Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier: E7RAY3cEzbUWKC20M7JVxYuSCqNG2noK+d4PYgYCLII=
Subject key identifier: 24:38:CB:8B:8F:50:75:17:E0:12:98:59:93:D9:BB:92:6B:7D:83:45
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 019E30DFF42DE4F33E012CE11B3EEF9F30C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number: 0FF2
Signing time: Sat 16 May 2026 13:00:43 +0000
Manifest this update: Sat 16 May 2026 13:00:43 +0000
Manifest next update: Sun 17 May 2026 13:00:43 +0000
Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: f8n6UAKlVvnvq8wKdrD6ySuVjvtBVCUXV6RTPoBTdKU=)
2: FpQImozb1WQPa7ynxxGnFSr06JI.roa (hash: ifQklYq1Q4YF5Y36wrzWjlvtYcLa+HxFkFPijteQsCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:df:f4:2d:e4:f3:3e:01:2c:e1:1b:3e:ef:9f:30:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: May 16 13:00:43 2026 GMT
Not After : May 17 13:00:43 2026 GMT
Subject: CN=2438cb8b8f507517e012985993d9bb926b7d8345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:98:db:dd:be:35:cc:c9:4b:26:1f:02:ee:
57:f4:98:b8:00:a3:58:47:d4:81:9b:3f:c8:45:38:
1e:1c:cf:22:84:8f:aa:69:c3:7d:bb:ff:fd:7f:94:
68:1d:27:26:99:28:63:b4:dc:40:bf:87:77:b7:c1:
e2:be:bd:ff:42:25:df:90:01:20:2e:48:17:c8:d7:
a1:be:37:58:2a:88:ee:df:13:88:0d:28:60:fa:e1:
cc:b0:c1:c3:38:d6:f2:00:5c:99:91:52:71:bf:0e:
80:b7:3d:33:2d:3c:0e:63:cd:3a:94:47:01:bb:98:
e6:66:08:4f:be:90:4c:5b:93:43:72:1e:a7:96:c7:
a1:03:a4:1b:91:0e:c7:59:3e:ba:d5:16:b3:b8:5e:
b3:f2:6d:76:c2:6d:2b:8b:1b:8a:32:98:cc:8d:9a:
40:70:e4:d3:07:df:e6:86:14:44:a8:2c:22:8c:53:
de:e8:b9:23:ae:4c:36:ba:0f:78:30:e4:71:4a:02:
c8:bc:42:5f:5e:fa:fc:aa:4b:85:5b:01:7b:a5:02:
cc:ce:76:2a:37:16:87:7d:89:db:c6:4b:3d:9b:0d:
80:11:89:05:bc:90:91:f4:c7:0c:d6:7e:c4:a1:7b:
92:d9:c2:51:2d:33:62:ca:95:75:23:99:df:39:f5:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:38:CB:8B:8F:50:75:17:E0:12:98:59:93:D9:BB:92:6B:7D:83:45
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:dc:34:3d:03:6f:26:f4:59:3a:7e:17:c3:ce:92:68:18:c7:
1d:16:73:25:e7:a4:54:22:b9:40:d9:d1:a7:d1:df:84:9b:74:
39:b3:61:d0:51:56:f9:b7:40:7f:e6:e6:17:0d:42:65:72:e0:
02:de:fa:b9:94:73:07:62:5f:f7:9e:53:1b:63:9f:a6:b0:6e:
5a:4a:33:89:15:d0:98:19:9d:45:97:8b:f1:67:f1:36:1a:91:
d1:b2:29:03:ab:4d:64:a4:a2:e9:08:99:9f:5f:5f:47:6d:8c:
3d:72:1c:8a:b3:71:db:fc:a6:69:af:08:b0:b1:fd:cf:32:4b:
c8:2c:f2:2f:cd:a4:57:0e:1e:39:cc:df:d9:3d:9a:e5:a4:75:
56:28:36:a1:93:e0:45:50:57:b6:23:ee:e5:ce:08:39:c7:fe:
5a:e4:8c:4e:4b:65:a1:8e:d6:8a:82:b3:a8:5d:62:42:ea:61:
a0:23:26:48:81:eb:aa:84:5f:3d:8f:30:ed:0f:bb:03:b8:d9:
71:98:10:a0:50:80:9d:52:b0:9e:57:18:c1:d6:63:be:ed:f9:
17:ad:60:1c:ca:ac:72:bd:ae:4d:fd:0d:fa:40:36:47:75:2e:
8b:b6:d8:a5:26:ae:5d:41:43:9e:37:ab:9a:ed:0e:f3:97:43:
31:61:62:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:11 2026 by rpki-client