Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: xpPyAFCDGJgI2lG4UbXJ+1d5F29kQGc1lweU7hJtLVw=
Subject key identifier: 5B:8D:8A:98:B6:ED:DB:AF:7A:EE:06:2C:77:8C:23:A6:A8:11:90:D6
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 019F12650BE298249440DF020F4EB7FB6829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 0930
Signing time: Mon 29 Jun 2026 08:00:39 +0000
Manifest this update: Mon 29 Jun 2026 08:00:39 +0000
Manifest next update: Tue 30 Jun 2026 08:00:39 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: rd5Wxnn3ygv4bBlFCaf5WhVflfs9wg/6bWiQDwwJCLc=)
2: wiI82FzKN8vwB6F4isg7_RvCxHg.roa (hash: riiq1OTIvoc7oa6B3EfI2fFnF1gD9CxZmEkDu3QsQ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:0b:e2:98:24:94:40:df:02:0f:4e:b7:fb:68:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Jun 29 08:00:39 2026 GMT
Not After : Jun 30 08:00:39 2026 GMT
Subject: CN=5b8d8a98b6eddbaf7aee062c778c23a6a81190d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:40:ec:aa:bb:f0:dc:fe:52:db:88:8f:f1:
33:70:d2:ab:51:1c:4d:d8:6b:3a:7e:d2:22:a0:f1:
5b:dd:fc:e7:32:64:a3:c0:3c:69:e2:7a:dc:74:c0:
b5:02:2a:18:06:bb:00:d1:98:0d:b5:5e:dd:8d:57:
eb:19:5b:ed:11:30:a4:51:63:b2:f6:66:d5:07:fb:
ca:ba:13:d0:8b:66:3c:28:f6:e4:01:e4:6e:05:54:
85:de:18:a5:3a:16:c0:c8:67:8a:a1:69:42:0c:b2:
3c:5e:33:fa:5c:b6:4e:a7:f8:26:ff:89:a7:02:72:
63:c6:0d:71:49:48:17:1f:ae:c3:d7:ef:38:c5:fe:
c7:54:44:cd:3e:13:a4:bc:9f:7e:cd:75:92:c0:f3:
47:b6:6b:0b:d9:af:ec:71:7d:b4:c1:ea:88:15:4d:
d0:03:51:22:29:76:cd:2e:5c:ba:8a:62:8e:02:11:
60:4b:42:02:da:84:b5:34:0b:95:9e:6c:ad:72:e9:
7d:ba:98:c4:54:76:84:15:68:7a:07:7e:3c:7e:5e:
36:76:e1:11:04:d3:3d:a7:e1:8f:d2:6d:ed:a4:2b:
92:df:05:b0:7d:67:5d:e4:ee:11:da:d1:e3:da:96:
9e:71:eb:ec:a7:7c:7f:9a:ae:d7:bc:85:73:64:f5:
52:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8D:8A:98:B6:ED:DB:AF:7A:EE:06:2C:77:8C:23:A6:A8:11:90:D6
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:92:5e:4d:78:54:d4:36:a3:80:91:3b:56:1f:b4:c1:b4:52:
13:13:92:f9:1b:dd:32:76:fa:f2:d3:4b:30:82:33:dc:67:32:
89:59:8d:2b:33:43:0b:8a:4b:55:66:99:c3:fe:c1:35:e5:62:
cf:df:e3:2b:3d:92:f3:d1:77:e4:07:7f:8e:7c:f4:10:ec:95:
c5:1b:29:b6:4e:d1:e9:b5:a4:aa:00:0b:5d:7b:df:33:d0:a0:
df:3f:cc:33:33:32:1a:b0:86:b4:d5:ec:29:28:df:3f:b4:75:
4d:a5:57:a6:fb:01:d4:3e:90:b1:11:73:08:5b:0f:38:b4:91:
c2:06:f9:35:da:b8:1e:79:67:c7:55:cf:eb:f3:39:08:92:db:
7b:68:5b:82:a5:a1:98:21:6f:8d:30:00:91:15:2c:32:31:b5:
04:7c:7b:1a:61:3f:b1:d5:07:7c:7c:44:69:a6:6a:e1:e6:1e:
95:33:87:e4:71:ea:9b:20:80:75:61:7a:5a:61:79:c7:43:1e:
a8:b0:0b:f9:cb:1a:bc:a4:d3:48:e4:63:f5:53:7f:43:4b:c9:
e5:7a:e5:61:f4:6a:fd:65:72:13:c7:08:a6:82:17:21:8e:e1:
0d:71:84:18:92:14:dc:7f:6f:cc:3d:1b:c4:1f:15:7c:22:24:
19:f9:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:46:17 2026 by rpki-client