7e:14:5e:9f:5b:d7:f8:
40:1e:ce:5c:8f:99:5b:67:f2:a3:35:15:96:5b:33:74:12:39:
d9:70:52:ec:ae:36:e6:ef:1f:ac:c2:de:7b:92:73:12:fa:5a:
fc:55:7a:91:e0:c7:7a:b6:a4:3b:04:2d:74:c6:88:06:e4:34:
84:d1:48:91:91:04:41:f9:de:62:6a:05:88:d8:e6:ca:88:80:
b8:4a:01:1c:c6:a0:81:f3:ee:32:46:a2:ad:31:94:f4:c2:c6:
e0:a5:14:3f:d3:11:28:87:80:28:e3:a4:8d:b9:0c:2f:b8:07:
b0:81:06:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:16 2026 by rpki-client