Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json)
Hash identifier: W6cG13BKC1jkOBdT4X2JAe+HnFWJfkXYH1emivjPx/0=
Subject key identifier: 44:5D:1B:53:B1:A6:23:67:CD:77:80:CF:4F:50:4B:4C:8F:37:52:AB
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 019E303BD10828914E304DE1AA63FE187012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
Manifest number: 0BDF
Signing time: Sat 16 May 2026 10:01:26 +0000
Manifest this update: Sat 16 May 2026 10:01:26 +0000
Manifest next update: Sun 17 May 2026 10:01:26 +0000
Files and hashes: 1: 6Qo_0tvV-nF1V3290tyCPcyJh_o.roa (hash: miQhI+W7erQXF0Elh5+jiDUej+PQhWgEiCLyU5iCciM=)
2: 9ookbD4ZU4VY6TDRIjyZKBvmQXI.roa (hash: M/Bs/iLa6unZww6rfQbsSA6jP0n4wnfBywF5HPWrEvA=)
3: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: hxO9mDfrfzF8vit3duZp1VDE9LRky4UVBIS76jtZgh0=)
4: IFrY2kkAzLqt5nU6H0jjg7fOnfs.roa (hash: 3jLeNihZ7jH0KElGLvHndCBcoZfJ8baWrI/MSc9FDOM=)
5: PgdFhXr4B5CibOVMVSzG8VZJbJI.roa (hash: ZVEiyh33egqUEszPE12gddvboVKjJ6wjLhbhT2yy81g=)
6: VwfnUo7iWGrwpmjYLkStkdsJWgc.roa (hash: 0vyTKG4s8Sxb6Vvga9d9VBfQgDaf6QryBCp9P8NqVAk=)
7: Wb0JFSc4Yv8IZMCTo-g4uUkinx4.roa (hash: QbARyoCiF4BxJCcobyg9rCwtMBorp1r1V7vAEHyauzY=)
8: czKDro5NX_B7iWJU3teZpH_MFjc.roa (hash: IaANvC54ocsGYfpcLfku3gzas0/nThyZNXREyxhjK4Q=)
9: sCTR8cDIH84F0OMO06djeXs_-PQ.roa (hash: ugj+brY/Z7Vee3VbgiQKLfHy9VAROXKxM5IhUTLTOGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:d1:08:28:91:4e:30:4d:e1:aa:63:fe:18:70:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: May 16 10:01:26 2026 GMT
Not After : May 17 10:01:26 2026 GMT
Subject: CN=445d1b53b1a62367cd7780cf4f504b4c8f3752ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:68:07:d7:6b:8c:3e:4b:61:b7:59:6b:97:
41:48:58:2c:1d:cd:50:74:eb:69:fe:4f:04:75:08:
22:13:7b:3d:81:cb:fe:d2:cc:33:0d:ad:98:ec:3b:
40:e5:84:47:f0:9f:e4:a7:6d:b0:05:c4:7a:74:27:
9e:dc:32:ee:0d:a9:ea:63:ff:69:82:a3:89:6c:c4:
ea:31:c7:7f:59:97:a4:63:ce:f9:ef:d4:97:a4:d6:
d1:5c:1e:fb:6a:54:52:2e:b1:a4:a6:4a:f4:bd:94:
91:5f:67:f8:92:cc:70:e0:80:79:1f:6e:22:f3:fe:
1a:45:30:00:b4:ba:71:6f:8d:a7:4b:a1:dd:1f:c5:
b3:28:b1:9c:ce:64:5c:62:00:8c:19:14:5d:b9:67:
37:c1:70:05:38:59:9b:67:e4:31:c1:d9:90:de:91:
48:fa:67:c3:7c:aa:4a:51:3f:12:8c:56:2f:78:77:
c1:38:b0:13:49:0c:13:a3:8d:d8:6d:b2:e9:56:7f:
7e:e8:5a:db:d0:81:1c:ab:b6:65:93:2d:82:ea:63:
86:55:a5:3e:e2:8d:64:bd:bc:62:a2:35:3d:a4:0d:
07:b8:97:b1:a7:4d:bd:1c:19:3d:9f:c6:b1:7a:75:
0d:31:c3:8b:09:40:57:2a:97:ee:94:6e:9f:f7:7a:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5D:1B:53:B1:A6:23:67:CD:77:80:CF:4F:50:4B:4C:8F:37:52:AB
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fe:4a:ee:7e:1e:ee:b4:8b:82:ef:f8:9a:a2:ea:3b:ff:25:
d7:02:0b:d6:77:f5:3e:fc:91:b0:5c:7b:c1:f0:23:e2:f3:50:
58:9c:f2:de:c7:90:bf:da:ba:a0:5f:ce:86:1d:75:81:51:85:
14:5c:e6:01:99:63:0b:5f:19:23:26:cd:28:6a:8e:1e:12:bc:
f3:ef:09:06:bf:ce:c2:86:a4:2e:06:bd:ec:9b:f8:73:19:7c:
8c:fd:9c:b8:6d:ca:d7:35:90:20:96:2e:a7:bf:10:d4:d3:80:
7b:ec:ad:0e:45:da:d7:c2:01:20:9e:ea:3f:08:f2:d8:9f:b2:
48:91:d7:d1:36:be:a4:b4:15:e4:c2:6f:42:74:66:af:9a:03:
8c:7e:2c:63:d5:a8:98:e0:43:bc:9e:00:95:1a:ad:26:fa:b3:
88:18:b0:aa:24:9e:de:5d:15:68:30:87:47:12:f2:15:4b:6e:
24:5e:72:91:b7:f2:07:e7:e6:ab:ba:10:42:a7:05:97:c0:de:
b9:f7:d9:6a:9a:b3:0e:76:c4:19:d5:17:82:65:6e:33:55:bc:
5b:29:e0:bd:9b:15:6e:2a:b1:96:f9:61:2b:72:b3:46:83:50:
e7:f4:24:c4:ee:7f:ee:e6:e9:7e:9b:28:58:0b:71:95:7e:e3:
8d:c8:d1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:21 2026 by rpki-client