Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier: q5dO0ChwNTI9XVzP0hZpYDvHmN8p96koGkloXA3t3rk=
Subject key identifier: A6:EB:44:31:9F:0C:A5:20:57:E1:77:D2:3F:A1:D8:A2:10:6F:93:AD
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 019F189E02163B71C331E5D1B4EAE293645F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 13:00:36 +0000
Manifest this update: Tue 30 Jun 2026 13:00:36 +0000
Manifest next update: Wed 01 Jul 2026 13:00:36 +0000
Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: nCNf4mxfBphCIO0x4we5FVGsAxHkDe/EoxKjVco4Xiw=)
2: 9g90EbWmc6BJchDyUX4pQOV_PqM.roa (hash: 5bDGEQi2LTAictj/wkSLC8c8gl+A2erEIQu+tlRO84s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:02:16:3b:71:c3:31:e5:d1:b4:ea:e2:93:64:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Jun 30 13:00:36 2026 GMT
Not After : Jul 1 13:00:36 2026 GMT
Subject: CN=a6eb44319f0ca52057e177d23fa1d8a2106f93ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:a7:21:d2:f8:85:94:66:a9:db:ef:bc:6c:
38:72:1c:ce:52:65:1d:74:bf:7b:b7:66:44:7a:b8:
df:20:33:8b:58:d2:7f:68:28:77:1b:0e:19:40:08:
74:90:99:ae:82:3f:a6:29:b4:2e:db:ac:76:72:08:
13:72:0b:b6:3d:2f:e7:89:2f:15:28:b3:0e:3d:2b:
cb:7d:86:90:ed:ef:7e:1e:1e:28:5e:c5:6b:4f:ed:
34:d2:00:0d:32:16:0a:98:24:80:a3:46:87:43:35:
54:19:ac:b2:c5:6b:85:58:d9:9e:df:80:f4:90:48:
47:47:62:7a:ca:85:fe:80:0f:25:42:d4:5d:77:43:
88:87:ca:c0:6d:9c:ef:f9:1b:1f:4d:48:e6:dc:32:
81:fe:f7:3e:64:fa:41:2e:b0:bc:58:58:1b:4f:ad:
1c:b2:88:d7:17:f6:73:ab:82:5b:15:7d:c1:07:37:
96:90:18:ca:c3:d1:4d:46:02:33:15:67:a6:d9:84:
16:d9:7f:ac:c8:a9:a4:30:cc:44:da:1b:50:10:cf:
0e:a6:d4:f5:15:06:8b:8e:10:8e:b1:d9:72:7b:d9:
6c:e1:c1:dc:c3:6b:a9:49:65:e0:34:1f:3f:0f:70:
9a:5d:ca:8c:88:ae:10:6f:6c:60:b4:b7:86:e8:21:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EB:44:31:9F:0C:A5:20:57:E1:77:D2:3F:A1:D8:A2:10:6F:93:AD
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:76:db:22:57:10:a8:a6:06:db:36:d8:90:bb:4d:4d:45:0e:
e0:95:33:71:80:c3:cf:ed:12:b5:81:a7:90:22:2c:1a:9c:7e:
e4:5e:5a:dc:87:d7:b6:ac:af:3a:db:b4:d7:38:9c:07:71:fa:
24:1c:ca:59:b8:c1:e4:20:ee:1e:54:e8:41:bd:98:4f:7b:c3:
1b:be:8c:ed:54:ad:47:c7:26:90:15:31:2e:b7:f5:5c:ed:5e:
bd:f1:5e:ec:f1:b2:a8:83:49:36:f2:fb:a6:2c:0b:1d:2a:e4:
47:a5:89:a9:e6:d3:73:45:aa:16:d4:b7:13:14:15:21:cd:f3:
e8:d9:db:d5:83:39:87:6a:52:19:44:5d:11:fe:bd:7c:dd:c3:
09:78:fe:4f:cf:ad:ff:7c:d3:72:f3:8e:11:c0:ac:27:7a:4d:
74:ed:40:ee:b1:06:87:fe:01:38:a7:23:d5:5f:51:2d:1b:d0:
ee:87:86:b2:63:c3:ce:c9:2d:68:f6:07:d7:e7:b1:a3:45:8c:
26:14:85:44:37:c1:da:8b:dc:a4:d0:51:8b:24:cf:90:66:a8:
15:aa:14:45:67:ec:ca:79:2f:ab:a3:d0:b2:0d:84:84:fe:9e:
c5:32:0b:90:d5:74:c5:cd:81:f1:ce:6b:86:4b:d9:50:6c:4c:
ec:bf:9e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:43 2026 by rpki-client