Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: ESWk30xk1Yz61q4LJa8j4sYDf701Gi0XLk6M+3uONE4=
Subject key identifier: C2:C6:E4:58:40:F4:0A:BE:8A:46:07:32:F6:DC:54:D9:FC:F4:E6:83
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 019E29CC3ED0774283B84BFD85536B539F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 0FBC
Signing time: Fri 15 May 2026 04:01:51 +0000
Manifest this update: Fri 15 May 2026 04:01:51 +0000
Manifest next update: Sat 16 May 2026 04:01:51 +0000
Files and hashes: 1: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: 82FTMBR9F6b8kjIQkO08Fa6HKzZ9lAPw65uOUPncSIQ=)
2: RAC2EIsVMHG6hRns7HbMn17gGls.roa (hash: FF3H1038Rgf//9+NtLOprCe/ZirTllG7HflUAk9dINQ=)
3: nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa (hash: iN63qFqYR+Oirh/aAc/OhTjdpHDfVt7KEG3Iws+eD0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cc:3e:d0:77:42:83:b8:4b:fd:85:53:6b:53:9f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: May 15 04:01:51 2026 GMT
Not After : May 16 04:01:51 2026 GMT
Subject: CN=c2c6e45840f40abe8a460732f6dc54d9fcf4e683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:3a:7e:0a:28:be:b7:52:0c:83:5e:05:8f:
f7:97:4f:50:b0:24:f8:9c:b1:cb:c0:ef:05:7b:7e:
23:37:a9:cf:c0:3c:79:cc:4e:2c:af:b7:59:b6:46:
02:11:f7:9d:1d:c9:b0:3e:d4:20:2a:20:48:98:a9:
4c:b2:f5:a5:8e:4a:96:39:37:a5:61:01:2a:08:49:
ef:a9:40:dc:a4:e2:55:ce:4a:77:1a:4d:d6:33:68:
64:42:24:8f:ae:df:d7:ae:73:fb:fa:d4:e9:07:c0:
e3:a9:df:0d:50:da:76:0f:88:6b:3e:52:94:35:f0:
1b:0b:39:df:b9:bd:fb:bf:3e:bd:b0:79:8b:fd:7c:
bd:d3:56:b8:45:12:ac:4a:92:cd:ef:67:7a:91:85:
00:ae:0b:d0:66:07:6f:5d:4e:b6:76:31:c2:05:9a:
d5:4d:d1:87:67:3e:3d:cf:f5:62:77:e0:b6:22:c3:
16:df:15:60:b4:b4:43:77:91:55:e6:96:14:45:22:
00:08:0a:b2:ab:cc:6f:64:29:09:33:c2:86:7a:99:
35:ce:35:23:6b:96:c7:91:bd:84:32:4b:32:e7:a0:
a9:4a:b5:1d:c1:ef:95:73:22:04:8e:c9:25:2c:18:
c3:3f:89:41:c2:f8:fe:a9:6e:a2:88:85:f8:1e:e5:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C6:E4:58:40:F4:0A:BE:8A:46:07:32:F6:DC:54:D9:FC:F4:E6:83
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:56:8e:38:cc:dc:c8:35:98:e9:90:70:5c:db:76:29:dc:e2:
da:f6:f0:18:11:a2:46:40:aa:58:62:b1:e7:8e:04:a9:83:f4:
07:61:6c:7f:74:f9:3a:96:ac:5f:fb:8d:4b:6b:25:a8:e6:c8:
fa:bc:a4:4f:ff:26:de:40:8b:3c:4b:1d:70:5a:7d:74:50:79:
2c:01:a3:35:56:ef:66:5f:b3:9a:5c:60:41:e2:a5:71:2d:bb:
f5:d5:ea:de:07:0e:5a:fd:6f:00:f7:b3:eb:30:99:aa:e8:9d:
cc:9c:d2:da:31:90:d2:80:ec:58:d5:d7:1c:95:0c:8b:0d:82:
b0:b6:6f:ce:b2:18:8a:78:34:51:08:d1:16:22:45:5a:37:ab:
a1:92:34:bf:bd:a2:ed:06:87:ff:9b:8b:b5:46:ec:5c:2a:27:
85:2b:d8:a2:c0:c1:7b:4b:98:d3:b4:16:47:b3:0f:07:db:1d:
4b:ab:0a:8c:49:ed:5d:69:47:e3:13:d6:a8:23:84:d1:e2:a5:
21:bd:7f:d4:5c:48:90:76:a8:ce:d0:3f:f8:32:22:b1:98:ba:
69:1d:86:53:9a:1c:01:fd:ba:67:b7:fe:4d:5c:6d:5a:e2:b6:
42:8f:58:9c:26:23:1a:a5:c4:12:48:23:93:0d:f4:2f:77:e9:
03:49:dd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:55:19 2026 by rpki-client