Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: LbEeAoXN+SswtP1PlaZ+7LokRjs/zmWqcBeJn+EYj5U=
Subject key identifier: 45:D7:FD:5D:0E:F2:E5:D4:D4:EA:B0:0C:4D:C0:F6:3D:FA:FA:1D:5A
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 019E2AA6FA81BAA83D85EA0E6391240D395D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 08B8
Signing time: Fri 15 May 2026 08:00:46 +0000
Manifest this update: Fri 15 May 2026 08:00:46 +0000
Manifest next update: Sat 16 May 2026 08:00:46 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: NtSr4sL+xRiDy/x/RsRm6/dzquVFWPXsfV31FlqIFF4=)
2: wiI82FzKN8vwB6F4isg7_RvCxHg.roa (hash: riiq1OTIvoc7oa6B3EfI2fFnF1gD9CxZmEkDu3QsQ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a6:fa:81:ba:a8:3d:85:ea:0e:63:91:24:0d:39:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: May 15 08:00:46 2026 GMT
Not After : May 16 08:00:46 2026 GMT
Subject: CN=45d7fd5d0ef2e5d4d4eab00c4dc0f63dfafa1d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:9e:7f:d4:89:9e:ac:4f:34:f0:ef:b3:0a:
f5:88:22:df:43:a8:98:0b:48:87:c5:8f:18:a0:6a:
2b:d4:e3:6a:5f:f2:79:68:20:6a:f3:24:53:0b:7b:
40:d6:ca:f2:ad:b1:25:07:6f:f1:4d:9d:c8:0a:4c:
83:04:52:1b:c5:bd:b4:74:68:d1:06:03:d9:fe:9b:
40:69:f3:5d:b9:9b:0a:d7:ea:93:c1:30:25:24:a4:
82:74:01:ef:2c:27:98:9b:c4:f3:de:9d:5a:c2:35:
d9:53:00:d2:34:05:d0:de:ca:88:16:7c:eb:27:64:
da:a3:4a:09:44:9a:6b:98:bb:e3:9b:75:5b:46:93:
f8:2c:a9:d7:a4:e8:0b:c9:59:e1:ed:98:f6:e1:a9:
34:ec:c8:36:c2:c7:d7:30:ee:7a:f3:ad:ce:07:d4:
bb:b1:80:12:4d:79:43:10:2a:c0:19:61:de:e8:39:
de:62:74:c1:be:69:84:68:d0:5c:b6:b6:52:6a:f2:
eb:7c:ba:b4:2b:9f:69:a8:42:02:53:ba:26:0a:3b:
00:b4:ce:dd:05:9b:b3:b2:e0:a5:60:8d:7c:d4:75:
70:be:83:2e:dc:5b:8e:d7:9e:85:b5:0d:ec:11:e5:
df:6c:2a:4d:73:e4:ea:85:bf:10:ea:36:5e:de:dd:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D7:FD:5D:0E:F2:E5:D4:D4:EA:B0:0C:4D:C0:F6:3D:FA:FA:1D:5A
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:75:af:16:ca:09:20:04:ac:e4:b9:bd:b3:ae:bc:9b:25:74:
fd:38:44:05:cd:50:ec:eb:57:e4:69:e0:16:57:54:72:54:68:
c5:43:11:4e:dd:b0:f8:be:29:20:13:2c:76:bf:be:6c:61:2a:
4e:44:52:7c:cd:b8:8f:1f:11:7e:2b:92:3b:43:a0:d2:4a:17:
23:ce:f4:44:16:a3:ac:60:ff:1e:ad:30:ca:bd:51:51:2e:d3:
f3:0b:81:47:f4:b6:ba:3c:c9:8d:e7:2e:92:bc:b4:58:59:2c:
6a:4d:bc:0c:cd:ca:81:28:a5:5a:ae:55:2d:92:ea:4b:d1:68:
3f:c2:72:17:52:c6:d9:13:c4:fd:ce:04:12:af:f8:1e:e0:5e:
82:36:f1:4a:e0:45:7a:26:f3:4d:7e:a4:0c:2d:72:c4:a4:13:
45:ec:08:ca:f0:52:4f:02:06:ce:56:94:fd:d7:ad:fc:bd:62:
ca:d1:c1:b9:38:9f:e2:8a:d7:c3:b7:8e:c6:7f:93:b1:2d:80:
86:35:af:ff:89:f1:e7:97:1f:c8:14:8b:d7:b9:3f:7e:8b:a1:
5e:83:7e:0d:2a:ed:66:8d:56:c2:d5:68:b1:92:82:9c:dc:27:
77:3d:c7:96:cc:22:2c:49:93:c8:de:28:3a:91:11:d8:c0:71:
c9:cd:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:19 2026 by rpki-client