Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: Rh09q0B2oYKcdALOkaUTFvEl2ro+Saqdr7h8NYxoXRE=
Subject key identifier: F4:0B:6B:26:8A:73:9D:BE:38:C0:14:43:22:33:CC:64:87:7D:0F:20
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 019E314E608B363B728FB41EA895F549ED66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 0891
Signing time: Sat 16 May 2026 15:01:20 +0000
Manifest this update: Sat 16 May 2026 15:01:20 +0000
Manifest next update: Sun 17 May 2026 15:01:20 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: RssY/EqLfL53h9yl2p3Pa4NLYjn6afGAYOdF8DN0vSM=)
2: wF_q_VT2vLpTBM5Oeqm7M9XsChw.roa (hash: aN3q8Drn260bx+eRQtUiCzDsSBkZm+NdLG36hflpNDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:60:8b:36:3b:72:8f:b4:1e:a8:95:f5:49:ed:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: May 16 15:01:20 2026 GMT
Not After : May 17 15:01:20 2026 GMT
Subject: CN=f40b6b268a739dbe38c014432233cc64877d0f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:cf:20:20:d2:cb:60:40:18:06:21:86:86:
b3:9c:72:87:4c:9e:6f:71:75:41:58:7d:81:a9:75:
27:ca:e0:45:45:09:1e:04:78:51:b3:0c:ef:dc:02:
9c:b8:49:3d:2f:28:c9:e5:f4:92:a2:7e:48:73:d9:
aa:6d:cf:3f:c8:d5:64:2c:39:42:d3:c3:8a:d3:72:
b9:4c:47:92:99:fd:26:86:cc:39:c8:ea:88:2a:82:
76:6d:81:00:88:e4:d4:ce:34:e7:90:2c:e9:3d:a0:
5e:bf:e8:db:d0:e5:99:d0:ca:c9:25:75:da:57:7d:
71:83:e4:0c:f7:da:7a:3b:45:ec:2d:a6:c9:cc:e2:
a3:e5:11:0c:a9:ea:63:75:24:86:39:f3:7e:97:9e:
29:37:f0:55:2a:6e:bc:c3:23:97:40:b5:48:7e:90:
e8:40:85:53:10:ea:c4:b2:f7:c5:bc:d3:0e:c6:eb:
76:08:6c:ad:0a:91:92:67:be:89:97:e2:da:9e:8f:
67:28:40:44:46:9e:1c:53:17:73:d0:4a:92:98:b3:
ef:4f:f9:e7:8e:1c:86:96:67:49:b8:63:98:af:8a:
ea:2e:5f:ca:25:d1:0e:4e:f1:c7:9b:bc:15:d7:e1:
86:f5:b9:30:80:4f:bd:d0:f0:97:75:d2:3b:35:5c:
fb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0B:6B:26:8A:73:9D:BE:38:C0:14:43:22:33:CC:64:87:7D:0F:20
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:89:da:65:78:e1:46:2a:19:aa:18:0a:86:62:18:49:dd:37:
e8:15:d5:71:30:75:0f:eb:f8:1e:48:87:17:bd:06:57:4c:07:
9e:da:d3:e8:56:ae:02:ad:b8:ff:2f:5d:80:30:11:ca:0e:6e:
4a:6d:e0:8e:5f:7e:53:70:7e:de:2a:5e:7e:db:d0:d9:2d:ae:
a3:3d:81:44:43:78:ae:9d:3a:10:b3:23:87:fe:ae:a0:77:c4:
de:95:26:c8:bc:b5:e3:9e:5a:25:4e:9f:c4:1f:6c:7a:d8:7a:
b0:b0:1c:46:06:80:b0:c8:66:16:e6:bb:6b:ee:0e:9f:5d:b2:
b5:1f:77:55:21:df:28:e7:89:aa:52:f2:88:e0:8c:c7:24:80:
6c:9c:c0:43:60:b8:e1:67:d2:41:22:08:3e:bd:3b:14:b8:34:
ce:84:80:57:d4:ab:e9:13:e4:e7:b1:6f:06:af:18:ee:fa:ac:
4d:ec:51:06:c8:0e:e4:45:69:3a:e7:ce:75:cf:d6:d9:85:6b:
96:56:23:c1:91:29:22:fa:72:7d:c6:3d:bd:7a:23:2a:cf:11:
79:5b:63:ff:96:ca:90:40:31:10:d0:bf:64:7c:fc:cd:9d:3a:
66:59:ee:8e:c1:9a:30:3c:0f:0f:bc:21:ef:2e:24:75:e6:b3:
8d:fe:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:17 2026 by rpki-client